fn jubjub_group_hash(d: [u8; 8], m: &[u8]) -> Option<ExtendedPoint>
Expand description
GroupHash into Jubjub, aka GroupHash_URS
Produces a random point in the Jubjub curve. The point is guaranteed to be prime order and not the identity. From zcash_primitives.
d is an 8-byte domain separator (“personalization”), m is the hash input.
https://zips.z.cash/protocol/protocol.pdf#concretegrouphashjubjub