Function zebra_chain::sapling::keys::jubjub_group_hash

fn jubjub_group_hash(d: [u8; 8], m: &[u8]) -> Option<ExtendedPoint>

GroupHash into Jubjub, aka GroupHash_URS

Produces a random point in the Jubjub curve. The point is guaranteed to be prime order and not the identity. From zcash_primitives.

d is an 8-byte domain separator (“personalization”), m is the hash input.

https://zips.z.cash/protocol/protocol.pdf#concretegrouphashjubjub