0
The other answer does not detail how to make the result in $\mathbb Z_q^*$, and that was unclear to the OP. Since $q$ is prime, $\mathbb Z_q^*$ is the integers in the interval $[1,q)$. In the paper's example, $q$ is a 192-bit integer¹. We can use a much larger hash function such as SHA‑512 (or ev...