In the following proof sketch, how Eq (9) and Eq(10) are rewritten?

41 Views Asked by At

I am trying to understand the UF-CMA and UF-NMA proof sketch of Dilithium Signature Scheme. I can't understand how the authors have used the outputs of the helping function to rewrite Eq (9) and Eq (10).

Helping Functions

Lemma 1

Equations