M = hash_to_curve(Hash("M AND N SPAKE2"))