SignDerived(d, label, message): zkey := d * G PRK_h := HKDF-Extract("key-derivation", zkey) h := HKDF-Expand(PRK_h, label || "gns", 512 / 8) d' := (h * d) mod L return Sign(d', message)