kv*r*Ks = rKv = kv*ks*r*G
kv*ks*r1*G; r1 = r + h(rG,t)
kv*ks*r2*G; r2 = r + h(rG,t)

t is output index; record base point rG