breakfaest

I heard that you could use VOLE-in-the-head to make post-quantum signatures. Here's a signature scheme based on the Poseidon hash function. Can you create a forgery?

Hint to narrow the bug search: volonym's zero knowledge proofs are vulnerable, and can be forged for arbitrary statements.