From discussion; fix Extract so that it now depends on Σ-protocol