You can use 128 bit challenge for the PoK (give up batch verification)

Oh that’s interesting. You reveal the bytes *with* the PoK. Ok then I raise you: We use BLS where the PoK is deterministic.

.