Verification procedure: B verifies A‘s signature of (m,s) by computing u=VA(m,s), and only accepting the signature if u=true.