Context: verify_nullifier.circom#L214-L219, verify_nullifier.circom#L72

Public key is compressed twice which results in more constraints than required.

Recommendation: Use the compressed public key for calculating the hash for c, although it makes the code complicated.