Note that now that Alice's private key is used, it should never be used again.
Note that prior to Alice publishing the signature of the message, no one else knows the 2×256 random numbers in the private key.