Plonk Prover Round 5 的一个问题 #77
Answered
by
cyl19970726
cyl19970726
asked this question in
Q&A（提问题在隔壁~）
-
|
|
Beta Was this translation helpful? Give feedback.
Answered by
cyl19970726
Apr 28, 2023
Replies: 1 comment
-
|
In order for the verifier to be able to reconstruct the commitment to R, it has to be "linear" in the proof items, hence why we can only use each proof item once; any further multiplicands in each term need to be replaced with their evaluations at Z, which do still need to be provided |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
cyl19970726
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In order for the verifier to be able to reconstruct the commitment to R, it has to be "linear" in the proof items, hence why we can only use each proof item once; any further multiplicands in each term need to be replaced with their evaluations at Z, which do still need to be provided