Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

question on the slight different round 1 from paper #20

Open
NOOMA-42 opened this issue May 22, 2023 · 1 comment
Open

question on the slight different round 1 from paper #20

NOOMA-42 opened this issue May 22, 2023 · 1 comment

Comments

@NOOMA-42
Copy link

NOOMA-42 commented May 22, 2023

I wonder why do the implementation ignore the Z_H in round1 prove

The protocol on paper is as follows
截圖 2023-05-22 下午4 34 23

edit:
In MIT plonkathon recording, speaker said Z_H is intend to be omit for simplicity. Round 2 similarly omits k_1 as, below
截圖 2023-05-23 上午10 56 17

My question is how to know which to be omit without impact on correctness?

@mmurrs
Copy link

mmurrs commented Mar 28, 2024

My thinking is $Z_H(X)$ can be omitted as it is the vanishing polynomial, meaning it will evaluate to 0 at all points in the subgroup as multiplying by it would not result in a change of value during the construction of A, B, C

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants