Skip to content
This repository has been archived by the owner on May 18, 2023. It is now read-only.

docs(standard): Document how the r_0 calculation differs from the paper #15

Open
Maddiaa0 opened this issue Mar 22, 2023 · 2 comments
Open

Comments

@Maddiaa0
Copy link
Member

Overview

Elaborate on the reasoning for why the implementation differs, issue created off the back of this recent comment from lasse.

                // @note that our r_0 looks different from the paper.
                // This related to the public input delta that we mentioned earlier.
                // So we are replacing PI with (z̄_ω - ∆PI) * L_n * α^2.
                // @follow-up Elaborate on this replacement
                // @note that our r_0 differs on the power of alpha from the paper. The alpha is a challenge
                // so having a different challenge is fine, as long as both verifier and prover use the same.

@Maddiaa0 Maddiaa0 changed the title docs: Document how the r_0 calculation differs from the paper docs(standard): Document how the r_0 calculation differs from the paper Mar 22, 2023
@LHerskind
Copy link
Collaborator

This section should be altered when the verifier is unrolled. Don't work on before that is done.

@LHerskind
Copy link
Collaborator

Also got a comment with

let r0neg := sub(p, mload(R_ZERO_EVAL_LOC)) // Change owing to the simplified Plonk @follow-up

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants