zec
/
halo2
mirror of https://github.com/zcash/halo2.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Relocate x_5 challenge sampling location to simplify logic.

This commit is contained in:
Sean Bowe 2020-10-15 17:11:06 -06:00
parent 123cacc7cc
commit 685bf79613
No known key found for this signature in database
GPG Key ID: 95684257D8F8B031
2 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/poly/multiopen/prover.rs
View File

@ -32,6 +32,7 @@ impl<C: CurveAffine> Proof<C> {
I: IntoIterator<Item = ProverQuery<'a, C>> + Clone,
{
let x_4: C::Scalar = get_challenge_scalar(Challenge(transcript.squeeze().get_lower_128()));
let x_5: C::Scalar = get_challenge_scalar(Challenge(transcript.squeeze().get_lower_128()));
let (poly_map, point_sets) = construct_intermediate_sets(queries);
@ -77,8 +78,6 @@ impl<C: CurveAffine> Proof<C> {
}
}
let x_5: C::Scalar = get_challenge_scalar(Challenge(transcript.squeeze().get_lower_128()));
let f_poly = point_sets
.iter()
.zip(q_eval_sets.iter())

10
src/poly/multiopen/verifier.rs
View File

@ -34,9 +34,13 @@ impl<C: CurveAffine> Proof<C> {
// with it to make it true, with high probability.
msm.scale(C::Scalar::random());
// Sample x_4 for compressing openings at the same points together
// Sample x_4 for compressing openings at the same point sets together
let x_4: C::Scalar = get_challenge_scalar(Challenge(transcript.squeeze().get_lower_128()));
// Sample a challenge x_5 for keeping the multi-point quotient
// polynomial terms linearly independent.
let x_5: C::Scalar = get_challenge_scalar(Challenge(transcript.squeeze().get_lower_128()));
let (commitment_map, point_sets) = construct_intermediate_sets(queries);
// Compress the commitments and expected evaluations at x_3 together.
@ -70,10 +74,6 @@ impl<C: CurveAffine> Proof<C> {
}
}
// Sample a challenge x_5 for keeping the multi-point quotient
// polynomial terms linearly independent.
let x_5: C::Scalar = get_challenge_scalar(Challenge(transcript.squeeze().get_lower_128()));
// Obtain the commitment to the multi-point quotient polynomial f(X).
hash_point(transcript, &self.f_commitment).unwrap();