From cc6b0bb7f26788ede3f1f7ac1871a89583b6a8aa Mon Sep 17 00:00:00 2001 From: Sean Bowe Date: Wed, 13 Jan 2021 15:24:44 -0700 Subject: [PATCH] Rename blind to \xi for consistency. --- src/poly/commitment/prover.rs | 2 +- src/poly/commitment/verifier.rs | 16 ++++++++-------- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/src/poly/commitment/prover.rs b/src/poly/commitment/prover.rs index ef51f108..7c043cc1 100644 --- a/src/poly/commitment/prover.rs +++ b/src/poly/commitment/prover.rs @@ -140,7 +140,7 @@ pub fn create_proof>( let a = a[0]; transcript.write_scalar(a)?; - transcript.write_scalar(blind)?; + transcript.write_scalar(blind)?; // \xi Ok(()) } diff --git a/src/poly/commitment/verifier.rs b/src/poly/commitment/verifier.rs index 1d956c64..f902c378 100644 --- a/src/poly/commitment/verifier.rs +++ b/src/poly/commitment/verifier.rs @@ -119,23 +119,23 @@ pub fn verify_proof<'a, C: CurveAffine, T: TranscriptRead>( // Our goal is to open // msm - [v] G_0 + random_poly_commitment * iota // + \sum(L_i * u_i^2) + \sum(R_i * u_i^-2) - // at x to 0, by asking the prover to supply (a, h) such that it equals - // = [a] (G + [b * z] U) + [h] H + // at x to 0, by asking the prover to supply (a, \xi) such that it equals + // = [a] (G + [b * z] U) + [\xi] H // except that we wish for the prover to supply G as Commit(g(X); 1) so // we must substitute to get - // = [a] ((G - H) + [b * z] U) + [h] H - // = [a] G + [-a] H + [abz] U + [h] H - // = [a] G + [abz] U + [h - a] H + // = [a] ((G - H) + [b * z] U) + [\xi] H + // = [a] G + [-a] H + [abz] U + [\xi] H + // = [a] G + [abz] U + [\xi - a] H // but subtracting to get the desired equality - // ... + [-a] G + [-abz] U + [a - h] H = 0 + // ... + [-a] G + [-abz] U + [a - \xi] H = 0 let a = transcript.read_scalar().map_err(|_| Error::SamplingError)?; let neg_a = -a; - let h = transcript.read_scalar().map_err(|_| Error::SamplingError)?; + let xi = transcript.read_scalar().map_err(|_| Error::SamplingError)?; let b = compute_b(x, &challenges); msm.add_to_u_scalar(neg_a * &b * &z); - msm.add_to_h_scalar(a - &h); + msm.add_to_h_scalar(a - &xi); let guard = Guard { msm,