mirror of https://github.com/zcash/halo2.git
book: Fix typo
This commit is contained in:
parent
9c945b982a
commit
e1a4be5728
|
@ -155,10 +155,10 @@ when adding two distinct points.
|
|||
### Point addition
|
||||
We now add two points with distinct $x$-coordinates, $P = (x_0, y_0)$ and $Q = (x_1, y_1),$
|
||||
where $x_0 \neq x_1,$ to obtain $R = P + Q = (x_2, y_2).$ The line $\overline{PQ}$ has slope
|
||||
$$\lambda = frac{y_1 - y_0}{x_1 - x_0} \implies y - y_0 = \lambda \cdot (x - x_0).$$
|
||||
$$\lambda = \frac{y_1 - y_0}{x_1 - x_0} \implies y - y_0 = \lambda \cdot (x - x_0).$$
|
||||
|
||||
Using the expression for $\overline{PQ}$, we compute $y$-coordinate $-y_2$ of $-R$ as:
|
||||
$$-y_2 - y_0 = \lambda \cdot (x_2 - x_0) \implies \boxed{y_2 = (x_0 - x_2) - y_0}.$$
|
||||
$$-y_2 - y_0 = \lambda \cdot (x_2 - x_0) \implies \boxed{y_2 =\lambda (x_0 - x_2) - y_0}.$$
|
||||
|
||||
Plugging the expression for $\overline{PQ}$ into the curve equation $y^2 = x^3 + b$ yields
|
||||
$$
|
||||
|
@ -193,7 +193,7 @@ Important notes:
|
|||
Imagine that $\mathbb{F}_p$ has a primitive cube root of unity, or in other words that
|
||||
$3 | p - 1$ and so an element $\zeta_p$ generates a $3$-order multiplicative subgroup.
|
||||
Notice that a point $(x, y)$ on our example elliptic curve $y^2 = x^3 + b$ has two cousin
|
||||
points: $(\zeta_p x, \zeta_p^2 x)$, because the computation $x^3$ effectively kills the
|
||||
points: $(\zeta_p x,y), (\zeta_p^2 x,y)$, because the computation $x^3$ effectively kills the
|
||||
$\zeta$ component of the $x$-coordinate. Applying the map $(x, y) \mapsto (\zeta_p x, y)$
|
||||
is an application of an endomorphism over the curve. The exact mechanics involved are
|
||||
complicated, but when the curve has a prime $q$ number of points (and thus a prime
|
||||
|
|
|
@ -53,7 +53,7 @@ $\mathbf{b}^{(k)} := \mathbf{b}.$ In each round $j = k, k-1, \cdots, 1$:
|
|||
$$
|
||||
\begin{aligned}
|
||||
L_j &= \langle\mathbf{a_{lo}^{(j)}}, \mathbf{G_{hi}^{(j)}}\rangle + [l_j]H + [\langle\mathbf{a_{lo}^{(j)}}, \mathbf{b_{hi}^{(j)}}\rangle] U\\
|
||||
R_j &= \langle\mathbf{a_{hi}^{(j)}}, \mathbf{G_{lo}^{(j)}}\rangle + [l_j]H + [\langle\mathbf{a_{hi}^{(j)}}, \mathbf{b_{lo}^{(j)}}\rangle] U\\
|
||||
R_j &= \langle\mathbf{a_{hi}^{(j)}}, \mathbf{G_{lo}^{(j)}}\rangle + [r_j]H + [\langle\mathbf{a_{hi}^{(j)}}, \mathbf{b_{lo}^{(j)}}\rangle] U\\
|
||||
\end{aligned}
|
||||
$$
|
||||
|
||||
|
|
Loading…
Reference in New Issue