8 Commits

Author	SHA1	Message	Date
Jack Grigg	cb819e47e9	Migrate to `ff` revision without `FieldExt`	2022-11-30 19:35:26 +00:00
ying tong	4d970865cb	[doc] commitment::verifier: verify_proof does not have [-c]G term	2022-10-05 17:57:48 -07:00
Sean Bowe	0b73c74f72	Address comments brought up by @str4d.	2022-02-14 10:44:14 -07:00
Sean Bowe	f2daf91315	halo2_proofs: change IPA check equation to match the book ... The verifier's check in the inner product argument used to assume that the G'_0 value had an additional (trivial) blinding factor term, which makes it slightly easier to reason that it never is the point at infinity. However, we never sample challenges that are zeroes (both for security and completeness reasons) so this element would never be the point at infinity anyway. Thus, we can simplify the check with the added benefit of matching the book's description of the protocol.	2022-02-14 09:37:57 -07:00
Sean Bowe	289f24bb8b	Improvements due to @daira's code review.	2022-02-11 08:50:55 -07:00
Sean Bowe	a129490517	Minor changes	2022-02-10 08:08:20 -07:00
Sean Bowe	a4d3c328b9	halo2_proofs: rename variables for consistency ... This changes variable names in the multiopen and commitment opening implementations and the book's protocol description to keep names and indicies consistent with one another. Co-Authored-By: Jack Grigg <jack@electriccoin.co>	2022-02-09 13:37:50 -07:00
Jack Grigg	3c6558f049	Move `halo2` code into `halo2_proofs` crate	2022-01-20 18:50:43 +00:00