If the prover sends a point at infinity and, on the recursive verifier side, this is constructed as a cycle_group, calling point.get_value().on_curve() will be false because the transcript doesnt have a representation of cycle_group point at infinity (which seems to be just a flag).
maramihali
commented
1 month ago
If the prover sends a point at infinity and, on the recursive verifier side, this is constructed as a cycle_group, calling
point.get_value().on_curve()will be false because the transcript doesnt have a representation of cycle_group point at infinity (which seems to be just a flag).