One of CompressedSNARK's verification steps (affects only ppspartan.rs) - checking the satisfiability of the folded instances (link) - has following redundant absorption of eval_vec to the transcript, since it is already happened here. Absorbing the same value twice adds no new entropy to the transcript, so second one can be freely removed.
I'm happy to provide a hotfix for this in case if core contributors confirm the issue
Hi @storojs72, thanks the report! Yes, they are indeed absorbed twice (this is not a correctness issue, but a cost that does not need to be paid). Yes, please submit a fix.
One of
CompressedSNARK
's verification steps (affects only ppspartan.rs) - checking the satisfiability of the folded instances (link) - has following redundant absorption ofeval_vec
to the transcript, since it is already happened here. Absorbing the same value twice adds no new entropy to the transcript, so second one can be freely removed.I'm happy to provide a hotfix for this in case if core contributors confirm the issue