microsoft / Spartan

Spartan: High-speed zkSNARKs without trusted setup
MIT License
689 stars 119 forks source link

Add another challenge in dotproduct proof? #33

Closed 3for closed 1 year ago

3for commented 3 years ago

In paper Halo: Recursive Proof Composition without a Trusted Setup , section 3.1: image

And in paper Bulletproofs: Short Proofs for Confidential Transactions and More, protocol 1: image

Do we need to add another challenge x in DotProductProofLog and DotProductProofLog, as shown above, to avoid the Prover cheat?

srinathsetty commented 3 years ago

@3for Thanks for bringing this to my attention! I checked with the authors of [37] and indeed, we need to add the additional challenge.

3for commented 3 years ago

Glad to help~