sec-bit / learning-zkp

articles, codes and tools all about zero-knowledge proofs
765 stars 177 forks source link

Fix constraint bug #42

Closed luckyyang closed 5 months ago

luckyyang commented 8 months ago

To constrain the last element of $S^{lo}$ equals to the first element of $S^{hi}$, if choose $L_{N-1}(X)$ as the lagrange polynomial, then $S^{hi}$ should shift to next element by times $\omega$ and get the first element of $S^{hi}$, so the equation holds