zcash / halo2

The Halo2 zero-knowledge proving system
https://zcash.github.io/halo2/
Other
712 stars 487 forks source link

[book] Fix `p_poly` to match implementation; specify synthetic blinding factor `f` construction #777

Open therealyingtong opened 1 year ago

therealyingtong commented 1 year ago

p_poly is constructed as a linear combination of q_prime and the q_polys in steps 18 and 19 of the protocol description. Previously, the expression used in the protocol description did not match the implementation: