zkcrypto / bellman

zk-SNARK library.
Other
988 stars 534 forks source link

Batch verification: Choose `z` in the range `[1..2^128)`. #65

Open str4d opened 3 years ago

str4d commented 3 years ago

It doesn't really matter whether we use the full field or not (as long as z != 0), but it makes various scalar mults cheaper.

_Originally posted by @str4d in https://github.com/zkcrypto/bellman/pull/59#discussion_r569020447_