aztec-verifier-contracts icon indicating copy to clipboard operation
aztec-verifier-contracts copied to clipboard

docs(standard): Document how the r_0 calculation differs from the paper

Open Maddiaa0 opened this issue 3 years ago • 2 comments

Overview

Elaborate on the reasoning for why the implementation differs, issue created off the back of this recent comment from lasse.

                // @note that our r_0 looks different from the paper.
                // This related to the public input delta that we mentioned earlier.
                // So we are replacing PI with (z̄_ω - ∆PI) * L_n * α^2.
                // @follow-up Elaborate on this replacement
                // @note that our r_0 differs on the power of alpha from the paper. The alpha is a challenge
                // so having a different challenge is fine, as long as both verifier and prover use the same.

Maddiaa0 avatar Mar 22 '23 19:03 Maddiaa0

This section should be altered when the verifier is unrolled. Don't work on before that is done.

LHerskind avatar Mar 22 '23 20:03 LHerskind

Also got a comment with

let r0neg := sub(p, mload(R_ZERO_EVAL_LOC)) // Change owing to the simplified Plonk @follow-up

LHerskind avatar Mar 24 '23 18:03 LHerskind