2
$\begingroup$

I am reading the Pinocchio paper. The calculated result $y$ is a part of the verification input, but it seems to me, the verification procedure does not utilize the result $y$. Can anyone can help me to understand this?

$\endgroup$
  • $\begingroup$ You should probably add a link to the paper and make it easier for readers to find this $y$ and the verification procedure in the paper. $\endgroup$ – K.G. Apr 22 '15 at 7:45
0
$\begingroup$

$y$ is the values of the output wires, so it is used to compute $g_v^{v_{io}(s)}$, $g_w^{w_{io}(s)}$, and $g_y^{y_{io}(s)}$. (Remember that $c_k$ is the value of the wire with index $k$.)

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.