2
$\begingroup$

I am going through the Pinocchio protocol paper and I need 2 clarifications in the section Protocol 1 (Verifiable Computation from strong QAP). The part that explains the Verify process, which contains this expression: $$e(g^{v_0}.g^{v_{io}}.g^{v(s)}, g^{w_0}.g^{w(s)})/e(g^{y_0}.g^{y(s)},g) = e(g^{h(s)},g^{t(s)})$$.

  1. since $e:G \times G \to G_T$, what is the definition of the division operation as shown in the expression above, wrt $G_T$?

  2. If my understanding is correct, the first term in the first pairing should be $g^{v_0}.g^{v_{io}}.g^{v_{mid}(s)}$ instead of $g^{v_0}.g^{v_{io}}.g^{v(s)}$

|improve this question
$\endgroup$
  • 1
    $\begingroup$ $G_T$ is the multiplicative group of a finite field, so the division is division in that field. I'll look into 2 (and post an answer) later, if no one does it before. $\endgroup$ – fkraiem Mar 7 at 8:03
  • $\begingroup$ OK the division is the multiplicative inverse in that group. Now it seems obvious. Thanks. Any update on 2? $\endgroup$ – Abhijit Mar 8 at 7:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.