New answers tagged

0 votes

Any SuperSingular curve or similar with Fp = Fq which is not badly broken unless big field orders are used?

If I interpret your question correctly, you want to know if there is a curve over a prime field $\mathbb F_p$ such that the order of the curve group is itself $p$. Such curves are called anomalous ...
Daniel S's user avatar
  • 20.1k
3 votes
Accepted

What does preprocessed polynomial mean in the context of PLONK?

Pre-processing means part of the one-time initial set up computation of the system prior to the generation of any proofs. This set-up phase is allowed to use considerably more resources. If we look to ...
Daniel S's user avatar
  • 20.1k
3 votes
Accepted

PLONK: Why is the quotient polynomial multiplied by different powers of a challenge?

The quotient challenge is necessary for soundness. In particular, if the prover wants to show that there exists quotients $q_1=f_1/z_H$, $q_2=f_2/z_H$, and $q_2=f_2/z_H$. To do so, it can instead send ...
Wilson's user avatar
  • 920

Top 50 recent answers are included