Skip to content

[Zenith] L-3 Missing assertions for equal points in add_montgomery#63

Open
manishbista28 wants to merge 1 commit intomainfrom
zenith/L_3_missing_assertions_for_equal_points_in_add_mont
Open

[Zenith] L-3 Missing assertions for equal points in add_montgomery#63
manishbista28 wants to merge 1 commit intomainfrom
zenith/L_3_missing_assertions_for_equal_points_in_add_mont

Conversation

@manishbista28
Copy link
Contributor

Fixes #20

));
}

// given two bases M and N which were both known in compile time,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For this case, can we assume that M and N have no efficiently-computable discrete logarithm relation?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

M and N are public input commitment part of verification keys, so I assume M and N do not have efficiently-computable discrete log relation.
If they did, you'd be able to supply scalars a or b such that [a]M = [b]N.
Without [a]M = [b]N, there won't be a case where input to add_montgomery(circuit, [a]M, [b]N) will have same value of operands. Thus the equal points in add_montgomery will not hit.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's double-check the claim that as part of the verification keys, they cannot have a known discrete logarithm relation.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Zenith] L-3 Missing assertions for equal points in add_montgomery

2 participants