@@ -85,7 +85,8 @@ pub fn pedersen_commitment_dleq<G: Group + GroupEncoding>(
8585 let [ var_x, var_r] = relation. allocate_scalars ( ) ;
8686
8787 let var_Gs = relation. allocate_elements :: < 4 > ( ) ;
88- let [ var_X, var_Y] = relation. allocate_elements ( ) ;
88+ let var_X = relation. allocate_eq ( var_x * var_Gs[ 0 ] + var_r * var_Gs[ 1 ] ) ;
89+ let var_Y = relation. allocate_eq ( var_x * var_Gs[ 2 ] + var_r * var_Gs[ 3 ] ) ;
8990
9091 relation. set_elements ( [
9192 ( var_Gs[ 0 ] , generators[ 0 ] ) ,
@@ -95,9 +96,6 @@ pub fn pedersen_commitment_dleq<G: Group + GroupEncoding>(
9596 ] ) ;
9697 relation. set_elements ( [ ( var_X, X ) , ( var_Y, Y ) ] ) ;
9798
98- relation. append_equation ( var_X, [ ( var_x, var_Gs[ 0 ] ) , ( var_r, var_Gs[ 1 ] ) ] ) ;
99- relation. append_equation ( var_Y, [ ( var_x, var_Gs[ 2 ] ) , ( var_r, var_Gs[ 3 ] ) ] ) ;
100-
10199 assert ! ( vec![ X , Y ] == relation. linear_map. evaluate( & witness) . unwrap( ) ) ;
102100 ( relation, witness. to_vec ( ) )
103101}
@@ -119,7 +117,12 @@ pub fn bbs_blind_commitment_computation<G: Group + GroupEncoding>(
119117 let [ var_secret_prover_blind, var_msg_1, var_msg_2, var_msg_3] = relation. allocate_scalars ( ) ;
120118
121119 let [ var_Q_2, var_J_1, var_J_2, var_J_3] = relation. allocate_elements ( ) ;
122- let var_C = relation. allocate_element ( ) ;
120+ let var_C = relation. allocate_eq (
121+ var_secret_prover_blind * var_Q_2
122+ + var_msg_1 * var_J_1
123+ + var_msg_2 * var_J_2
124+ + var_msg_3 * var_J_3,
125+ ) ;
123126
124127 relation. set_elements ( [
125128 ( var_Q_2, Q_2 ) ,
@@ -129,16 +132,6 @@ pub fn bbs_blind_commitment_computation<G: Group + GroupEncoding>(
129132 ( var_C, C ) ,
130133 ] ) ;
131134
132- relation. append_equation (
133- var_C,
134- [
135- ( var_secret_prover_blind, var_Q_2) ,
136- ( var_msg_1, var_J_1) ,
137- ( var_msg_2, var_J_2) ,
138- ( var_msg_3, var_J_3) ,
139- ] ,
140- ) ;
141-
142135 let witness = vec ! [ secret_prover_blind, msg_1, msg_2, msg_3] ;
143136
144137 assert ! ( vec![ C ] == relation. linear_map. evaluate( & witness) . unwrap( ) ) ;
0 commit comments