You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
the current multiplicative subgroup start from g^0 instead of \omega= g^1 as described by the original paper. While this choice shouldn't affect security, it's still nicer to be more faithful to the paper.
The text was updated successfully, but these errors were encountered:
@chancharles92 I think the reason why we were starting from g^0 is due to the default behavior of Radix2EvaluationDomain::new() when iterating over its elements, starts with pow=0
I now become a bit hesitant to change, because shifting the entire evaluation domain, means overriding the iterator. (EvaluationDomain doesn't work like a vector where you would just rotate left, but as an iterator, so we would have to change this in our forked of arkwork)
I mean it's doable, but add more complexity.
maybe we should simply argue that, this slight deviation from the original paper is fine. (secure and minimal inconsistency), wdyt?
As pointed out by CommonPrefix team:
the current multiplicative subgroup start from
g^0
instead of\omega= g^1
as described by the original paper. While this choice shouldn't affect security, it's still nicer to be more faithful to the paper.The text was updated successfully, but these errors were encountered: