barretenberg
barretenberg copied to clipboard
ZM: Mocked SRS and modified pairing check
To complete the ZM degree check, we need to commit to $(q_{\zeta} + z\cdot q_Z)X^{N_{max} - N - 1}$. Verification then requires a pairing check similar to the standard KZG check but with $[1] \in G2$ replaced by $[X^{N_{max} - N -1}] \in G2$. We do not have an SRS with these G2 elements so we need to generate a fake setup until we can do the real thing. For now, we simply construct q_{\zeta} + z*q_Z without the shift and do a standard KZG pairing check.
More notes about what's needed in the last section of this ZM hackmd