halo

halo copied to clipboard

Typo in the full interactive protocol in Figure 1 of Halo paper?

1

I'm reading the [Halo paper](https://eprint.iacr.org/2019/1021.pdf), in Figure 1 of page 17, I think the `v9` val should be `r(x,y)(xy)^{3N-1}`. 

3for

About the Amortized Polynomial Commitments

1

I am quite confused about the introduction about the Amortized Polynomial Commitments when reading the Halo paper in section 3.1. What's is the concrete algorithm about the polynomial commitments, there...

Federico2014

Atul9

Implement variable-bound range proofs

1

The Bitcoin example recursive circuit needs to enforce: - `hash

str4d

Difference from STARKs

1

My understanding is that zk-STARKs also require no trusted setup. How is Halo different from STARKs? How is it better?

paulmillr

Requires picking a random generator of each field.

str4d

str4d