Security, Zero Knowledge Proofs, Snark, Cryptography, Research.
program’s random tapes/inputs. Looking ahead, rewinding the prover P (specifically, executing Schnorr’s protocol twice while rewinding the prover to a particular state before the second execution) suffices already to gather all the relevant information for the witness extraction. Note again that