Blockchain, Zero Knowledge Proofs, Crypto, Rust, Cryptography.
honest, s*B — c*P = (r + c*x)*B — c*(x*B) = r*B = R, and the proof verifies correctly. Although the verifier’s computation is different from the prover’s, both the verifier and the prover perform identical transcript operations, so that (if the proof is well-formed) they will mutate each of their