Cryptography, Cryptocurency, Blockchain, Mining.
to the prover commitment (Merkle root). But this option isn’t used, because it can easily be made non-interactive by using the Fiat-Shamir heuristic: the Merkle root hash is used to deterministically derive the random set of indices. The prover cannot merely generate the data for the selected