Blockchain, Zero Knowledge Proofs, Zero Knowledge, Cryptography, Security.
prover indeed provided coefficients for H which satisfy the relation H=(A*B-C)/Z, which can only be done if the prover actually knew a solution. Forging a proof Now let’s have some fun… What happens if Tau is known? If, by some reason, it was exposed during the setup process and is known to a