Blockchain, Zero Knowledge Proofs, Zero Knowledge, Cryptography, Security.
malicious prover? Apparently, it’s very easy to forge a proof — since the equality check for H=(A*B-C)/Z is done is at the specific point Tau, we can use our knowledge of Tau to create a polynomial which satisfies exactly that! That is, create a constant polynomial H(z), which just returns