Expand description

Interactive prover

Functions

  • The function computes initial prover’s commitment to randomness (“a” message of the sigma-protocol, which in this case has two parts “a” and “b”) based on the verifier’s challenge (“e”) and prover’s response (“z”)
  • Step 6 from https://ergoplatform.org/docs/ErgoScript.pdf For every leaf marked “real”, use the first prover step of the sigma protocol for that leaf to compute the necessary randomness “r” and the commitment “a”