Expand description
Interactive prover
Functions
- The function computes initial prover’s commitment to randomness (“a” message of the sigma-protocol, which in this case has two parts “a” and “b”) based on the verifier’s challenge (“e”) and prover’s response (“z”)
- Step 6 from https://ergoplatform.org/docs/ErgoScript.pdf For every leaf marked “real”, use the first prover step of the sigma protocol for that leaf to compute the necessary randomness “r” and the commitment “a”