Kate/

[utterances-bot]

The KZG/Kate Polynomial Commitment Scheme – Risen Crypto – Mathematical Cryptography, zkSNARKs

https://risencrypto.github.io/Kate/

[tarassh]

Great article,

I have a question, for "Batch Mode Single Polynomial, multiple points" it is not clear how verifier gets commitment to CF. Is it identical to previous chapter, committer sends CF=F(a)⋅G first?

[RisenCrypto]

Great article,

Thank you.

I have a question, for "Batch Mode Single Polynomial, multiple points" it is not clear how verifier gets commitment to CF. Is it identical to previous chapter, committer sends CF=F(a)⋅G first?

Yes, it's the same. In almost all proofs, the Prover sends the Commitment of a polynomial to the Verifier. Occasionally, there are some cases where a Polynomial is an addition of smaller polynomials - in that case if the prover has already sent the commitment of the smaller polynomials to the verifier, then the verifier can compute the commitment of the polynomial himself because KZG commitments are additively homomorphic.