Module zk_mlecheck 

Prover for the Libra mask polynomial in ZK MLE-check protocols.

The Libra ZK-sumcheck protocol uses a masking polynomial g(X_0, …, X_{n-1}) of the form: g = sum_{i=0}^{n-1} g_i(X_i)

where each g_i(X) is a univariate polynomial of configurable degree. This separable structure allows efficient computation of round polynomials without iterating over the full hypercube.

Structs

Mask

Libra mask polynomial for ZK MLE-check protocols.

MleCheckMaskProver

Prover for the Libra mask polynomial in ZK MLE-check.

ProveZKOutput

Output of the ZK MLE-check proving protocol.

Functions

expand_libra_eval

Generates hypercube evaluations of the libra_eval polynomial.

prove

Executes the zero-knowledge MLE-check proving protocol for a single multivariate polynomial.