Skip to content

Commit

Permalink
Update sumcheck.md
Browse files Browse the repository at this point in the history
  • Loading branch information
GUJustin authored Mar 25, 2024
1 parent 7a97cc5 commit 0ad5c39
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion book/src/background/sumcheck.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,9 @@ Suppose we are given a $v$-variate polynomial $g$ defined over a finite field $\

$$ H := \sum_{b_1 \in \{0,1\}} \sum_{b_2 \in \{0,1\}} \cdots \sum_{b_v \in \{0,1\}} g(b_1, \ldots, b_v). $$

In order to execute the protocol, the verifier needs to be able to evaluate $g(r_1, \ldots, r_v)$ for a randomly chosen vector $(r_1, \ldots, r_v) \in \mathbb{F}^v$ – see the paragraph preceding Proposition 1 below.
In order to execute the protocol, the verifier needs to be able to evaluate $g(r_1, \ldots, r_v)$ for a randomly chosen vector $(r_1, \ldots, r_v) \in \mathbb{F}^v$. Hence, from the verifier's perspective, the sum-check protocol _reduces_ the task
of summing $g$'s evaluations over $2^v$ inputs (namely, all inputs in $\{0, 1}^{v}$) to the task of evaluating $g$
at a \emph{single} input in $(r_1, \ldots, r_v) \in \mathbb{F}^v$.

The protocol proceeds in $v$ rounds as follows. In the first round, the prover sends a polynomial $g_1(X_1)$, and claims that

Expand Down

0 comments on commit 0ad5c39

Please sign in to comment.