The main trick is something that we see very often in the proof systems. The random linear combination of different things. So what the folding scheme does is it has the prover commit to these cross terms or the error vector first, and then the verifier sends a challenge That's going to be used for the random linear combination. Then the prover can combine the two witness vectors and also the two error vectors using this cross term.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode