20:49:37 hello 20:49:42 :) 20:50:25 so far in bp's i have, from the verifier side : 20:51:30 P' = P + L[i]x² + R[i]x^(-2) 20:52:22 where i goes from 1 to log(64 * p) 20:52:43 and how does the recursion end ? 20:54:49 Verifier computes c = a * b and checks if P = g^a h^b u^c ? 20:56:09 from https://eprint.iacr.org/2017/1066.pdf line (16) of page 16 sounds very misleading. 20:56:47 please help someone.