20:49:37 <slave_blocker> hello 20:49:42 <slave_blocker> :) 20:50:25 <slave_blocker> so far in bp's i have, from the verifier side : 20:51:30 <slave_blocker> P' = P + L[i]x² + R[i]x^(-2) 20:52:22 <slave_blocker> where i goes from 1 to log(64 * p) 20:52:43 <slave_blocker> and how does the recursion end ? 20:54:49 <slave_blocker> Verifier computes c = a * b and checks if P = g^a h^b u^c ? 20:56:09 <slave_blocker> from https://eprint.iacr.org/2017/1066.pdf line (16) of page 16 sounds very misleading. 20:56:47 <slave_blocker> please help someone.