multiproof: we need at least an extra bit for the table halving trick

Signed-off-by: Ignacio Hagopian <[email protected]>
jsign · Sep 29, 2023 · e160b4e · e160b4e
1 parent 97f793e
commit e160b4e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/multiproof/multiproof.zig b/src/multiproof/multiproof.zig
@@ -206,7 +206,7 @@ pub const MultiProof = struct {
             E_coefficients[i] = Fr.mul(powers_of_r[i], helper_scalar_den[queries[i].z]);
         }
         // TODO: make the window size be dynamically calculated.
-        const E = try pippenger.Pippenger(11).msm(allocator, Cs, E_coefficients);
+        const E = try pippenger.Pippenger(8).msm(allocator, Cs, E_coefficients);
         transcript.appendPoint(E, "E");
 
         // Check IPA proof.