Goal

proving the sum:

H = \sum_{(b_1, \dots, b_v) \in \{0,1\}^v} g(b_1, \dots, b_v)

Protocol

Round 1:

Round j = 2, ..., (v-1):

Round v:

Reference

• https://eprint.iacr.org/2013/351.pdf
• https://jolt.a16zcrypto.com/background/sumcheck.html
• https://www.youtube.com/watch?v=lMo-MmJ7e_E