Commit-and-Prove Marlin about marlin HOT 5 OPEN

Note that the option is not a simple bool. It may be more appropriate as a usize, as for the hiding bound needed for the commitments, since the prover may want to open the polynomial many times.

The AHP would "consume" one hiding.

from marlin.

It's actually even a commit-and-prove SNARK wrt the witness

from marlin.

It is already a commit-and-prove SNARK wrt the witness.

from marlin.

It is now implemented in a separate branch: https://github.com/arkworks-rs/marlin/tree/commit-and-prove
Note that this branch should not be merged, since it only supports commit-and-prove, not the general use.

I guess we will leave it there for a moment.

from marlin.

We can merge this into masster, maybe by introducing a prove_committed and verify_committed API. Maybe these APIs should go into ark-snark as part of a new trait?

from marlin.