Add multi-evaluation support about aggregatable-dkg HOT 3 OPEN

Hey Jeff,

Yep, that all sounds about right, also discussed this briefly with @mmaller.
IMO the analogy to what you can do in BLS and what you can do here is apt.

I'm out for the next few weeks, and I would be interested in following up on this when I get back!

from aggregatable-dkg.

It'd support some roll up for your randomness beacon too, which sounds more immediately useful.

from aggregatable-dkg.

In this vein, one could similarly do threshold decryption by replacing Z by a sender controlled scalar multiple of G_1, but then senders much include a proof-of-knowledge of Z, and you've a nice partially batched proof of correct decryption too. It's slightly inferior to straight IBE-like designs like https://eprint.iacr.org/2020/638 or scalar threshold IBE itself, but still fairly nice.

from aggregatable-dkg.