Great article Christian. Appreciate the insightful and practical example given. After reading this, I feel I have a deeper understanding on the utility of such a mechanism.
I’m trying to understand why “if you don’t get rid of
lambda and it becomes exposed to the prover”, then a prover can generate fake proofs? I suppose it’s wrapped up in the relationship between
G, P, V?
Thanks again for writing this!