-
EC-Threshold-Refresh-MP (ec-dkg-spec.pdf, Section 4.9) calls EC-DKG-Threshold-MP with r^0_i = 0.
-
EC-DKG-Threshold-MP (ec-dkg-spec.pdf, Section 4.3.1) calls Verify-UC-ZK-Batch-DL-1P with R^0_i = G * r^0_i = ZERO_POINT.
-
Verify-UC-ZK-Batch-DL-1P (zk-proofs-spec.pdf, 8.2.2) asserts that Q1 = R^0_i != ZERO_POINT.
Hence, following this specification, Step 3. would thrown an error.
Question:
Is it safe to skip the check for ZERO_POINT in Verify-UC-ZK-Batch-DL-1P (Step 4)?
(This shouldn't conflict with the proof statement since we can safely assume that the prover knows the DLOG of ZERO_POINT anyhow?)