When debugging a ZKP verifier, make sure to keep checking not just that the proof verifies on valid inputs, but also that the proof verification returns an error on invalid inputs (or with nonsensical tweaks to the verification mechanism).

Also make sure you compute the verification key yourself when you verify that proof in another proof.

Otherwise the prover could just prove a true statement about anything at all, and you’d be all happy trusting that VK

At this point I’m convinced Prague is Lisbon but they speak a weird language

zpedro

@zpedro