A verifier checks whether a prover’s claim and evidence satisfy the protocol’s conditions without learning the private witness. In a noninteractive zero-knowledge proof, it combines public data, a public common reference string, and a public proof of knowledge to return YES or NO. section 1.3.4
A verifier’s inputs and checks include:
- Public data, such as information associated with a blockchain. section 1.3.4
- A public common reference string containing elliptic-curve parameters used to hide data. section 1.3.4
- A proof of knowledge generated from public and private inputs, while the private witness remains undisclosed. section 1.3.4
- QAP relationships whose wire values and multiplication gates must satisfy the required equations; failure causes rejection. section 19.2 section 19.7
Figure 1.9 The process of verifying a zero-knowledge proof
Follow the verification flow from public data, reference string, and proof to a YES or NO result. section 1.3.4



