00000000  01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 3b a3 ed fd 7a 7b 12 b2 7a c7 2c 3e  |....;...z{..z.,>|
00000030  67 76 8f 61 7f c8 1b c3 88 8a 51 32 3a 9f b8 aa  |gv.a......Q2:...|
00000040  4b 1e 5e 4a 29 ab 5f 49 ff ff 00 1d 1d ac 2b 7c  |K.^J)._I......+||
00000050  01 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 ff ff ff ff 4d 04 ff ff 00 1d  |..........M.....|
00000080  01 04 45 54 68 65 20 54 69 6d 65 73 20 30 33 2f  |..EThe Times 03/|
00000090  4a 61 6e 2f 32 30 30 39 20 43 68 61 6e 63 65 6c  |Jan/2009 Chancel|
000000a0  6c 6f 72 20 6f 6e 20 62 72 69 6e 6b 20 6f 66 20  |lor on brink of |
000000b0  73 65 63 6f 6e 64 20 62 61 69 6c 6f 75 74 20 66  |second bailout f|
000000c0  6f 72 20 62 61 6e 6b 73 ff ff ff ff 01 00 f2 05  |or banks........|
000000d0  2a 01 00 00 00 43 41 04 67 8a fd b0 fe 55 48 27  |*....CA.g....UH'|
000000e0  19 67 f1 a6 71 30 b7 10 5c d6 a8 28 e0 39 09 a6  |.g..q0..\..(.9..|
000000f0  79 62 e0 ea 1f 61 de b6 49 f6 bc 3f 4c ef 38 c4  |yb...a..I..?L.8.|
00000100  f3 55 04 e5 1e c1 12 de 5c 38 4d f7 ba 0b 8d 57  |.U......\8M....W|
00000110  8a 4c 70 2b 6b f1 1d 5f ac 00 00 00 00           |.Lp+k.._.....|

instance  : 0xa7c3e5f1b9d20486 5e8b1d4a7c0f3926 d5e8a1b4c7f09362
advice[0] : 0x3f8b2d6a9c1e5704 b8d1f4a7c0e39625 a4c7d0e3f6b98215
advice[1] : 0x9c5e2a7b4d8f1063 e7a0c3d6f9b28514 6b9d2f5a8c1e7403
permutation σ₀ : 0x1e7a3c5b8d0f2694 c9b2e5f8a1d40736 5e8b1d4c7a0f9326
            σ₁ : 0xf4a7c0d3e6b98215 9c2f5a8d1b4e7063 a7d0e3f6c9b28541
quotient : t(x) = h(x)/Z_H(x)
         : 0x6b8d1e4f7a0c3592 d5a8c1f4e7b02936 8b1c4e7d0a3f6925
multiopen: {ξ=0xd2a5c8b1e4f73096 5b8c1e4d7f0a6932 a0c3d6f9e2b58147}
ipa round: L₀=0x8a1c4d7e0f3b6295 e9b2f5a8d1c40736 c3d6f9a2e5b84170
         : R₀=0x4e7b0d3c6a9f2581 b4d7a0c3e6f98215 7a0c3d6f9e2b5814
         : u₀=0x9c2e5f8a1b4d7063 d6f9a2c5e8b14730 a3c6f9d2e5b84170
  final  : scalar s=0xb5c8d1e4f7a02396 8b1c4e7d0a3f6925 d6e9f2a5c8b14730
         : [P_x]=0x7a0c3d6f9b2e5814 c9d2f5a8e1b47036 b5d8e1f4a7c02369
         : [P_y]=0xe3f6c9b2d5a84170 1e4a7d0c3f6b9825 4c7d0f3a6e9b2581
size: 2448 B · verify ~3.2 ms

π_A ∈ 𝔾₁  : (0x2a7c4f9b3e8d1056, 0xb5d8e1f4a7c09362)
π_B ∈ 𝔾₂ : ((0x9c5e2a7b4d8f1063, 0xe7a0c3d6f9b28514),
             (0x4f8b1d4a7c0e3926, 0xa5d8e1f4a7b0c396))
π_C ∈ 𝔾₁  : (0x6b9d2f5a8c1e7403, 0xf1c4e7d0a3f6b825)
verify:  e(π_A, π_B) = e(α, β) · e(Σᵢ aᵢ·Wᵢ, γ) · e(π_C, δ)
       : Wᵢ = (β·uᵢ(x) + α·vᵢ(x) + wᵢ(x))₁  [from CRS]
       : ✓ ate pairing on bn254
size: 128 B compressed · 256 B uncompressed