Zero-Knowledge Circuit & R1CS System

Interactively inspect arithmetic flattening, R1CS matrix evaluation, QAP divisibility, and pairing verification.

Private Secret Witness (x): 3

Claimed Public Output (out): 35

Gate 1 (Multiplication)

sym_1 = x · x = 3 · 3 = 9

Gate 2 (Multiplication)

sym_2 = sym_1 · x = 9 · 3 = 27

Gate 3 (Addition)

sym_3 = sym_2 + x = 27 + 3 = 30

Gate 4 (Output Const)

out = sym_3 + 5 = 30 + 5 = 35

Witness Vector s = [1, out, x, sym_1, sym_2, sym_3] = [1, 35, 3, 9, 27, 30]