fn blinder<F: UniformRand, RNG: RngCore + CryptoRng>(
num_chunks: usize,
rng: &mut RNG,
) -> PolyComm<F>Expand description
The blinders masking one commitment: one per chunk, drawn independently.
Independently, because a commitment is masked chunk by chunk. Two chunks masked by the same blinder leave their difference unmasked — the shared term cancels — so a single blinder repeated across the chunks hides less than it appears to. With one chunk the distinction does not arise, which is why this is easy to get wrong and impossible to observe in a passing test.