When using Groth16, is it really needed to change both G₂ points of the public & private inputs in the trusted setup for avoiding public input forgery ?
First remember ᴇɪᴘ‒197 only allow to check if a set of pairings is equal to 1 in Fp^(12) and not to compare equalities like in Zcash which is why the equations below are different and would worth downvotes on a …