Given a -variate polynomial defined over field , the protocol convinces the verifier that the she computed the following some correctly:

The advantage of using the protocol is that the verifier runtime is only plus the time to evaluate at a single input in .