i - s, not s - i

plonky2_verifier/data/fibonacci/proof_challenges.json

@@ -1 +1 @@
-{"plonk_betas":[12973916988745913043,10729509799707823061],"plonk_gammas":[13357786390712427342,13733012568509939467],"plonk_alphas":[4421334860622890213,11104346062293008527],"plonk_zeta":[4417665616040947721,6032065041495623027],"fri_challenges":{"fri_alpha":[13781247504304639195,11230825432264195234],"fri_betas":[],"fri_pow_response":38184296491435,"fri_query_indices":[51,25,2,2,7,2,50,30,48,56,44,52,34,3,4,59,0,1,53,63,60,42,12,56,53,7,37,39]}}
+{"plonk_betas":[12973916988745913043,10729509799707823061],"plonk_gammas":[13357786390712427342,13733012568509939467],"plonk_alphas":[4421334860622890213,11104346062293008527],"plonk_zeta":[18168831211174576204,14207073590853934065],"fri_challenges":{"fri_alpha":[3871254635590041629,16336705857054086518],"fri_betas":[],"fri_pow_response":21146135473161,"fri_query_indices":[2,42,42,49,18,2,15,51,2,36,61,47,57,42,30,29,14,54,34,27,51,41,58,15,59,43,41,12]}}

plonky2_verifier/gate.go

@@ -62,11 +62,11 @@ func (p *PlonkChip) computeFilter(
 			continue
 		}
 
-		product = p.qeAPI.MulExtension(product, p.qeAPI.SubExtension(s, p.qeAPI.FieldToQE(NewFieldElement(i))))
+		product = p.qeAPI.MulExtension(product, p.qeAPI.SubExtension(p.qeAPI.FieldToQE(NewFieldElement(i)), s))
 	}
 
 	if manySelector {
-		product = p.qeAPI.MulExtension(product, p.qeAPI.SubExtension(s, p.qeAPI.FieldToQE(NewFieldElement(UNUSED_SELECTOR))))
+		product = p.qeAPI.MulExtension(product, p.qeAPI.SubExtension(p.qeAPI.FieldToQE(NewFieldElement(UNUSED_SELECTOR)), s))
 	}
 
 	return product