Fold panics in the enclosing Error case (#27)

src/nizk/mod.rs

@@ -530,11 +530,10 @@ impl DotProductProofLog {
 
     let Gamma = Cx.unpack()? + Cy.unpack()?;
 
-    let (g_hat, Gamma_hat, a_hat) = self
-      .bullet_reduction_proof
-      .verify(n, a, transcript, &Gamma, &gens.gens_n.G)
-      .unwrap();
-
+    let (g_hat, Gamma_hat, a_hat) =
+      self
+        .bullet_reduction_proof
+        .verify(n, a, transcript, &Gamma, &gens.gens_n.G)?;
     self.delta.append_to_transcript(b"delta", transcript);
     self.beta.append_to_transcript(b"beta", transcript);
 

src/r1csproof.rs

@@ -437,17 +437,14 @@ impl R1CSProof {
     .compress();
 
     // verify the joint claim with a sum-check protocol
-    let (comm_claim_post_phase2, ry) = self
-      .sc_proof_phase2
-      .verify(
-        &comm_claim_phase2,
-        num_rounds_y,
-        2,
-        &gens.gens_sc.gens_1,
-        &gens.gens_sc.gens_3,
-        transcript,
-      )
-      .unwrap();
+    let (comm_claim_post_phase2, ry) = self.sc_proof_phase2.verify(
+      &comm_claim_phase2,
+      num_rounds_y,
+      2,
+      &gens.gens_sc.gens_1,
+      &gens.gens_sc.gens_3,
+      transcript,
+    )?;
 
     // verify Z(ry) proof against the initial commitment
     assert!(self