We implement the extension_factor default as 16 and the sampling inspection default time as 16, so the security level will be 80 bits. Polynomial commitment: we calculate the hash value of the computation trace and corresponding user balance, user ID, and the value of the corresponding constraint polynomial for each row, and generate a Merkle tree. The Merkle root is the commitment value of the polynomial. Generating sampling proof: using the Merkle root as a random source, we sample the data.

30 £35 / $45 10 MTC Tour 10 £95 / $120 Cobranded cap 30 £35 / $45 11 MTC Tour 10 £95 / $120 Replica Cap 27 £43 / $54 12 Virtual Driver Briefing 10 £0 / $0 Cobranded cap 30 £35 / $45 13 2 GS tickets, paddock tour, driver meet-and-greet (+$1,000 for flights + accommodations) 2 £1,600 / $2,025 Cobranded cap 30 £35 / $45 14 MTC Tour 10 £95 / $120 Cobranded cap 30 £35 / $45 15 Signed cap 5 £40 / $50 Cobranded cap 30 £35 / $45 16 Signed cap 5 £40 / $50 Cobranded cap 30 £35 / $45 17 Signed overalls 1 £80