I am reading both the papers on one-of-many proofs (mainly this one: https://eprint.iacr.org/2014/764.pdf) and trying to implement the protocol as in section 3 (see figure 2).

The paper specifies computing the polynomial coefficients p_i_k, but I cannot find any explanation for how those coefficients are to be calculated. Can anyone help me understand this?

Thanks!