Processing math: 100%

Logup-GKR batching concept

IOP: prove evaluation of a multi-linear extension polynomial

a cyclic group in base Field H (STARK trace domain)

base Field F

4th degree extension of base Field, Secure Field SF

a(w) is a univariate polynomial of degree 2d (STARK trace), wH

f(b0,b1,,bd) is a multi-variate function (STARK …

Logup GKR

following this post

Witness encoding:

trace columns are interpreted as functions, the inputs of the function are bits, enough number of bits that can present n number of witness in this column.

for trace i, with n number of rows (trace degree, trace length)

fi(b0,b1,b2,,bn)=abn,,b2,b1,b0

the multi-linear polynomial for …

The bus_id in Bus

I am using a simplified circuit for case demonstration purpose:

The bus statement to be proved is:

[x0,x1] in [0] with busid=a,

this case has only one valid witness [0,0], with multiplicity to be 2

Original protocol:

The above statement essentially proves:

1αx0+1αx1=2α

where α is a random …

Spartan 2 some basic terminologies

Follow my first post for Spartan

Closed-form expression for evaluating a polynomial

The closed-form expression for evaluating a polynomial G() at (r1,,rm)Fm is

$$\mathcal{G}(r_1,…,r_m)=\sum\limits_{x\in\{0,1\}^m}\mathcal{G}(x)\prod\limits^{m}_{i=1}\underbrace{(r_i\cdot …

Review, remove_trait_impls

Related type:

TraitsResolver

TraitsResolver helps to find the implementation for a given trait function and concrete type arguments.

TraitsResolver has a function resolve_trait_function_reference (see below) for a given polynomial reference, it resolves its trait

one of the input to this polynomialReference,

using fibo_no_public example, PolynomialReference looks like:

Understanding the remove_trait_impls

Rust notes

crate and trait

Crate
  1. Definition

The Short NIZK Argument in Pribank

We give a commit-and-prove zero-knowledge argument Protocol for the satisfiability of a QAP for an arithmetic circuit C. For wires in the circuit {ai}ni=0, we denote the input witnesses are {ai}ki=0, the inner circuit witnesses are {ai}li=k+1 and the statements wires are {ai}ni=l+1. The quadratic arithmetic program, Pedersen commitment and …