Daniel Lubarov 72d13d0ded
Prover code for permutation argument (#485)
* Batch multiple perm args into one Z and compute Z columnwise

It's slightly complex because we batch `constraint_degree - 1` permutation arguments into a single `Z` polynomial. This is a slight generalization of the [technique](https://zcash.github.io/halo2/design/proving-system/lookup.html) described in the Halo2 book.

Without this batching, we would simply have `num_challenges` random challenges (betas and gammas). With this batching, however, we need to use different randomness for each permutation argument within the same batch. Hence we end up generating `batch_size * num_challenges` challenges for all permutation arguments.

* Feedback + updates for recursion code
2022-02-16 01:33:59 -08:00
..
2022-02-01 22:40:19 -08:00
2021-12-28 11:51:13 -08:00
2021-12-28 11:51:13 -08:00
2022-01-21 10:26:43 -08:00
2021-12-30 12:11:02 -08:00
2022-01-21 10:26:43 -08:00
2022-01-26 16:08:04 +01:00
2021-12-30 12:11:02 -08:00
2022-01-06 09:19:32 -08:00
2021-12-30 12:11:02 -08:00
2022-01-26 16:08:04 +01:00