Daniel Lubarov 72d13d0ded

Prover code for permutation argument (#485) ...

* Batch multiple perm args into one Z and compute Z columnwise

It's slightly complex because we batch `constraint_degree - 1` permutation arguments into a single `Z` polynomial. This is a slight generalization of the [technique](https://zcash.github.io/halo2/design/proving-system/lookup.html) described in the Halo2 book.

Without this batching, we would simply have `num_challenges` random challenges (betas and gammas). With this batching, however, we need to use different randomness for each permutation argument within the same batch. Hence we end up generating `batch_size * num_challenges` challenges for all permutation arguments.

* Feedback + updates for recursion code

2022-02-16 01:33:59 -08:00

..

src

Prover code for permutation argument (#485)

2022-02-16 01:33:59 -08:00

Cargo.toml

metadata

2022-01-21 10:14:44 -08:00