Daniel Lubarov 7d6c0a448d
Halo2 style lookup arguments in System Zero (#513)
* Halo2 style lookup arguments in System Zero

It's a really nice and simple protocol, particularly for the verifier since the constraints are trivial (aside from the underlying batched permutation checks, which we already support). See the [Halo2 book](https://zcash.github.io/halo2/design/proving-system/lookup.html) and this [talk](https://www.youtube.com/watch?v=YlTt12s7vGE&t=5237s) by @daira.

Previously we generated the whole trace in row-wise form, but it's much more efficient to generate these "permuted" columns column-wise. So I changed our STARK framework to accept the trace in column-wise form. STARK impls now have the flexibility to do some generation row-wise and some column-wise (without extra costs; there's a single transpose as before).

* sorting

* fixes

* PR feedback

* into_iter

* timing
2022-03-16 17:37:34 -07:00
..
2022-02-01 22:40:19 -08:00
2021-12-28 11:51:13 -08:00
2021-12-28 11:51:13 -08:00
2022-01-21 10:26:43 -08:00
2021-12-30 12:11:02 -08:00
2022-01-21 10:26:43 -08:00
2021-12-30 12:11:02 -08:00
2022-01-06 09:19:32 -08:00
2021-12-30 12:11:02 -08:00
2022-01-26 16:08:04 +01:00