search

a16z / jolt

The simplest and most extensible zkVM. Fast and fully open source from a16z crypto and friends. ⚡
https://jolt.a16zcrypto.com
MIT License
653 stars 137 forks source link

Compile Lasso/Jolt verifier to RISC-V #18

Open sragss opened 1 year ago

sragss commented 1 year ago

Understanding Jolt verifier complexity in terms of RISC-V instructions will help us understand recursive properties and on-chain proving complexity.

GUJustin commented 1 year ago

Doing anything on-chain will mean working over BN254.

Turning Jolt verifier into RISC-V gives one baseline way to do recursion/composition to decrease proof size. Another would be to directly turn Jolt V into R1CS (maybe can reuse some of the work in Testudo, which turned the Spartan verifier with PST polynomial commitment into R1CS to feed to Groth16).