iden3 / snarkjs

zkSNARK implementation in JavaScript & WASM
GNU General Public License v3.0
1.77k stars 421 forks source link

the round1 in proof generation of plonk in snarkjs #402

Closed VegeBun-csj closed 1 year ago

VegeBun-csj commented 1 year ago

image May I ask if there are any considerations for adding 4 commitments here? I have seen many plonk implementations of rust with 4 commitments

VegeBun-csj commented 1 year ago

@naps62 @jacobrosenthal @phated @uaoleg @phated @jbaylina hi guys, can we discuss it ? Maybe 4 commitments will be better and do we have any plan to implement it?

xavi-pinsach commented 1 year ago

This code is useful to extend to 4*N evaluations because in the following rounds you more evaluations than N because of the degree of the polynomials you have to compute

VegeBun-csj commented 1 year ago

This code is useful to extend to 4*N evaluations because in the following rounds you more evaluations than N because of the degree of the polynomials you have to compute

So, the community of snarkjs will have plan to apply the 4 commitments?

xavi-pinsach commented 1 year ago

For the computation of the polynomial t(X) of the plonk protocol we interpolate it from its evaluations. Due to the degree of the polynomial t(X) we need 4N evaluations of it. To compute these evaluations we need evaluations of a(X), b(X) and c(X) and therefore we need 4N evaluations of these polynomials