✳flâneur — a map of the web's best reading

HyperPlonk: Plonk with Linear-Time Prover and High-Degree Custom Gates

eprint.iacr.org · 382 words · saved by 1 readers

Plonk is a widely used succinct non-interactive proof system that uses univariate polynomial commitments. Plonk is quite flexible: it supports circuits with low-degree ``custom'' gates as well as circuits with lookup gates (a lookup gate ensures that its input is contained in a predefined table). For large circuits, the bottleneck in generating a Plonk proof is the need for computing a large FFT. We present HyperPlonk, an adaptation of Plonk to the boolean hypercube, using multilinear polynomial commitments. HyperPlonk retains the flexibility of Plonk but provides several additional benefits. First, it avoids the need for an FFT during proof generation. Second, and more importantly, it supports custom gates of much higher degree than Plonk without harming the running time of the prover. Both of these can dramatically speed up the prover's running time. Since HyperPlonk relies on multilinear polynomial commitments, we revisit two elegant constructions: one from Orion and one from Virgo

HyperPlonk: Plonk with Linear-Time Prover and High-Degree Custom Gates Paper 2022/1355 HyperPlonk: Plonk with Linear-Time Prover and High-Degree Custom Gates Binyi Chen , Espresso Systems Benedikt Bünz , Espresso Systems , Stanford University Dan Boneh , Stanford University Zhenfei Zhang , Espresso Systems Abstract Plonk is a widely used succinct non-interactive proof system that uses univariate polynomial commitments. Plonk is quite flexible: it supports circuits with low-degree ``custom'' gates as well as circuits with lookup gates (a lookup gate ensures that its input is contained in a pred

Explore this link on the map →

related reading