Skip to content

Commit

Permalink
add ProtoGalaxy
Browse files Browse the repository at this point in the history
  • Loading branch information
huitseeker committed Jul 17, 2023
1 parent 4af352f commit 85dcd13
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -108,9 +108,14 @@ Extensions to the Nova proof system that explore PCS in terms of linear codes, f
### HyperNova / ProtoStar : The next generation (with high-degree gates)

- [Customizable constraint systems for succinct arguments](https://eprint.iacr.org/2023/552)
This paper introduces customizable constraint system (CCS), a generalization of R1CS that can simultaneously capture R1CS, Plonkish, and AIR without overheads.
- [HyperNova: Recursive arguments for customizable constraint systems](https://eprint.iacr.org/2023/573)
This paper introduces HyperNova, a recursive argument for proving incremental computations whose steps are expressed with CCS. A distinguishing aspect of HyperNova is that the prover’s cost at each step is dominated by a single multi-scalar multiplication (MSM) of size equal to the number of variables in the constraint system, which is optimal when using an MSM-based commitment scheme.
- [ProtoStar: Generic Efficient Accumulation/Folding for Special Sound Protocols](https://eprint.iacr.org/2023/620)
We provide a generic, efficient accumulation (or folding) scheme for any (2k-1)-move special-sound protocol with a verifier that checks l degree-d equations. The accumulation verifier only performs k+2 elliptic curve multiplications and k+d+O(1) field/hash operations.
- [Presentation](https://www.youtube.com/watch?v=tt00TLFJPpc)
- [ProtoGalaxy: Efficient ProtoStar-style folding of multiple instances](https://eprint.iacr.org/2023/1106)
Building on ideas from ProtoStar [BC23] we construct a folding scheme where the recursive verifier's "marginal work", beyond linearly combining witness commitments, consists only of a logarithmic number of field operations and a constant number of hashes. Moreover, our folding scheme performs well when *folding multiple instances at one step*.

## Code (software repositories)

Expand Down

0 comments on commit 85dcd13

Please sign in to comment.