jolt
jolt copied to clipboard
Compile Lasso/Jolt verifier to RISC-V
Understanding Jolt verifier complexity in terms of RISC-V instructions will help us understand recursive properties and on-chain proving complexity.
Doing anything on-chain will mean working over BN254.
Turning Jolt verifier into RISC-V gives one baseline way to do recursion/composition to decrease proof size. Another would be to directly turn Jolt V into R1CS (maybe can reuse some of the work in Testudo, which turned the Spartan verifier with PST polynomial commitment into R1CS to feed to Groth16).