jolt
jolt copied to clipboard
Implement on-chain verifier (Solidity, Move, etc.)
The on-chain verifier will be much cheaper after switching the polynomial commitment scheme to one with logarithmic verifier costs (see this other issue)
Hey @GUJustin -
Do you happen to know off-hand how many MSM / the non-native field work would be for both Zeromorph or HyperKZG? For Hyrax is was two MSM (Grumpkin-base-field and circuit in BN254 scalar field ) then sum-check is non-native.
I tried to integrate the verifier into the canister of the IC blockchain, and succeeded. For details, see: https://hackmd.io/@liquan/S1dybGcl0