rm old hackmd links
arnaucube root@arnaucube.com
Tue, 23 Apr 2024 20:47:56 +0200
1 files changed,
2 insertions(+),
2 deletions(-)
M
src/design/nova-decider-onchain.md
→
src/design/nova-decider-onchain.md
@@ -39,7 +39,7 @@ 3. check that $u_n.x_0 = H(n, z_0, z_n, U_n)$ and $u_n.x_1 = H(U_{EC,n})$
4. Pedersen commitments verification of $U_{EC,n}.\{ \overline{E}, \overline{W} \}$ with respect $W_{EC,n}$ (the witness of the committed instance) (where $\overline{E},\overline{W} \in E_2$, this check is native in $F_r$) <br>*The following check is done non-natively (in $F_r$):* -5. check the correct RelaxedR1CS relation of $U_{EC,n}, W_{EC,n}$ of the CycleFoldCircuit (this is non-native operations and with naive sparse matrix-vector product blows up the number of constraints. We're trying to reduce the number of constraints [in this other hackmd](https://hackmd.io/x82lTH5oTcKE3uPHniuefw?view)) +5. check the correct RelaxedR1CS relation of $U_{EC,n}, W_{EC,n}$ of the CycleFoldCircuit (this is non-native operations and with naive sparse matrix-vector product blows up the number of constraints 6. Check correct computation of the KZG challenges $$c_E = H(\overline{E}.\{x,y\}),~~c_W = H(\overline{W}.\{x,y\})$$ which we do through in-circuit Transcript.@@ -84,7 +84,7 @@ 1. $U_{n+1}$ relation: `3(x+80k)`
2. $u_n$ check: `<1000` 3. $u_n.x$ hash check: `2634` 4. Pedersen check of $U_{EC,n}$ commitments (native): `<5M` both commitments (including the inputs allocations). This is a couple of native MSMs of <1500 elements each one) -5. $U_{EC,n}$ relation (non-native): `5.1M` ([more details on step6 cost](https://hackmd.io/x82lTH5oTcKE3uPHniuefw?view)) +5. $U_{EC,n}$ relation (non-native): `5.1M` 6. Check correct computation of the KZG challenges: `7708` 7. check that the KZG evaluations are correct 8. check that the given NIFS challenge $r$ is indeed well computed