arnaucube
arnaucube/sonobe-docsPublic Self-hosted repository
update augmentedfcircuit constr
arnaucube root@arnaucube.com
Wed, 24 Apr 2024 10:16:03 +0200
commit

fc66215bd8e07b8ee3e155899286623ff2e59940

parent

2709c2950e159280b36185f80ed9c76c5b283c76

1 files changed, 4 insertions(+), 4 deletions(-)

jump to
M src/design/nova-decider-onchain.md → src/design/nova-decider-onchain.md

@@ -78,9 +78,9 @@ > Note: the number of constraints written in this section is the current values that we have, which we aim to reduce in future iterations.

<u>Estimated costs of the full decider-onchain circuit:</u> -*(`x` is the number of constraints of the circuit that we're folding, and the AugmentedFCircuit takes ~80k constraints)* +*(`x` is the number of constraints of the circuit that we're folding, and the AugmentedFCircuit takes ~52k constraints)* -1. $U_{n+1}$ relation: `3(x+80k)` +1. $U_{n+1}$ relation: `3(x+52k)` 2. $u_n$ check: `<1000` 3. $u_n.x$ hash check: `2634` 4. Pedersen check of $U_{EC,n}$ commitments (native): `<5M` both commitments (including the inputs allocations). This is a couple of native MSMs of <1500 elements each one)

@@ -89,8 +89,8 @@ 6. Check correct computation of the KZG challenges: `7708`

7. check that the KZG evaluations are correct 8. check that the given NIFS challenge $r$ is indeed well computed -Total: 3 * (x + 80) + 1000 + 2634 + 4_967_155 + 5_146_236 + 7708 +Total: 3 * (x + 52_252) + 1000 + 2634 + 4_967_155 + 5_146_236 + 7708 -eg: for a circuit of `500k` constraints the decider circuit would take approximately `11.6M` constraints. +eg: for a circuit of `500k` constraints the decider circuit would take approximately `11.7M` constraints. As can be seen, most of the costs come from the Pedersen commitments verification and the $U_{EC,n}$ relation