Skip to content

Commit

Permalink
Update groth-16.md
Browse files Browse the repository at this point in the history
  • Loading branch information
GUJustin authored Aug 21, 2024
1 parent f9ff604 commit 93b1d0b
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions book/src/future/groth-16.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Groth16 Recursion
Jolt's verifier today is expensive. We estimate 1-5 million gas to verify within the EVM. Better batching techniques on opening proofs can bring this down 5-10x, but it will remain expensive. Further, the short-term [continuations plan](https://jolt.a16zcrypto.com/future/continuations.html) causes a linear blowup depending on the count of monolithic trace chunks proven.
Jolt's verifier with no proof composition is expensive. We [estimate](on-chain-verifier.md) about 2 million gas to verify within the EVM. Further, the short-term [continuations plan](https://jolt.a16zcrypto.com/future/continuations.html) causes a linear blowup depending on the count of monolithic trace chunks proven.

To solve these two issues we're aiming to add a configuration option to the Jolt prover with a post processing step, which creates a Groth16 proof of the Jolt verifier for constant proof size / cost (~280k gas on EVM) regardless of continuation chunk count or opening proof cost. This technique is industry standard.

Expand Down Expand Up @@ -57,4 +57,4 @@ Suggested plan of attack:
2. Circuit for batched HyperKZG verification
3. Circuit for sumcheck verification
4. Circuit for instruction/subtable MLE evaluations
5. Circuit for Spartan verification
5. Circuit for Spartan verification

0 comments on commit 93b1d0b

Please sign in to comment.