Module sumcheck

The multivariate sumcheck and zerocheck polynomial protocols.

Sumcheck supports an efficient prover algorithm when the virtual polynomial is a multilinear composite, so this module only handles that case, rather than the case of general multivariate polynomials.

Re-exports

pub use eq_ind::EqIndSumcheckClaim;

pub use prove::batch_prove;

pub use prove::batch_prove_zerocheck;

pub use verify_sumcheck::batch_verify;

pub use verify_zerocheck::batch_verify as batch_verify_zerocheck;

pub use zerocheck::BatchZerocheckOutput;

pub use zerocheck::ZerocheckClaim;

Modules

eq_ind

front_loaded

prove

verify_sumcheck

verify_zerocheck

zerocheck

Structs

BatchSumcheckOutput

Output of the batched sumcheck reduction

CompositeSumClaim

A claim about the sum of the values of a multilinear composite polynomial over the boolean hypercube.

OracleClaimMeta

RoundCoeffs

A univariate polynomial in monomial basis.

RoundProof

A sumcheck round proof is a univariate polynomial in monomial basis with the coefficient of the highest-degree term truncated off.

SumcheckClaim

A group of claims about the sum of the values of multilinear composite polynomials over the boolean hypercube.

SumcheckClaimsWithMeta

Enums

ConcreteClaim

Error

VerificationError

Functions

constraint_set_sumcheck_claim

Create a sumcheck claim out of constraint set. Fails when the constraint set contains zerochecks. Returns claim and metadata used for evalcheck claim construction.

constraint_set_sumcheck_claims

Constructs sumcheck claims and metas from the vector of ConstraintSet

constraint_set_zerocheck_claim

Create a zerocheck claim from the constraint set. Fails when the constraint set contains regular sumchecks. Returns claim and metadata used for evalcheck claim construction.

equal_n_vars_check

Check that all multilinears in a slice are of the same size.

immediate_switchover_heuristic

Sumcheck switchover heuristic that begins folding immediately in the first round.

make_eval_claims

Constructs evalcheck claims from metadata returned by constraint set claim constructors.

make_zerocheck_eval_claims

Construct eval claims from the batched zerocheck output.

standard_switchover_heuristic

Constructs a switchover function thaw returns the round number where folded multilinear is at least 2^k times smaller (in bytes) than the original, or 1 when not applicable.