binius_core/ring_switch/
mod.rs

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
// Copyright 2024-2025 Irreducible Inc.

//! Interactive reduction from evaluation claims on committed small-field multilinear polynomials
//! to sumcheck claims on products of committed packed multilinears and transparent polynomials.
//!
//! This is a batched version of the ring-switching reduction from section 4 of [DP24]. The
//! plain, non-batched ring-switching interactive reduction reduces an evaluation claim on a
//! multilinear to a sumcheck on a composition of its corresponding packed polynomial.
//!
//! The input claim for a multilinear $f(X_0, ..., X_{\ell-1})$ is
//!
//! $$
//! f(z_0, ..., z_{\ell-1}) = s.
//! $$
//!
//! The multilinear $t$ has a corresponding "packed" multilinear $t'$, with $\kappa$ fewer
//! variables. Ring-switching reduces the input claim to a sumcheck claim that
//!
//! $$
//! \sum_{v \in B_{\ell'}} f'(v) t_z(v) = s'.
//! $$
//!
//! TODO: Improve documentation and link to binius.xyz docs.
//!
//! [DP24]: <https://eprint.iacr.org/2024/504>

mod common;
mod eq_ind;
mod error;
mod prove;
#[cfg(test)]
mod tests;
mod tower_tensor_algebra;
mod verify;

pub use common::*;
pub use error::*;
pub use prove::*;
pub use verify::*;