Roadmap

[chancharles92]

• Protocol description (1 week)

• Building block multivariate-poly-IOPs (2 weeks)

  • Sumchecks (wrapper of Arkworks) initial implemetation of Sumcheck protocol #7
  • Zerochecks implement zero checks #8
  • Permutation-checks #23

• Compose hyperplonk from sum checks and zero checks

  • implement offline phase
  • implement interactive phase
  • implement query phase

• Constraint system + Arithmetization (2 weeks)

  • Interfaces: circuit config, gadgets, Arithmetization
  • Circuit config impl
  • Arithmetization impl

• Proof system (3 weeks)

  • Interfaces, structs, and transcripts
  • Prover
  • Verifier

• Multilinear polynomial commitment scheme (2 weeks) initial implementation of multilinear pcs #22

  • Reference: vRAM: Faster verifiable RAM with program-independent preprocessing, appendix G
  • Syntax: follow arkworks/polycomm

• Virtual Polynomial APIs

  • Impl vp additions and mul by mle #17
  • extract a sub MLE via evaluating the first variable at 0 or 1 #25

backlogs

• Building blocks (we are hard coding those blocks for better efficiency; we may want to build an abstraction in future)
  • Product-checks
  • Lookup-checks

[bbuenz]

Maybe we should add a bullet or subbullet for sum check

[chancharles92]

Maybe we should add a bullet or subbullet for sum check

Yes, added a bullet for the multivariate-poly-IOPs (which includes sumchecks)

[zhenfeizhang]

Updated roadmap.

I think for now we can claim that backend e2e is complete. We now have a PoC that generates proofs and verify them. The reminder are code optimizations and refactors. do you agree? @chancharles92