Expand description
Verifier cost estimation
Structsยง
- Mmcs batch verification consist of hashing the leaf and then a normal Merkle proof. We separate the cost of hashing (which requires proper padding to be a crytographic hash) from the cost of 2-to-1 compression function on the hash digest because in tree proofs the internal layers do not need to use a compression function with padding.
- Properties of a multi-trace circuit necessary to estimate verifier cost.