Circle STARKs: A new scheme for building efficient zk-SNARKs over small fields

robot
Abstract generation in progress

Explore Circle STARKs

In recent years, the trend in STARKs protocol design has been to shift towards using smaller fields. The earliest STARKs implementations used 256-bit fields, but this design was less efficient. To improve efficiency, STARKs began using smaller fields such as Goldilocks, Mersenne31, and BabyBear.

Using small fields can significantly improve proof speed. For example, Starkware can prove 620,000 Poseidon2 hashes per second on the M3 notebook. However, small fields also bring some challenges, such as how to achieve sufficient randomness within a limited value space.

Vitalik's New Work: Exploring Circle STARKs

To solve this problem, one can use methods such as multiple random checks or expanding fields. Expanding fields are similar to plurals, introducing new value α such that α^2 equals a specific value, thereby creating more complex mathematical structures.

Vitalik's New Work: Exploring Circle STARKs

Circle STARKs is a clever scheme that efficiently implements the FRI protocol over small fields such as Mersenne31. It utilizes a special circular group structure that has properties similar to a two-to-one mapping. This structure allows us to perform efficient polynomial reductions over small fields.

Vitalik's new work: Exploring Circle STARKs

Circle STARKs also support similar FFT operations, but they deal with Riemann-Roch spaces instead of strict polynomials. This introduces some differences in details, such as the construction methods of quotient operations and vanishing polynomials.

Vitalik's new work: Exploring Circle STARKs

Vitalik's New Work: Exploring Circle STARKs

In general, Circle STARKs provide developers with a way to build efficient STARKs over small fields without having to focus excessively on the underlying mathematical details. It combines the computational efficiency of small fields with sufficient security, making it a promising optimization direction for STARKs.

Vitalik's New Work: Exploring Circle STARKs

Future STARK optimizations may focus on: optimizing the arithmetic of basic cryptographic primitives; improving parallelism through recursive construction; enhancing the arithmetic of the virtual machine to improve the developer experience. We are approaching the limits of efficiency for the STARK foundation layer, and future optimizations will concentrate more on these directions.

! [Vitalik's new work: Exploring Circle STARKs])https://img-cdn.gateio.im/webp-social/moments-13da9460855ee8c504c44696efc2164c.webp)

![Vitalik's New Work: Exploring Circle STARKs])https://img-cdn.gateio.im/webp-social/moments-972d4e51e7d92462c519ef900358a6af.webp(

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 5
  • Share
Comment
0/400
AirdropHunterZhangvip
· 22h ago
I'm making zero-knowledge popcorn again.
View OriginalReply0
PumpDetectorvip
· 22h ago
hmm stark szn never ends... looks bullish af ngl
Reply0
SneakyFlashloanvip
· 23h ago
zk is fun
View OriginalReply0
MetaverseLandladyvip
· 23h ago
They're at it with new tricks again.
View OriginalReply0
BearMarketGardenervip
· 23h ago
Small field STARKs are amazing!
View OriginalReply0
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)