risc0 / risc0

RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture.

Home Page:https://risczero.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Question about quadratic extension in Goldilocks

DmytroTym opened this issue · comments

Question

Hi. I was wondering about the choice of non-residue in your quadratic extension of Goldilocks - it's currently 11. Although there's a smaller non-residue available - 7, and it's used by all other codebases I know of, including plonky2, boojum, gnark (in gnark it's less clear from the code but they auto-generate the smallest non-residue which is 7 for Goldilocks) and others. Could it have possibly happened that you moved the non-residue from your baby bear code (where it's rightfully 11)? And in general, do you think it's possible and preferable to switch to 7 at some point or are there good reasons not to? Thanks.

Motivation

My main concern is interoperability. For example, for a future third-party hardware acceleration.