Joint WHIR treatment of the two-stage R1CS witness
Nobody has claimed this yet.
- Dominant language
- Noir
- Stars
- 138
- Forks
- 47
- Avg merge
- 1d 34m
- Merged PRs (30d)
- 6
Description
The ProveKit v2 whitepaper describes treating the two R1CS witnesses w₁ and w₂ as a single combined witness for WHIR, after uniformizing their domains through liftings (liftings, combined witness, Phase 3).
The current implementation processes the two witnesses through separate WHIR executions. This issue tracks the work required to realize the joint construction, including:
- uniformization of the witness/codeword evaluation domains through liftings;
- representation of the virtually combined witness and corresponding R1CS relations;
- joint treatment of the resulting claims in a single WHIR execution;
- impact on the prover, verifier, transcript/proof format, and related integrations.
The precise representation and implementation strategy should be determined as part of the design and subsequent PR.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the ProveKit v2 whitepaper sections on liftings, the combined witness, and Phase 3 to understand the intended construction. Then trace the current separate WHIR executions and their prover, verifier, transcript, proof-format, and integration paths. Done means the two witnesses are uniformly represented and handled through one joint WHIR execution, with affected interfaces updated.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100