The sumcheck protocol is a fundamental building block in the design of probabilistic proof systems, and has become a key component of recent work on efficient succinct arguments. We study time-space trade-offs for the prover of the sumcheck protocol in the streaming model, and provide upper and lower bounds that tightly characterize the efficiency achievable by the prover. We implement and evaluate the prover algorithm for products of multilinear polynomials. We show that our algorithm consumes up to \(120\times \) less memory compare to the linear-time prover algorithm, while incurring a time overhead of less than \(2\times \) . The foregoing algorithms and lower bounds apply in the interactive proof model. We show that in the polynomial interactive oracle proof model one can in fact design a new protocol that achieves a better time-space trade-off of \(O(N^{1/k})\) space and \(O(N(\log ^* N + k))\) time for any \(k \ge 1\) .

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Time-Space Trade-Offs for Sumcheck

  • Anubhav Baweja,
  • Alessandro Chiesa,
  • Elisabetta Fedele,
  • Giacomo Fenzi,
  • Pratyush Mishra,
  • Tushar Mopuri,
  • Andrew Zitek-Estrada

摘要

The sumcheck protocol is a fundamental building block in the design of probabilistic proof systems, and has become a key component of recent work on efficient succinct arguments. We study time-space trade-offs for the prover of the sumcheck protocol in the streaming model, and provide upper and lower bounds that tightly characterize the efficiency achievable by the prover. We implement and evaluate the prover algorithm for products of multilinear polynomials. We show that our algorithm consumes up to \(120\times \) less memory compare to the linear-time prover algorithm, while incurring a time overhead of less than \(2\times \) . The foregoing algorithms and lower bounds apply in the interactive proof model. We show that in the polynomial interactive oracle proof model one can in fact design a new protocol that achieves a better time-space trade-off of \(O(N^{1/k})\) space and \(O(N(\log ^* N + k))\) time for any \(k \ge 1\) .