We can save 1 FFT (of 7) if we compute the h_query points in the evaluation form during the setup. We can similarly avoid the division when computing h by normalizing these points by g^n - 1 (evaluations of the vanishing polynomial on the coset).
See the PoC here: https://github.com/achimcc/groth16/pull/1/files
These changes break existing proving keys, though I believe they can be updated. Does it worth the burden?
For Admin Use
We can save 1 FFT (of 7) if we compute the
h_querypoints in the evaluation form during the setup. We can similarly avoid the division when computinghby normalizing these points byg^n - 1(evaluations of the vanishing polynomial on the coset).See the PoC here: https://github.com/achimcc/groth16/pull/1/files
These changes break existing proving keys, though I believe they can be updated. Does it worth the burden?
For Admin Use