Proof System
The proof-system layer turns a compiled QuadCircuit plus a witness into a non-interactive zero-knowledge argument, and checks one on the verifier side. It composes three pieces — sumcheck (for circuit correctness), Ligero (for witness commitment), and a Fiat-Shamir transcript (to make everything non-interactive) — behind a single top-level entry point in zk/.
If you are integrating Longfellow into your own system, start at ZK (top-level). You rarely need to call sumcheck or ligero directly; the interior pages exist so you can understand what the top-level is doing on your behalf.
How the layers stack
Pages in this group
- ZK (top-level) — the composer you actually call.
- Sumcheck — layered prover and verifier over a quadratic circuit.
- Ligero — commitment scheme, parameters, and soundness. Level-3 treatment on parameter selection.
- Merkle Commitments — the tree used by Ligero.
- Transcript & Randomness — Fiat-Shamir discipline and RNG surface.
Last updated on