Arithmetize Frobenius Correction Step #6

Open

opened

on Mar 23, 2026

Handle the final Miller loop Frobenius endomorphism corrections using the batched polynomial equation (without squaring the accumulator)[cite: 276, 278]. Generate Q and R via hints and verify in-circuit using EvalPoly.

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests