So the main thing is, at least when your circuit is big and then other costs become negligible, your main cost is exactly computing. Well, first of all, you have to commit to what's called your witness polynomials. That you do in a regular plonk proof and you also do when you're just folding a plonk statement. In both cases, you need to commit to the witness poyllomials. And then what is an additional thing you need to do whenyou're folding? You need to compute and commit to the error terms. So that also requires something that's taking some time or that requires some work. What are you saving? The main

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode