Why splitting t?

Research
1

Hello hello,

I’m wondering why the SRS didn’t include more powers of s so that we could just commit to t without splitting it?

2

found a similar question asked here: Understanding PLONK

3

Because the polynomial commitment only supports polynomial of degree up to n. And the quotient polynomial t's degree is 3*n.

4

If you do not split the t polynomial into 3 pieces, then the largest circuit’s size would be n/3.

1 Like
5

That makes sense, so I guess bottomline is that it’s an optimization to reduce the SRS/URS size. And consequently the proof size.