Home > Resources > papers > GW20-Plookup

Plookup: A Simplified Polynomial Protocol for Lookup Tables (Gabizon-Williamson 2020)

URL: https://eprint.iacr.org/2020/315.pdf

Summary

Introduces Plookup, a protocol for efficiently proving that values in a witness belong to a pre-committed lookup table, using a sorted-union argument. Reduces the cost of range checks and non-linear operations in PLONK circuits significantly. The technique was integrated into TurboPLONK and UltraPLONK and inspired many subsequent lookup arguments.

Used by

• plookup

Related resources

• PLONK: Permutations over Lagrange-bases for Oecumenical Noninteractive arguments of Knowledge (paper, 2019)