Skip to main content

conjectured_commit_phase_error

Function conjectured_commit_phase_error 

Source
pub fn conjectured_commit_phase_error(
    regime: &FriRegime,
    shape: &InstanceShape,
) -> Option<ErrorBits>
Expand description

FRI commit-phase per-round error in the conjectured regime.

Identical to commit_phase_error_udr, and deliberately so: the bound counts the folding challenges that are exceptional for a given committed word, and that count does not depend on the decoding regime. What the random-words conjecture buys is the removal of the list-size multiplier L⁺ that the Johnson-bound analysis pays (see crate::stark::conjectured_security_report) — it does not assert that a bad folding challenge cannot exist. Dropping the round entirely, as an LDT-only conjectured number does, therefore overstates security for a large LDE domain over a small field.

Returns None when no fold occurs, in which case there is no such round.