piop computes the linearization polynomial

[swasilyev]

No description provided.

[davxy]

So basically this changes the function to also aggregate the commitments right?

Just need to fix CI (clippy or fmt)

[swasilyev]

So basically this changes the function to also aggregate the commitments right?

Basically yes. It's not even an optimization, but the API that would make an optimization possible.

There's only m possible bases in this (verifier computes the commitment to the linearization polynomial from the commitments to the columns) msm -- the commitments to the columns. Still the number of constraint polynomials and therefore the number of alphas (random challenges we use to aggregate the constraints into the single polynomial) can be arbitrary.

Also fixes:
https://github.com/w3f/ring-proof/blob/9dc7c15b17ef12bdd79c716b6d652034516deef4/w3f-plonk-common/src/verifier.rs#L77