That is awesome results. Some questions about the way falcon circuit is implemented in LABRADOR: what is the inside PRNG used for the hashToPoint part of the verification (replace keccak by poseidon for sure ?) how many NTTs are computed in the verification ? Is the precomputed version of the public key used, (being a bijective function, it can be considered as an encoding, thus saving 33% of computational time). benchmarks display 1 thread, is the // of aggregation a easy or hard task (shall...
