Lattices, Folding, & Symphony with Binyi Chen

November 19, 2025·1 hr 6 min·5 clips

Binyi Chen explains how lattices became a feasible replacement for Pedersen hashes, enabling post-quantum secure folding schemes.

Anna Rose starts with the research map. She places Binyi Chen's work across Lattice Fold, Lattice Fold Plus, and Symphony, then uses the episode as a technical companion to the Lattice Fold whiteboard material. The hosts take their time. They ask why lattices and folding belong in the same conversation, what the pairing replaces, and where it becomes harder than the elliptic-curve schemes it is trying to challenge. Binyi does not sell it as magic. Lattices opened a path once they looked feasible as a replacement for Peterson hashes, but feasibility did not wipe away the costs. Folding can reduce some curve-cycle pressure. It also brings norm blow-up, low-norm proof obligations, and extra prover work that changes the performance story. The first-generation schemes can sound practical and competitive. They still do not beat elliptic-curve-based folding, because the prover has to commit to several lower-norm witness vectors before running sum-check-style checks. That tradeoff becomes the center of the interview. Even when the ring-based ATACommitment is efficient, the surrounding work keeps the full scheme from outrunning the elliptic-curve comparison target. Range proofs matter a lot here. Binyi points to more efficient range proofs as much of the work behind Lattice Fold, Lattice Fold Plus, and the whiteboard sessions. Then the conversation moves to Symphony, fresh work that gives the hosts a chance to ask what changed and how this research line might mature. The ending stays unresolved on purpose. Some SNARK comparisons are still unknown, and the hosts lightly sketch a two-year horizon for seeing how lattice-based SNARKs stack up against hash-based SNARKs. The episode is dense, but it keeps pausing to ask what layer a problem belongs to, why the replacement matters, and which costs are actually being paid.

As heard by us

A careful look at lattice folding and the trade-offs around it.

The episode tracks Binyi Chen as he walks Anna Rose and Nico through Lattice Fold, Lattice Fold Plus, and Symphony, and it keeps circling back to the same practical questions: why lattices matter, what they can stand in for, and what they cost.

Read the full review in PlayNext →

Why you'd press play

You want a clear lattice-folding map before the research details start to blur.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Zero Knowledge Podcast