01▲Avoiding Product-Denominator Blowup in Lattice-Folding Extraction eprint.iacr.org A lattice-folding extractor that skips the usual branchwise integralization, using local comparisons to tame denominator blowup.eprintfoldingknowledge-extractionlatticemodule-sisnegacyclic-ringsrecursionzk0 pts/mara/10 days ago/1 comment