Circle STARKs

The vanilla STARK protocol assumes the unit group of the field is divisible by a large power of two. This assumption fails for the Mersenne prime field M31. But fear not! Geometry comes to the rescue!