The following post has benchmarked WHIR over a 31-bit field and using the Johnson bound. It seems like the calldata gas costs that you can save up from using a smaller field are eventually lost due to the cost of doing extension field arithmetic.
1 Like