use super::{ errors::NovaError, traits::{AbsorbInROTrait, AppendToTranscriptTrait, CompressedGroup, Group, ROTrait}, }; use core::{ fmt::Debug, marker::PhantomData, ops::{Add, AddAssign, Mul, MulAssign}, }; use ff::Field; use merlin::Transcript; use rayon::prelude::*; #[derive(Clone, Debug)] pub struct CommitGens { gens: Vec, _p: PhantomData, } #[derive(Clone, Copy, Debug, PartialEq, Eq)] pub struct Commitment { pub(crate) comm: G, } #[derive(Clone, Debug, PartialEq, Eq)] pub struct CompressedCommitment { comm: C, } impl CommitGens { pub fn new(label: &'static [u8], n: usize) -> Self { CommitGens { gens: G::from_label(label, n.next_power_of_two()), _p: Default::default(), } } fn len(&self) -> usize { self.gens.len() } pub fn split_at(&self, n: usize) -> (CommitGens, CommitGens) { ( CommitGens { gens: self.gens[0..n].to_vec(), _p: Default::default(), }, CommitGens { gens: self.gens[n..].to_vec(), _p: Default::default(), }, ) } pub fn combine(&self, other: &CommitGens) -> CommitGens { let gens = { let mut c = self.gens.clone(); c.extend(other.gens.clone()); c }; CommitGens { gens, _p: Default::default(), } } // combines the left and right halves of `self` using `w1` and `w2` as the weights pub fn fold(&self, w1: &G::Scalar, w2: &G::Scalar) -> CommitGens { let w = vec![*w1, *w2]; let (L, R) = self.split_at(self.len() / 2); let gens = (0..self.len() / 2) .into_par_iter() .map(|i| { let gens = CommitGens:: { gens: [L.gens[i].clone(), R.gens[i].clone()].to_vec(), _p: Default::default(), }; w.commit(&gens).comm.preprocessed() }) .collect(); CommitGens { gens, _p: Default::default(), } } /// Scales each element in `self` by `r` pub fn scale(&self, r: &G::Scalar) -> Self { let gens_scaled = self .gens .clone() .into_par_iter() .map(|g| { let gens = CommitGens:: { gens: vec![g], _p: Default::default(), }; [*r].commit(&gens).comm.preprocessed() }) .collect(); CommitGens { gens: gens_scaled, _p: Default::default(), } } /// reinterprets a vector of commitments as a set of generators pub fn reinterpret_commitments_as_gens( c: &[CompressedCommitment], ) -> Result { let d = (0..c.len()) .into_par_iter() .map(|i| c[i].decompress()) .collect::>, NovaError>>()?; let gens = (0..d.len()) .into_par_iter() .map(|i| d[i].comm.preprocessed()) .collect(); Ok(CommitGens { gens, _p: Default::default(), }) } } impl Commitment { pub fn compress(&self) -> CompressedCommitment { CompressedCommitment { comm: self.comm.compress(), } } } impl Default for Commitment { fn default() -> Self { Commitment { comm: G::zero() } } } impl CompressedCommitment { pub fn decompress(&self) -> Result, NovaError> { let comm = self.comm.decompress(); if comm.is_none() { return Err(NovaError::DecompressionError); } Ok(Commitment { comm: comm.unwrap(), }) } } pub trait CommitTrait { fn commit(&self, gens: &CommitGens) -> Commitment; } impl CommitTrait for [G::Scalar] { fn commit(&self, gens: &CommitGens) -> Commitment { assert!(gens.gens.len() >= self.len()); Commitment { comm: G::vartime_multiscalar_mul(self, &gens.gens[..self.len()]), } } } impl AppendToTranscriptTrait for Commitment { fn append_to_transcript(&self, label: &'static [u8], transcript: &mut Transcript) { transcript.append_message(label, self.comm.compress().as_bytes()); } } impl AbsorbInROTrait for Commitment { fn absorb_in_ro(&self, ro: &mut G::RO) { let (x, y, is_infinity) = self.comm.to_coordinates(); ro.absorb(x); ro.absorb(y); ro.absorb(if is_infinity { G::Base::one() } else { G::Base::zero() }); } } impl AppendToTranscriptTrait for CompressedCommitment { fn append_to_transcript(&self, label: &'static [u8], transcript: &mut Transcript) { transcript.append_message(label, self.comm.as_bytes()); } } impl<'b, G: Group> MulAssign<&'b G::Scalar> for Commitment { fn mul_assign(&mut self, scalar: &'b G::Scalar) { let result = (self as &Commitment).comm * scalar; *self = Commitment { comm: result }; } } impl<'a, 'b, G: Group> Mul<&'b G::Scalar> for &'a Commitment { type Output = Commitment; fn mul(self, scalar: &'b G::Scalar) -> Commitment { Commitment { comm: self.comm * scalar, } } } impl Mul for Commitment { type Output = Commitment; fn mul(self, scalar: G::Scalar) -> Commitment { Commitment { comm: self.comm * scalar, } } } impl<'b, G: Group> AddAssign<&'b Commitment> for Commitment { fn add_assign(&mut self, other: &'b Commitment) { let result = (self as &Commitment).comm + other.comm; *self = Commitment { comm: result }; } } impl<'a, 'b, G: Group> Add<&'b Commitment> for &'a Commitment { type Output = Commitment; fn add(self, other: &'b Commitment) -> Commitment { Commitment { comm: self.comm + other.comm, } } } macro_rules! define_add_variants { (G = $g:path, LHS = $lhs:ty, RHS = $rhs:ty, Output = $out:ty) => { impl<'b, G: $g> Add<&'b $rhs> for $lhs { type Output = $out; fn add(self, rhs: &'b $rhs) -> $out { &self + rhs } } impl<'a, G: $g> Add<$rhs> for &'a $lhs { type Output = $out; fn add(self, rhs: $rhs) -> $out { self + &rhs } } impl Add<$rhs> for $lhs { type Output = $out; fn add(self, rhs: $rhs) -> $out { &self + &rhs } } }; } macro_rules! define_add_assign_variants { (G = $g:path, LHS = $lhs:ty, RHS = $rhs:ty) => { impl AddAssign<$rhs> for $lhs { fn add_assign(&mut self, rhs: $rhs) { *self += &rhs; } } }; } define_add_assign_variants!(G = Group, LHS = Commitment, RHS = Commitment); define_add_variants!(G = Group, LHS = Commitment, RHS = Commitment, Output = Commitment);