use ark_ff::PrimeField; use ark_relations::r1cs::SynthesisError; use ark_std::{ops::Shl, ops::ShlAssign}; use crate::boolean::Boolean; use super::{PrimUInt, UInt}; impl UInt { fn _shl_u128(&self, other: u128) -> Result { if other < N as u128 { let mut bits = [Boolean::FALSE; N]; for (a, b) in bits[other as usize..].iter_mut().zip(&self.bits) { *a = b.clone(); } let value = self.value.and_then(|a| Some(a << other)); Ok(Self { bits, value }) } else { panic!("attempt to shift left with overflow") } } } impl Shl for UInt { type Output = Self; /// Output `self << other`. /// /// If at least one of `self` and `other` are constants, then this method /// *does not* create any constraints or variables. /// /// ``` /// # fn main() -> Result<(), ark_relations::r1cs::SynthesisError> { /// // We'll use the BLS12-381 scalar field for our constraints. /// use ark_test_curves::bls12_381::Fr; /// use ark_relations::r1cs::*; /// use ark_r1cs_std::prelude::*; /// /// let cs = ConstraintSystem::::new_ref(); /// let a = UInt8::new_witness(cs.clone(), || Ok(16))?; /// let b = 1u8; /// let c = UInt8::new_witness(cs.clone(), || Ok(16 << 1))?; /// /// (a << b).enforce_equal(&c)?; /// assert!(cs.is_satisfied().unwrap()); /// # Ok(()) /// # } /// ``` #[tracing::instrument(target = "r1cs", skip(self, other))] fn shl(self, other: T2) -> Self::Output { self._shl_u128(other.into()).unwrap() } } impl<'a, const N: usize, T: PrimUInt, F: PrimeField, T2: PrimUInt> Shl for &'a UInt { type Output = UInt; #[tracing::instrument(target = "r1cs", skip(self, other))] fn shl(self, other: T2) -> Self::Output { self._shl_u128(other.into()).unwrap() } } impl ShlAssign for UInt { /// Sets `self = self << other`. /// /// If at least one of `self` and `other` are constants, then this method /// *does not* create any constraints or variables. /// /// ``` /// # fn main() -> Result<(), ark_relations::r1cs::SynthesisError> { /// // We'll use the BLS12-381 scalar field for our constraints. /// use ark_test_curves::bls12_381::Fr; /// use ark_relations::r1cs::*; /// use ark_r1cs_std::prelude::*; /// /// let cs = ConstraintSystem::::new_ref(); /// let mut a = UInt8::new_witness(cs.clone(), || Ok(16))?; /// let b = 1u8; /// let c = UInt8::new_witness(cs.clone(), || Ok(16 << 1))?; /// /// a <<= b; /// a.enforce_equal(&c)?; /// assert!(cs.is_satisfied().unwrap()); /// # Ok(()) /// # } /// ``` #[tracing::instrument(target = "r1cs", skip(self, other))] fn shl_assign(&mut self, other: T2) { let result = self._shl_u128(other.into()).unwrap(); *self = result; } } #[cfg(test)] mod tests { use super::*; use crate::{ alloc::{AllocVar, AllocationMode}, prelude::EqGadget, uint::test_utils::{run_binary_exhaustive_with_native, run_binary_random_with_native}, R1CSVar, }; use ark_ff::PrimeField; use ark_test_curves::bls12_381::Fr; fn uint_shl( a: UInt, b: T, ) -> Result<(), SynthesisError> { let cs = a.cs(); let b = b.into() % (N as u128); let computed = &a << b; let expected_mode = if a.is_constant() { AllocationMode::Constant } else { AllocationMode::Witness }; let expected = UInt::::new_variable(cs.clone(), || Ok(a.value()? << b), expected_mode)?; assert_eq!(expected.value(), computed.value()); expected.enforce_equal(&computed)?; if !a.is_constant() { assert!(cs.is_satisfied().unwrap()); } Ok(()) } #[test] fn u8_shl() { run_binary_exhaustive_with_native(uint_shl::).unwrap() } #[test] fn u16_shl() { run_binary_random_with_native::<1000, 16, _, _>(uint_shl::).unwrap() } #[test] fn u32_shl() { run_binary_random_with_native::<1000, 32, _, _>(uint_shl::).unwrap() } #[test] fn u64_shl() { run_binary_random_with_native::<1000, 64, _, _>(uint_shl::).unwrap() } #[test] fn u128_shl() { run_binary_random_with_native::<1000, 128, _, _>(uint_shl::).unwrap() } }