#![allow(non_snake_case)] use bellperson::{gadgets::num::AllocatedNum, ConstraintSystem, SynthesisError}; use core::marker::PhantomData; use criterion::*; use ff::PrimeField; use nova_snark::{ traits::{ circuit::{StepCircuit, TrivialTestCircuit}, Group, }, CompressedSNARK, PublicParams, RecursiveSNARK, }; use std::time::Duration; type G1 = pasta_curves::pallas::Point; type G2 = pasta_curves::vesta::Point; type S1 = nova_snark::spartan_with_ipa_pc::RelaxedR1CSSNARK; type S2 = nova_snark::spartan_with_ipa_pc::RelaxedR1CSSNARK; type C1 = NonTrivialTestCircuit<::Scalar>; type C2 = TrivialTestCircuit<::Scalar>; criterion_group! { name = compressed_snark; config = Criterion::default().warm_up_time(Duration::from_millis(3000)); targets = bench_compressed_snark } criterion_main!(compressed_snark); fn bench_compressed_snark(c: &mut Criterion) { let num_samples = 10; let num_cons_verifier_circuit_primary = 20584; // we vary the number of constraints in the step circuit for &num_cons_in_augmented_circuit in [20584, 32768, 65536, 131072, 262144, 524288, 1048576].iter() { // number of constraints in the step circuit let num_cons = num_cons_in_augmented_circuit - num_cons_verifier_circuit_primary; let mut group = c.benchmark_group(format!("CompressedSNARK-StepCircuitSize-{}", num_cons)); group.sample_size(num_samples); // Produce public parameters let pp = PublicParams::::setup( NonTrivialTestCircuit::new(num_cons), TrivialTestCircuit::default(), ); // produce a recursive SNARK let num_steps = 3; let mut recursive_snark: Option> = None; for i in 0..num_steps { let res = RecursiveSNARK::prove_step( &pp, recursive_snark, NonTrivialTestCircuit::new(num_cons), TrivialTestCircuit::default(), ::Scalar::from(2u64), ::Scalar::from(2u64), ); assert!(res.is_ok()); let recursive_snark_unwrapped = res.unwrap(); // verify the recursive snark at each step of recursion let res = recursive_snark_unwrapped.verify( &pp, i + 1, ::Scalar::from(2u64), ::Scalar::from(2u64), ); assert!(res.is_ok()); // set the running variable for the next iteration recursive_snark = Some(recursive_snark_unwrapped); } // Bench time to produce a compressed SNARK let recursive_snark = recursive_snark.unwrap(); group.bench_function("Prove", |b| { b.iter(|| { assert!(CompressedSNARK::<_, _, _, _, S1, S2>::prove( black_box(&pp), black_box(&recursive_snark) ) .is_ok()); }) }); let res = CompressedSNARK::<_, _, _, _, S1, S2>::prove(&pp, &recursive_snark); assert!(res.is_ok()); let compressed_snark = res.unwrap(); // Benchmark the verification time group.bench_function("Verify", |b| { b.iter(|| { assert!(black_box(&compressed_snark) .verify( black_box(&pp), black_box(num_steps), black_box(::Scalar::from(2u64)), black_box(::Scalar::from(2u64)), ) .is_ok()); }) }); group.finish(); } } #[derive(Clone, Debug, Default)] struct NonTrivialTestCircuit { num_cons: usize, _p: PhantomData, } impl NonTrivialTestCircuit where F: PrimeField, { pub fn new(num_cons: usize) -> Self { Self { num_cons, _p: Default::default(), } } } impl StepCircuit for NonTrivialTestCircuit where F: PrimeField, { fn synthesize>( &self, cs: &mut CS, z: AllocatedNum, ) -> Result, SynthesisError> { // Consider a an equation: `x^2 = y`, where `x` and `y` are respectively the input and output. let mut x = z; let mut y = x.clone(); for i in 0..self.num_cons { y = x.square(cs.namespace(|| format!("x_sq_{}", i)))?; x = y.clone(); } Ok(y) } fn output(&self, z: &F) -> F { let mut x = *z; let mut y = x; for _i in 0..self.num_cons { y = x * x; x = y; } y } }