You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
334 lines
12 KiB
334 lines
12 KiB
package plonky2_verifier
|
|
|
|
import (
|
|
. "gnark-plonky2-verifier/field"
|
|
. "gnark-plonky2-verifier/poseidon"
|
|
"testing"
|
|
|
|
"github.com/consensys/gnark/frontend"
|
|
"github.com/consensys/gnark/test"
|
|
)
|
|
|
|
type TestVerifierChallengesCircuit struct {
|
|
fieldAPI frontend.API `gnark:"-"`
|
|
qeAPI *QuadraticExtensionAPI `gnark:"-"`
|
|
hashAPI *HashAPI `gnark:"-"`
|
|
|
|
proofWithPIsFilename string `gnark:"-"`
|
|
commonCircuitDataFilename string `gnark:"-"`
|
|
verifierOnlyCircuitDataFilename string `gnark:"-"`
|
|
|
|
numChallenges uint64 `gnark:"-"`
|
|
numFriQueries uint64 `gnark:"-"`
|
|
|
|
t *testing.T `gnark:"-"`
|
|
|
|
expectedPublicInputsHash Hash
|
|
expectedPlonkBetas []F // slice length == num challenges
|
|
expectedPlonkGammas []F // slice length == num challenges
|
|
expectedPlonkAlphas []F // slice length == num challenges
|
|
expectedPlonkZeta QuadraticExtension
|
|
expectedFriAlpha QuadraticExtension
|
|
expectedFriBetas []QuadraticExtension // slice length == num fri rounds
|
|
expectedFriQueryIndices []F // slice length == num fri queries
|
|
|
|
verifierChip *VerifierChip
|
|
}
|
|
|
|
func (c *TestVerifierChallengesCircuit) GetChallengesSanityCheck(
|
|
proofWithPis ProofWithPublicInputs,
|
|
verifierData VerifierOnlyCircuitData,
|
|
commonData CommonCircuitData,
|
|
) {
|
|
publicInputsHash := c.verifierChip.GetPublicInputsHash(proofWithPis.PublicInputs)
|
|
proofChallenges := c.verifierChip.GetChallenges(proofWithPis, publicInputsHash, commonData, verifierData)
|
|
|
|
c.hashAPI.AssertIsEqualHash(publicInputsHash, c.expectedPublicInputsHash)
|
|
|
|
if len(proofChallenges.PlonkBetas) != int(c.numChallenges) {
|
|
c.t.Errorf("len(PlonkBetas) should equal numChallenges")
|
|
}
|
|
for i := 0; i < int(c.numChallenges); i++ {
|
|
c.fieldAPI.AssertIsEqual(proofChallenges.PlonkBetas[i], c.expectedPlonkBetas[i])
|
|
}
|
|
|
|
if len(proofChallenges.PlonkGammas) != int(c.numChallenges) {
|
|
c.t.Errorf("len(PlonkGammas) should equal numChallenges")
|
|
}
|
|
for i := 0; i < int(c.numChallenges); i++ {
|
|
c.fieldAPI.AssertIsEqual(proofChallenges.PlonkGammas[i], c.expectedPlonkGammas[i])
|
|
}
|
|
|
|
if len(proofChallenges.PlonkAlphas) != int(c.numChallenges) {
|
|
c.t.Errorf("len(PlonkAlphas) should equal numChallenges")
|
|
}
|
|
for i := 0; i < int(c.numChallenges); i++ {
|
|
c.fieldAPI.AssertIsEqual(proofChallenges.PlonkAlphas[i], c.expectedPlonkAlphas[i])
|
|
}
|
|
|
|
c.qeAPI.AssertIsEqual(proofChallenges.PlonkZeta, c.expectedPlonkZeta)
|
|
|
|
c.qeAPI.AssertIsEqual(proofChallenges.FriChallenges.FriAlpha, c.expectedFriAlpha)
|
|
|
|
if len(proofChallenges.FriChallenges.FriBetas) != len(commonData.FriParams.ReductionArityBits) {
|
|
c.t.Errorf("len(PlonkAlphas) should equal num fri rounds")
|
|
}
|
|
for i := 0; i < len(commonData.FriParams.ReductionArityBits); i++ {
|
|
c.qeAPI.AssertIsEqual(proofChallenges.FriChallenges.FriBetas[i], c.expectedFriBetas[i])
|
|
}
|
|
|
|
// This test is commented out because pow_witness is randomized between runs of the prover.
|
|
// expectedPowResponse := NewFieldElementFromString("92909863298412")
|
|
// c.field.AssertIsEqual(proofChallenges.FriChallenges.FriPowResponse, expectedPowResponse)
|
|
|
|
if len(proofChallenges.FriChallenges.FriQueryIndices) != int(c.numFriQueries) {
|
|
c.t.Errorf("len(expectedFriQueryIndices) should equal num fri queries")
|
|
}
|
|
|
|
for i := 0; i < int(c.numFriQueries); i++ {
|
|
c.fieldAPI.AssertIsEqual(c.expectedFriQueryIndices[i], proofChallenges.FriChallenges.FriQueryIndices[i])
|
|
}
|
|
}
|
|
|
|
func (c *TestVerifierChallengesCircuit) Define(api frontend.API) error {
|
|
proofWithPis := DeserializeProofWithPublicInputs(c.proofWithPIsFilename)
|
|
commonCircuitData := DeserializeCommonCircuitData(c.commonCircuitDataFilename)
|
|
verfierOnlyCircuitData := DeserializeVerifierOnlyCircuitData(c.verifierOnlyCircuitDataFilename)
|
|
|
|
c.numChallenges = commonCircuitData.Config.NumChallenges
|
|
c.numFriQueries = commonCircuitData.FriParams.Config.NumQueryRounds
|
|
|
|
c.fieldAPI = NewFieldAPI(api)
|
|
c.qeAPI = NewQuadraticExtensionAPI(c.fieldAPI, commonCircuitData.DegreeBits)
|
|
c.hashAPI = NewHashAPI(c.fieldAPI)
|
|
poseidonChip := NewPoseidonChip(api, c.fieldAPI, c.qeAPI)
|
|
c.verifierChip = &VerifierChip{api: api, fieldAPI: c.fieldAPI, qeAPI: c.qeAPI, poseidonChip: poseidonChip}
|
|
|
|
c.GetChallengesSanityCheck(proofWithPis, verfierOnlyCircuitData, commonCircuitData)
|
|
return nil
|
|
}
|
|
|
|
func TestFibonacciVerifierWitness(t *testing.T) {
|
|
assert := test.NewAssert(t)
|
|
|
|
testCase := func() {
|
|
circuit := TestVerifierChallengesCircuit{
|
|
proofWithPIsFilename: "./data/fibonacci/proof_with_public_inputs.json",
|
|
commonCircuitDataFilename: "./data/fibonacci/common_circuit_data.json",
|
|
verifierOnlyCircuitDataFilename: "./data/fibonacci/verifier_only_circuit_data.json",
|
|
t: t,
|
|
|
|
expectedPublicInputsHash: Hash{
|
|
NewFieldElementFromString("8416658900775745054"),
|
|
NewFieldElementFromString("12574228347150446423"),
|
|
NewFieldElementFromString("9629056739760131473"),
|
|
NewFieldElementFromString("3119289788404190010"),
|
|
},
|
|
|
|
expectedPlonkBetas: []F{
|
|
NewFieldElementFromString("4678728155650926271"),
|
|
NewFieldElementFromString("13611962404289024887"),
|
|
},
|
|
|
|
expectedPlonkGammas: []F{
|
|
NewFieldElementFromString("13237663823305715949"),
|
|
NewFieldElementFromString("15389314098328235145"),
|
|
},
|
|
|
|
expectedPlonkAlphas: []F{
|
|
NewFieldElementFromString("14505919539124304197"),
|
|
NewFieldElementFromString("1695455639263736117"),
|
|
},
|
|
|
|
expectedPlonkZeta: QuadraticExtension{
|
|
NewFieldElementFromString("14887793628029982930"),
|
|
NewFieldElementFromString("1136137158284059037"),
|
|
},
|
|
|
|
expectedFriAlpha: QuadraticExtension{
|
|
NewFieldElementFromString("14641715242626918707"),
|
|
NewFieldElementFromString("10574243340537902930"),
|
|
},
|
|
|
|
expectedFriBetas: []QuadraticExtension{},
|
|
|
|
expectedFriQueryIndices: []F{
|
|
NewFieldElement(6790812084677375942),
|
|
NewFieldElement(12394212020331474798),
|
|
NewFieldElement(16457600747000998582),
|
|
NewFieldElement(1543271328932331916),
|
|
NewFieldElement(12115726870906958644),
|
|
NewFieldElement(6775897107605342797),
|
|
NewFieldElement(15989401564746021030),
|
|
NewFieldElement(10691676456016926845),
|
|
NewFieldElement(1632499470630032007),
|
|
NewFieldElement(1317292355445098328),
|
|
NewFieldElement(18391440812534384252),
|
|
NewFieldElement(17321705613231354333),
|
|
NewFieldElement(6176487551308859603),
|
|
NewFieldElement(7119835651572002873),
|
|
NewFieldElement(3903019169623116693),
|
|
NewFieldElement(4886491111111487546),
|
|
NewFieldElement(4087641893164620518),
|
|
NewFieldElement(13801643080324181364),
|
|
NewFieldElement(16993775312274189321),
|
|
NewFieldElement(9268202926222765679),
|
|
NewFieldElement(10683001302406181735),
|
|
NewFieldElement(13359465725531647963),
|
|
NewFieldElement(4523327590105620849),
|
|
NewFieldElement(4883588003760409588),
|
|
NewFieldElement(187699146998097671),
|
|
NewFieldElement(14489263557623716717),
|
|
NewFieldElement(11748359318238148146),
|
|
NewFieldElement(13636347200053048758),
|
|
},
|
|
}
|
|
witness := TestVerifierChallengesCircuit{}
|
|
err := test.IsSolved(&circuit, &witness, TEST_CURVE.ScalarField())
|
|
assert.NoError(err)
|
|
}
|
|
|
|
testCase()
|
|
}
|
|
|
|
func TestDummyVerifierWitness(t *testing.T) {
|
|
assert := test.NewAssert(t)
|
|
|
|
testCase := func() {
|
|
circuit := TestVerifierChallengesCircuit{
|
|
proofWithPIsFilename: "./data/dummy_2^14_gates/proof_with_public_inputs.json",
|
|
commonCircuitDataFilename: "./data/dummy_2^14_gates/common_circuit_data.json",
|
|
verifierOnlyCircuitDataFilename: "./data/dummy_2^14_gates/verifier_only_circuit_data.json",
|
|
t: t,
|
|
|
|
expectedPublicInputsHash: Hash{
|
|
NewFieldElementFromString("0"),
|
|
NewFieldElementFromString("0"),
|
|
NewFieldElementFromString("0"),
|
|
NewFieldElementFromString("0"),
|
|
},
|
|
|
|
expectedPlonkBetas: []F{
|
|
NewFieldElementFromString("11216469004148781751"),
|
|
NewFieldElementFromString("6201977337075152249"),
|
|
},
|
|
|
|
expectedPlonkGammas: []F{
|
|
NewFieldElementFromString("8369751006669847974"),
|
|
NewFieldElementFromString("3610024170884289835"),
|
|
},
|
|
|
|
expectedPlonkAlphas: []F{
|
|
NewFieldElementFromString("970160439138448145"),
|
|
NewFieldElementFromString("2402201283787401921"),
|
|
},
|
|
|
|
expectedPlonkZeta: QuadraticExtension{
|
|
NewFieldElementFromString("17377750363769967882"),
|
|
NewFieldElementFromString("11921191651424768462"),
|
|
},
|
|
|
|
expectedFriAlpha: QuadraticExtension{
|
|
NewFieldElementFromString("16721004555774385479"),
|
|
NewFieldElementFromString("10688151135543754663"),
|
|
},
|
|
|
|
expectedFriBetas: []QuadraticExtension{
|
|
{
|
|
NewFieldElementFromString("3312441922957827805"),
|
|
NewFieldElementFromString("15128092514958289671"),
|
|
},
|
|
{
|
|
NewFieldElementFromString("13630530769060141802"),
|
|
NewFieldElementFromString("14559883974933163008"),
|
|
},
|
|
{
|
|
NewFieldElementFromString("16146508250083930687"),
|
|
NewFieldElementFromString("5176346568444408396"),
|
|
},
|
|
},
|
|
|
|
expectedFriQueryIndices: []F{
|
|
NewFieldElement(16334967868590615051),
|
|
NewFieldElement(2911473540496037915),
|
|
NewFieldElement(14887216056886344225),
|
|
NewFieldElement(7808811227805914295),
|
|
NewFieldElement(2018594961417375749),
|
|
NewFieldElement(3733368398777208435),
|
|
NewFieldElement(2623035669037055104),
|
|
NewFieldElement(299243030573481514),
|
|
NewFieldElement(7189789717962704433),
|
|
NewFieldElement(14566344026886816268),
|
|
NewFieldElement(12555390069003437453),
|
|
NewFieldElement(17225508403199418233),
|
|
NewFieldElement(5088797913879903292),
|
|
NewFieldElement(9715691392773433023),
|
|
NewFieldElement(7565836764713256165),
|
|
NewFieldElement(1500143546029322929),
|
|
NewFieldElement(1245802417104422080),
|
|
NewFieldElement(6831959786661245110),
|
|
NewFieldElement(17271054758535453780),
|
|
NewFieldElement(6225460404576395409),
|
|
NewFieldElement(15932661092896277351),
|
|
NewFieldElement(12452534049198240575),
|
|
NewFieldElement(4225199666055520177),
|
|
NewFieldElement(13235091290587791090),
|
|
NewFieldElement(2562357622728700774),
|
|
NewFieldElement(17676678042980201498),
|
|
NewFieldElement(5837067135702409874),
|
|
NewFieldElement(11238419549114325157),
|
|
},
|
|
}
|
|
witness := TestVerifierChallengesCircuit{} // No real witness as the test circuit's Define function will inject in the witness
|
|
err := test.IsSolved(&circuit, &witness, TEST_CURVE.ScalarField())
|
|
assert.NoError(err)
|
|
}
|
|
|
|
testCase()
|
|
}
|
|
|
|
type TestVerifierCircuit struct {
|
|
proofWithPIsFilename string `gnark:"-"`
|
|
commonCircuitDataFilename string `gnark:"-"`
|
|
verifierOnlyCircuitDataFilename string `gnark:"-"`
|
|
}
|
|
|
|
func (c *TestVerifierCircuit) Define(api frontend.API) error {
|
|
proofWithPis := DeserializeProofWithPublicInputs(c.proofWithPIsFilename)
|
|
commonCircuitData := DeserializeCommonCircuitData(c.commonCircuitDataFilename)
|
|
verfierOnlyCircuitData := DeserializeVerifierOnlyCircuitData(c.verifierOnlyCircuitDataFilename)
|
|
|
|
fieldAPI := NewFieldAPI(api)
|
|
qeAPI := NewQuadraticExtensionAPI(fieldAPI, commonCircuitData.DegreeBits)
|
|
hashAPI := NewHashAPI(fieldAPI)
|
|
poseidonChip := NewPoseidonChip(api, fieldAPI, qeAPI)
|
|
plonkChip := NewPlonkChip(api, qeAPI, commonCircuitData)
|
|
friChip := NewFriChip(api, fieldAPI, qeAPI, hashAPI, poseidonChip, &commonCircuitData.FriParams)
|
|
verifierChip := VerifierChip{
|
|
api: api,
|
|
fieldAPI: fieldAPI,
|
|
qeAPI: qeAPI,
|
|
poseidonChip: poseidonChip,
|
|
plonkChip: plonkChip,
|
|
friChip: friChip,
|
|
}
|
|
verifierChip.Verify(proofWithPis, verfierOnlyCircuitData, commonCircuitData)
|
|
return nil
|
|
}
|
|
|
|
func TestDummyVerifier(t *testing.T) {
|
|
assert := test.NewAssert(t)
|
|
|
|
testCase := func() {
|
|
circuit := TestVerifierCircuit{
|
|
proofWithPIsFilename: "./data/dummy_2^14_gates/proof_with_public_inputs.json",
|
|
commonCircuitDataFilename: "./data/dummy_2^14_gates/common_circuit_data.json",
|
|
verifierOnlyCircuitDataFilename: "./data/dummy_2^14_gates/verifier_only_circuit_data.json",
|
|
}
|
|
|
|
witness := TestVerifierCircuit{}
|
|
err := test.IsSolved(&circuit, &witness, TEST_CURVE.ScalarField())
|
|
assert.NoError(err)
|
|
}
|
|
testCase()
|
|
}
|