Browse Source
Implement poseidon based Transcript & integrate it
- remove Merlin based transcript - implement poseidon based Transcript - implement TranscriptVar gadget - update transcript usage in the other modules to new Transcript interfaceivc-proofs
6 changed files with 236 additions and 106 deletions
Split View
Diff Options
-
+1 -1README.md
-
+6 -2src/circuits.rs
-
+26 -13src/nifs.rs
-
+53 -35src/pedersen.rs
-
+36 -25src/sumcheck.rs
-
+114 -30src/transcript.rs
@ -1,41 +1,125 @@ |
|||
use ark_ec::{AffineRepr, CurveGroup, Group};
|
|||
use ark_ff::PrimeField;
|
|||
use ark_serialize::CanonicalSerialize;
|
|||
use merlin::Transcript as MerlinTranscript;
|
|||
use std::marker::PhantomData;
|
|||
|
|||
// TODO poseidon transcript (not keccak)
|
|||
use ark_r1cs_std::fields::fp::FpVar;
|
|||
|
|||
// This Transcript approach is a modified version from https://github.com/arkworks-rs/gemini ,
|
|||
// using Merlin transcript (https://merlin.cool).
|
|||
pub struct Transcript<F: PrimeField> {
|
|||
phantom: PhantomData<F>,
|
|||
transcript: MerlinTranscript,
|
|||
}
|
|||
use ark_crypto_primitives::sponge::poseidon::{
|
|||
constraints::PoseidonSpongeVar, PoseidonConfig, PoseidonSponge,
|
|||
};
|
|||
use ark_crypto_primitives::sponge::{
|
|||
constraints::CryptographicSpongeVar, Absorb, CryptographicSponge,
|
|||
};
|
|||
use ark_relations::r1cs::{ConstraintSystemRef, SynthesisError};
|
|||
|
|||
use ark_poly::DenseUVPolynomial;
|
|||
|
|||
impl<F: PrimeField> Transcript<F> {
|
|||
pub fn new() -> Self {
|
|||
Self {
|
|||
phantom: PhantomData::default(),
|
|||
transcript: MerlinTranscript::new(b"transcript"),
|
|||
pub struct Transcript<F: PrimeField + Absorb, C: CurveGroup>
|
|||
where
|
|||
<C as CurveGroup>::BaseField: Absorb,
|
|||
{
|
|||
// where F is the Constraint Field (eq. C::ScalarField)
|
|||
sponge: PoseidonSponge<F>,
|
|||
_c: PhantomData<C>,
|
|||
}
|
|||
impl<F: PrimeField + Absorb, C: CurveGroup> Transcript<F, C>
|
|||
where
|
|||
<C as CurveGroup>::BaseField: Absorb,
|
|||
{
|
|||
pub fn new(poseidon_config: &PoseidonConfig<F>) -> Self {
|
|||
let mut sponge = PoseidonSponge::<F>::new(&poseidon_config);
|
|||
Transcript {
|
|||
sponge,
|
|||
_c: PhantomData,
|
|||
}
|
|||
}
|
|||
pub fn add<S: CanonicalSerialize>(&mut self, label: &'static [u8], r: &S) {
|
|||
let mut msg = Vec::new();
|
|||
r.serialize_uncompressed(&mut msg).unwrap();
|
|||
self.transcript.append_message(label, &msg);
|
|||
}
|
|||
pub fn get_challenge(&mut self, label: &'static [u8]) -> F {
|
|||
let mut bytes = [0u8; 64];
|
|||
self.transcript.challenge_bytes(label, &mut bytes);
|
|||
let challenge = F::from_le_bytes_mod_order(bytes.as_ref());
|
|||
self.add(b"get challenge", &challenge);
|
|||
challenge
|
|||
}
|
|||
pub fn get_challenge_vec(&mut self, label: &'static [u8], n: usize) -> Vec<F> {
|
|||
let mut c: Vec<F> = vec![F::zero(); n];
|
|||
for i in 0..n {
|
|||
c[i] = self.get_challenge(label);
|
|||
}
|
|||
pub fn add(&mut self, v: &F) {
|
|||
self.sponge.absorb(&v);
|
|||
}
|
|||
pub fn add_vec(&mut self, v: &[F]) {
|
|||
self.sponge.absorb(&v);
|
|||
}
|
|||
pub fn add_point(&mut self, v: &C) {
|
|||
let v_affine = v.into_affine();
|
|||
let xy = v_affine.xy().unwrap(); // WIP
|
|||
self.sponge.absorb(&vec![xy.0, xy.1]);
|
|||
}
|
|||
pub fn get_challenge(&mut self) -> F {
|
|||
let c = self.sponge.squeeze_field_elements(1);
|
|||
self.add(&c[0]);
|
|||
c[0]
|
|||
}
|
|||
pub fn get_challenge_vec(&mut self, n: usize) -> Vec<F> {
|
|||
let c = self.sponge.squeeze_field_elements(n);
|
|||
self.sponge.absorb(&c);
|
|||
c
|
|||
}
|
|||
}
|
|||
|
|||
pub struct TranscriptVar<F: PrimeField> {
|
|||
// where F is the Constraint Field
|
|||
sponge: PoseidonSpongeVar<F>,
|
|||
}
|
|||
impl<F: PrimeField> TranscriptVar<F> {
|
|||
pub fn new(cs: ConstraintSystemRef<F>, poseidon_config: PoseidonConfig<F>) -> Self {
|
|||
let mut sponge = PoseidonSpongeVar::<F>::new(cs.clone(), &poseidon_config);
|
|||
Self { sponge }
|
|||
}
|
|||
pub fn add(&mut self, v: FpVar<F>) -> Result<(), SynthesisError> {
|
|||
self.sponge.absorb(&v)
|
|||
}
|
|||
pub fn get_challenge(&mut self) -> Result<FpVar<F>, SynthesisError> {
|
|||
let c = self.sponge.squeeze_field_elements(1)?;
|
|||
self.sponge.absorb(&c[0]);
|
|||
Ok(c[0].clone())
|
|||
}
|
|||
pub fn get_challenge_vec(&mut self, n: usize) -> Result<Vec<FpVar<F>>, SynthesisError> {
|
|||
let c = self.sponge.squeeze_field_elements(n)?;
|
|||
self.sponge.absorb(&c);
|
|||
Ok(c)
|
|||
}
|
|||
}
|
|||
|
|||
use ark_crypto_primitives::sponge::poseidon::find_poseidon_ark_and_mds;
|
|||
|
|||
// WARNING this is for test only
|
|||
pub fn poseidon_test_config<F: PrimeField>() -> PoseidonConfig<F> {
|
|||
let full_rounds = 8;
|
|||
let partial_rounds = 31;
|
|||
let alpha = 5;
|
|||
let rate = 2;
|
|||
|
|||
let (ark, mds) = find_poseidon_ark_and_mds::<F>(
|
|||
F::MODULUS_BIT_SIZE as u64,
|
|||
rate,
|
|||
full_rounds,
|
|||
partial_rounds,
|
|||
0,
|
|||
);
|
|||
|
|||
PoseidonConfig::new(
|
|||
full_rounds as usize,
|
|||
partial_rounds as usize,
|
|||
alpha,
|
|||
mds,
|
|||
ark,
|
|||
rate,
|
|||
1,
|
|||
)
|
|||
}
|
|||
|
|||
// #[cfg(test)]
|
|||
// mod tests {
|
|||
// use super::*;
|
|||
// use ark_mnt4_298::{Fr, G1Projective}; // scalar field
|
|||
// use ark_std::{One, Zero};
|
|||
//
|
|||
// #[test]
|
|||
// fn test_poseidon() {
|
|||
// let config = poseidon_test_config::<Fr>();
|
|||
// let mut tr = Transcript::<Fr, G1Projective>::new(&config);
|
|||
// tr.add(&Fr::one());
|
|||
// println!("c {:?}", tr.get_challenge().to_string());
|
|||
// }
|
|||
// }
|
|||