Browse Source
Implement poseidon based Transcript & integrate it
- remove Merlin based transcript - implement poseidon based Transcript - implement TranscriptVar gadget - update transcript usage in the other modules to new Transcript interfaceivc-proofs
6 changed files with 236 additions and 106 deletions
Unified View
Diff Options
-
+1 -1README.md
-
+6 -2src/circuits.rs
-
+26 -13src/nifs.rs
-
+53 -35src/pedersen.rs
-
+36 -25src/sumcheck.rs
-
+114 -30src/transcript.rs
@ -1,41 +1,125 @@ |
|||||
|
use ark_ec::{AffineRepr, CurveGroup, Group};
|
||||
use ark_ff::PrimeField;
|
use ark_ff::PrimeField;
|
||||
use ark_serialize::CanonicalSerialize;
|
use ark_serialize::CanonicalSerialize;
|
||||
use merlin::Transcript as MerlinTranscript;
|
|
||||
use std::marker::PhantomData;
|
use std::marker::PhantomData;
|
||||
|
|
||||
// TODO poseidon transcript (not keccak)
|
|
||||
|
use ark_r1cs_std::fields::fp::FpVar;
|
||||
|
|
||||
// This Transcript approach is a modified version from https://github.com/arkworks-rs/gemini ,
|
|
||||
// using Merlin transcript (https://merlin.cool).
|
|
||||
pub struct Transcript<F: PrimeField> {
|
|
||||
phantom: PhantomData<F>,
|
|
||||
transcript: MerlinTranscript,
|
|
||||
}
|
|
||||
|
use ark_crypto_primitives::sponge::poseidon::{
|
||||
|
constraints::PoseidonSpongeVar, PoseidonConfig, PoseidonSponge,
|
||||
|
};
|
||||
|
use ark_crypto_primitives::sponge::{
|
||||
|
constraints::CryptographicSpongeVar, Absorb, CryptographicSponge,
|
||||
|
};
|
||||
|
use ark_relations::r1cs::{ConstraintSystemRef, SynthesisError};
|
||||
|
|
||||
|
use ark_poly::DenseUVPolynomial;
|
||||
|
|
||||
impl<F: PrimeField> Transcript<F> {
|
|
||||
pub fn new() -> Self {
|
|
||||
Self {
|
|
||||
phantom: PhantomData::default(),
|
|
||||
transcript: MerlinTranscript::new(b"transcript"),
|
|
||||
|
pub struct Transcript<F: PrimeField + Absorb, C: CurveGroup>
|
||||
|
where
|
||||
|
<C as CurveGroup>::BaseField: Absorb,
|
||||
|
{
|
||||
|
// where F is the Constraint Field (eq. C::ScalarField)
|
||||
|
sponge: PoseidonSponge<F>,
|
||||
|
_c: PhantomData<C>,
|
||||
|
}
|
||||
|
impl<F: PrimeField + Absorb, C: CurveGroup> Transcript<F, C>
|
||||
|
where
|
||||
|
<C as CurveGroup>::BaseField: Absorb,
|
||||
|
{
|
||||
|
pub fn new(poseidon_config: &PoseidonConfig<F>) -> Self {
|
||||
|
let mut sponge = PoseidonSponge::<F>::new(&poseidon_config);
|
||||
|
Transcript {
|
||||
|
sponge,
|
||||
|
_c: PhantomData,
|
||||
}
|
}
|
||||
}
|
}
|
||||
pub fn add<S: CanonicalSerialize>(&mut self, label: &'static [u8], r: &S) {
|
|
||||
let mut msg = Vec::new();
|
|
||||
r.serialize_uncompressed(&mut msg).unwrap();
|
|
||||
self.transcript.append_message(label, &msg);
|
|
||||
}
|
|
||||
pub fn get_challenge(&mut self, label: &'static [u8]) -> F {
|
|
||||
let mut bytes = [0u8; 64];
|
|
||||
self.transcript.challenge_bytes(label, &mut bytes);
|
|
||||
let challenge = F::from_le_bytes_mod_order(bytes.as_ref());
|
|
||||
self.add(b"get challenge", &challenge);
|
|
||||
challenge
|
|
||||
}
|
|
||||
pub fn get_challenge_vec(&mut self, label: &'static [u8], n: usize) -> Vec<F> {
|
|
||||
let mut c: Vec<F> = vec![F::zero(); n];
|
|
||||
for i in 0..n {
|
|
||||
c[i] = self.get_challenge(label);
|
|
||||
}
|
|
||||
|
pub fn add(&mut self, v: &F) {
|
||||
|
self.sponge.absorb(&v);
|
||||
|
}
|
||||
|
pub fn add_vec(&mut self, v: &[F]) {
|
||||
|
self.sponge.absorb(&v);
|
||||
|
}
|
||||
|
pub fn add_point(&mut self, v: &C) {
|
||||
|
let v_affine = v.into_affine();
|
||||
|
let xy = v_affine.xy().unwrap(); // WIP
|
||||
|
self.sponge.absorb(&vec![xy.0, xy.1]);
|
||||
|
}
|
||||
|
pub fn get_challenge(&mut self) -> F {
|
||||
|
let c = self.sponge.squeeze_field_elements(1);
|
||||
|
self.add(&c[0]);
|
||||
|
c[0]
|
||||
|
}
|
||||
|
pub fn get_challenge_vec(&mut self, n: usize) -> Vec<F> {
|
||||
|
let c = self.sponge.squeeze_field_elements(n);
|
||||
|
self.sponge.absorb(&c);
|
||||
c
|
c
|
||||
}
|
}
|
||||
}
|
}
|
||||
|
|
||||
|
pub struct TranscriptVar<F: PrimeField> {
|
||||
|
// where F is the Constraint Field
|
||||
|
sponge: PoseidonSpongeVar<F>,
|
||||
|
}
|
||||
|
impl<F: PrimeField> TranscriptVar<F> {
|
||||
|
pub fn new(cs: ConstraintSystemRef<F>, poseidon_config: PoseidonConfig<F>) -> Self {
|
||||
|
let mut sponge = PoseidonSpongeVar::<F>::new(cs.clone(), &poseidon_config);
|
||||
|
Self { sponge }
|
||||
|
}
|
||||
|
pub fn add(&mut self, v: FpVar<F>) -> Result<(), SynthesisError> {
|
||||
|
self.sponge.absorb(&v)
|
||||
|
}
|
||||
|
pub fn get_challenge(&mut self) -> Result<FpVar<F>, SynthesisError> {
|
||||
|
let c = self.sponge.squeeze_field_elements(1)?;
|
||||
|
self.sponge.absorb(&c[0]);
|
||||
|
Ok(c[0].clone())
|
||||
|
}
|
||||
|
pub fn get_challenge_vec(&mut self, n: usize) -> Result<Vec<FpVar<F>>, SynthesisError> {
|
||||
|
let c = self.sponge.squeeze_field_elements(n)?;
|
||||
|
self.sponge.absorb(&c);
|
||||
|
Ok(c)
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
use ark_crypto_primitives::sponge::poseidon::find_poseidon_ark_and_mds;
|
||||
|
|
||||
|
// WARNING this is for test only
|
||||
|
pub fn poseidon_test_config<F: PrimeField>() -> PoseidonConfig<F> {
|
||||
|
let full_rounds = 8;
|
||||
|
let partial_rounds = 31;
|
||||
|
let alpha = 5;
|
||||
|
let rate = 2;
|
||||
|
|
||||
|
let (ark, mds) = find_poseidon_ark_and_mds::<F>(
|
||||
|
F::MODULUS_BIT_SIZE as u64,
|
||||
|
rate,
|
||||
|
full_rounds,
|
||||
|
partial_rounds,
|
||||
|
0,
|
||||
|
);
|
||||
|
|
||||
|
PoseidonConfig::new(
|
||||
|
full_rounds as usize,
|
||||
|
partial_rounds as usize,
|
||||
|
alpha,
|
||||
|
mds,
|
||||
|
ark,
|
||||
|
rate,
|
||||
|
1,
|
||||
|
)
|
||||
|
}
|
||||
|
|
||||
|
// #[cfg(test)]
|
||||
|
// mod tests {
|
||||
|
// use super::*;
|
||||
|
// use ark_mnt4_298::{Fr, G1Projective}; // scalar field
|
||||
|
// use ark_std::{One, Zero};
|
||||
|
//
|
||||
|
// #[test]
|
||||
|
// fn test_poseidon() {
|
||||
|
// let config = poseidon_test_config::<Fr>();
|
||||
|
// let mut tr = Transcript::<Fr, G1Projective>::new(&config);
|
||||
|
// tr.add(&Fr::one());
|
||||
|
// println!("c {:?}", tr.get_challenge().to_string());
|
||||
|
// }
|
||||
|
// }
|
||||