Browse Source
Add NIFSGadgetTrait, implement Mova's NIFSGadget, adapt Nova NIFSGadget into NIFSGadgetTrait (#173)
* add new NIFSGadgetTrait * implement Mova's NIFSGadget * refactor Nova NIFSGadget to fit into the new NIFSGadgetTrait * abstract NIFSGadget related tests for all implementors of NIFSGadgetTrait to avoid duplicated code in the tests between the different Nova variants gadget tests * frontends/noir update mimc usage since it has been migrated from noir's std into it's own repomain
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
20 changed files with 782 additions and 405 deletions
Unified View
Diff Options
-
+1 -1examples/full_flow.rs
-
+2 -7examples/noir_full_flow.rs
-
+2 -2folding-schemes/src/arith/r1cs/circuits.rs
-
+1 -1folding-schemes/src/folding/circuits/decider/mod.rs
-
+1 -1folding-schemes/src/folding/circuits/decider/off_chain.rs
-
+32 -343folding-schemes/src/folding/nova/circuits.rs
-
+0 -1folding-schemes/src/folding/nova/decider.rs
-
+1 -0folding-schemes/src/folding/nova/decider_circuits.rs
-
+1 -3folding-schemes/src/folding/nova/decider_eth.rs
-
+6 -16folding-schemes/src/folding/nova/decider_eth_circuit.rs
-
+3 -3folding-schemes/src/folding/nova/mod.rs
-
+178 -10folding-schemes/src/folding/nova/nifs/mod.rs
-
+62 -4folding-schemes/src/folding/nova/nifs/nova.rs
-
+237 -0folding-schemes/src/folding/nova/nifs/nova_circuits.rs
-
+28 -5folding-schemes/src/folding/nova/nifs/ova.rs
-
+224 -0folding-schemes/src/folding/nova/nifs/ova_circuits.rs
-
+1 -1folding-schemes/src/folding/nova/traits.rs
-
+1 -1frontends/src/noir/test_folder/test_mimc/Nargo.toml
-
+1 -3frontends/src/noir/test_folder/test_mimc/src/main.nr
-
+0 -3solidity-verifiers/templates/nova_cyclefold_decider.askama.sol
@ -0,0 +1,237 @@ |
|||||
|
/// contains [Nova](https://eprint.iacr.org/2021/370.pdf) NIFS related circuits
|
||||
|
use ark_crypto_primitives::sponge::{constraints::AbsorbGadget, Absorb, CryptographicSponge};
|
||||
|
use ark_ec::{CurveGroup, Group};
|
||||
|
use ark_r1cs_std::{
|
||||
|
alloc::{AllocVar, AllocationMode},
|
||||
|
boolean::Boolean,
|
||||
|
eq::EqGadget,
|
||||
|
fields::{fp::FpVar, FieldVar},
|
||||
|
uint8::UInt8,
|
||||
|
ToConstraintFieldGadget,
|
||||
|
};
|
||||
|
use ark_relations::r1cs::{ConstraintSystemRef, Namespace, SynthesisError};
|
||||
|
use ark_std::{fmt::Debug, Zero};
|
||||
|
use core::{borrow::Borrow, marker::PhantomData};
|
||||
|
|
||||
|
use super::NIFSGadgetTrait;
|
||||
|
use crate::folding::circuits::{
|
||||
|
nonnative::{affine::NonNativeAffineVar, uint::NonNativeUintVar},
|
||||
|
CF1, CF2,
|
||||
|
};
|
||||
|
use crate::folding::nova::CommittedInstance;
|
||||
|
use crate::folding::traits::CommittedInstanceVarOps;
|
||||
|
use crate::transcript::TranscriptVar;
|
||||
|
|
||||
|
use super::nova::ChallengeGadget;
|
||||
|
|
||||
|
/// CommittedInstanceVar contains the u, x, cmE and cmW values which are folded on the main Nova
|
||||
|
/// constraints field (E1::Fr, where E1 is the main curve). The peculiarity is that cmE and cmW are
|
||||
|
/// represented non-natively over the constraint field.
|
||||
|
#[derive(Debug, Clone)]
|
||||
|
pub struct CommittedInstanceVar<C: CurveGroup> {
|
||||
|
pub u: FpVar<C::ScalarField>,
|
||||
|
pub x: Vec<FpVar<C::ScalarField>>,
|
||||
|
pub cmE: NonNativeAffineVar<C>,
|
||||
|
pub cmW: NonNativeAffineVar<C>,
|
||||
|
}
|
||||
|
|
||||
|
impl<C> AllocVar<CommittedInstance<C>, CF1<C>> for CommittedInstanceVar<C>
|
||||
|
where
|
||||
|
C: CurveGroup,
|
||||
|
{
|
||||
|
fn new_variable<T: Borrow<CommittedInstance<C>>>(
|
||||
|
cs: impl Into<Namespace<CF1<C>>>,
|
||||
|
f: impl FnOnce() -> Result<T, SynthesisError>,
|
||||
|
mode: AllocationMode,
|
||||
|
) -> Result<Self, SynthesisError> {
|
||||
|
f().and_then(|val| {
|
||||
|
let cs = cs.into();
|
||||
|
|
||||
|
let u = FpVar::<C::ScalarField>::new_variable(cs.clone(), || Ok(val.borrow().u), mode)?;
|
||||
|
let x: Vec<FpVar<C::ScalarField>> =
|
||||
|
Vec::new_variable(cs.clone(), || Ok(val.borrow().x.clone()), mode)?;
|
||||
|
|
||||
|
let cmE =
|
||||
|
NonNativeAffineVar::<C>::new_variable(cs.clone(), || Ok(val.borrow().cmE), mode)?;
|
||||
|
let cmW =
|
||||
|
NonNativeAffineVar::<C>::new_variable(cs.clone(), || Ok(val.borrow().cmW), mode)?;
|
||||
|
|
||||
|
Ok(Self { u, x, cmE, cmW })
|
||||
|
})
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
impl<C> AbsorbGadget<C::ScalarField> for CommittedInstanceVar<C>
|
||||
|
where
|
||||
|
C: CurveGroup,
|
||||
|
{
|
||||
|
fn to_sponge_bytes(&self) -> Result<Vec<UInt8<C::ScalarField>>, SynthesisError> {
|
||||
|
FpVar::batch_to_sponge_bytes(&self.to_sponge_field_elements()?)
|
||||
|
}
|
||||
|
|
||||
|
fn to_sponge_field_elements(&self) -> Result<Vec<FpVar<C::ScalarField>>, SynthesisError> {
|
||||
|
Ok([
|
||||
|
vec![self.u.clone()],
|
||||
|
self.x.clone(),
|
||||
|
self.cmE.to_constraint_field()?,
|
||||
|
self.cmW.to_constraint_field()?,
|
||||
|
]
|
||||
|
.concat())
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
impl<C: CurveGroup> CommittedInstanceVarOps<C> for CommittedInstanceVar<C> {
|
||||
|
type PointVar = NonNativeAffineVar<C>;
|
||||
|
|
||||
|
fn get_commitments(&self) -> Vec<Self::PointVar> {
|
||||
|
vec![self.cmW.clone(), self.cmE.clone()]
|
||||
|
}
|
||||
|
|
||||
|
fn get_public_inputs(&self) -> &[FpVar<CF1<C>>] {
|
||||
|
&self.x
|
||||
|
}
|
||||
|
|
||||
|
fn enforce_incoming(&self) -> Result<(), SynthesisError> {
|
||||
|
let zero = NonNativeUintVar::new_constant(ConstraintSystemRef::None, CF2::<C>::zero())?;
|
||||
|
self.cmE.x.enforce_equal_unaligned(&zero)?;
|
||||
|
self.cmE.y.enforce_equal_unaligned(&zero)?;
|
||||
|
self.u.enforce_equal(&FpVar::one())
|
||||
|
}
|
||||
|
|
||||
|
fn enforce_partial_equal(&self, other: &Self) -> Result<(), SynthesisError> {
|
||||
|
self.u.enforce_equal(&other.u)?;
|
||||
|
self.x.enforce_equal(&other.x)
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
/// Implements the circuit that does the checks of the Non-Interactive Folding Scheme Verifier
|
||||
|
/// described in section 4 of [Nova](https://eprint.iacr.org/2021/370.pdf), where the cmE & cmW checks are
|
||||
|
/// delegated to the NIFSCycleFoldGadget.
|
||||
|
pub struct NIFSGadget<C: CurveGroup, S: CryptographicSponge, T: TranscriptVar<CF1<C>, S>> {
|
||||
|
_c: PhantomData<C>,
|
||||
|
_s: PhantomData<S>,
|
||||
|
_t: PhantomData<T>,
|
||||
|
}
|
||||
|
|
||||
|
impl<C, S, T> NIFSGadgetTrait<C, S, T> for NIFSGadget<C, S, T>
|
||||
|
where
|
||||
|
C: CurveGroup,
|
||||
|
S: CryptographicSponge,
|
||||
|
T: TranscriptVar<CF1<C>, S>,
|
||||
|
<C as Group>::ScalarField: Absorb,
|
||||
|
{
|
||||
|
type CommittedInstance = CommittedInstance<C>;
|
||||
|
type CommittedInstanceVar = CommittedInstanceVar<C>;
|
||||
|
type Proof = C;
|
||||
|
type ProofVar = NonNativeAffineVar<C>;
|
||||
|
|
||||
|
fn verify(
|
||||
|
transcript: &mut T,
|
||||
|
pp_hash: FpVar<CF1<C>>,
|
||||
|
U_i: Self::CommittedInstanceVar,
|
||||
|
// U_i_vec is passed to reuse the already computed U_i_vec from previous methods
|
||||
|
U_i_vec: Vec<FpVar<CF1<C>>>,
|
||||
|
u_i: Self::CommittedInstanceVar,
|
||||
|
cmT: Option<Self::ProofVar>,
|
||||
|
) -> Result<(Self::CommittedInstanceVar, Vec<Boolean<CF1<C>>>), SynthesisError> {
|
||||
|
let r_bits = ChallengeGadget::<C, CommittedInstance<C>>::get_challenge_gadget(
|
||||
|
transcript,
|
||||
|
pp_hash.clone(),
|
||||
|
U_i_vec,
|
||||
|
u_i.clone(),
|
||||
|
cmT.clone(),
|
||||
|
)?;
|
||||
|
let r = Boolean::le_bits_to_fp_var(&r_bits)?;
|
||||
|
|
||||
|
Ok((
|
||||
|
Self::CommittedInstanceVar {
|
||||
|
cmE: NonNativeAffineVar::new_constant(ConstraintSystemRef::None, C::zero())?,
|
||||
|
cmW: NonNativeAffineVar::new_constant(ConstraintSystemRef::None, C::zero())?,
|
||||
|
// ci3.u = U_i.u + r * u_i.u
|
||||
|
u: U_i.u + &r * u_i.u,
|
||||
|
// ci3.x = U_i.x + r * u_i.x
|
||||
|
x: U_i
|
||||
|
.x
|
||||
|
.iter()
|
||||
|
.zip(u_i.x)
|
||||
|
.map(|(a, b)| a + &r * &b)
|
||||
|
.collect::<Vec<FpVar<CF1<C>>>>(),
|
||||
|
},
|
||||
|
r_bits,
|
||||
|
))
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
#[cfg(test)]
|
||||
|
pub mod tests {
|
||||
|
use super::*;
|
||||
|
use ark_crypto_primitives::sponge::poseidon::constraints::PoseidonSpongeVar;
|
||||
|
use ark_crypto_primitives::sponge::poseidon::PoseidonSponge;
|
||||
|
use ark_pallas::{Fr, Projective};
|
||||
|
use ark_r1cs_std::R1CSVar;
|
||||
|
use ark_std::UniformRand;
|
||||
|
|
||||
|
use crate::commitment::pedersen::Pedersen;
|
||||
|
use crate::folding::nova::nifs::{
|
||||
|
nova::NIFS,
|
||||
|
tests::{
|
||||
|
test_committed_instance_hash_opt, test_committed_instance_to_sponge_preimage_opt,
|
||||
|
test_nifs_gadget_opt,
|
||||
|
},
|
||||
|
};
|
||||
|
|
||||
|
#[test]
|
||||
|
fn test_nifs_gadget() {
|
||||
|
let mut rng = ark_std::test_rng();
|
||||
|
// prepare the committed instances to test in-circuit
|
||||
|
let ci: Vec<CommittedInstance<Projective>> = (0..2)
|
||||
|
.into_iter()
|
||||
|
.map(|_| CommittedInstance::<Projective> {
|
||||
|
cmE: Projective::rand(&mut rng),
|
||||
|
u: Fr::rand(&mut rng),
|
||||
|
cmW: Projective::rand(&mut rng),
|
||||
|
x: vec![Fr::rand(&mut rng); 1],
|
||||
|
})
|
||||
|
.collect();
|
||||
|
let cmT = Projective::rand(&mut rng);
|
||||
|
|
||||
|
let (ci_out, ciVar_out) = test_nifs_gadget_opt::<
|
||||
|
NIFS<Projective, Pedersen<Projective>, PoseidonSponge<Fr>>,
|
||||
|
NIFSGadget<Projective, PoseidonSponge<Fr>, PoseidonSpongeVar<Fr>>,
|
||||
|
>(ci, cmT)
|
||||
|
.unwrap();
|
||||
|
assert_eq!(ciVar_out.u.value().unwrap(), ci_out.u);
|
||||
|
assert_eq!(ciVar_out.x.value().unwrap(), ci_out.x);
|
||||
|
}
|
||||
|
|
||||
|
#[test]
|
||||
|
fn test_committed_instance_to_sponge_preimage() {
|
||||
|
let mut rng = ark_std::test_rng();
|
||||
|
let ci = CommittedInstance::<Projective> {
|
||||
|
cmE: Projective::rand(&mut rng),
|
||||
|
u: Fr::rand(&mut rng),
|
||||
|
cmW: Projective::rand(&mut rng),
|
||||
|
x: vec![Fr::rand(&mut rng); 1],
|
||||
|
};
|
||||
|
|
||||
|
test_committed_instance_to_sponge_preimage_opt::<
|
||||
|
NIFS<Projective, Pedersen<Projective>, PoseidonSponge<Fr>>,
|
||||
|
NIFSGadget<Projective, PoseidonSponge<Fr>, PoseidonSpongeVar<Fr>>,
|
||||
|
>(ci);
|
||||
|
}
|
||||
|
|
||||
|
#[test]
|
||||
|
fn test_committed_instance_hash() {
|
||||
|
let mut rng = ark_std::test_rng();
|
||||
|
let ci = CommittedInstance::<Projective> {
|
||||
|
cmE: Projective::rand(&mut rng),
|
||||
|
u: Fr::rand(&mut rng),
|
||||
|
cmW: Projective::rand(&mut rng),
|
||||
|
x: vec![Fr::rand(&mut rng); 1],
|
||||
|
};
|
||||
|
test_committed_instance_hash_opt::<
|
||||
|
NIFS<Projective, Pedersen<Projective>, PoseidonSponge<Fr>>,
|
||||
|
NIFSGadget<Projective, PoseidonSponge<Fr>, PoseidonSpongeVar<Fr>>,
|
||||
|
>(ci);
|
||||
|
}
|
||||
|
}
|
||||
@ -0,0 +1,224 @@ |
|||||
|
/// contains [Ova](https://hackmd.io/V4838nnlRKal9ZiTHiGYzw) NIFS related circuits
|
||||
|
use ark_crypto_primitives::sponge::{constraints::AbsorbGadget, Absorb, CryptographicSponge};
|
||||
|
use ark_ec::{CurveGroup, Group};
|
||||
|
use ark_ff::PrimeField;
|
||||
|
use ark_r1cs_std::{
|
||||
|
alloc::{AllocVar, AllocationMode},
|
||||
|
boolean::Boolean,
|
||||
|
eq::EqGadget,
|
||||
|
fields::{fp::FpVar, FieldVar},
|
||||
|
uint8::UInt8,
|
||||
|
ToConstraintFieldGadget,
|
||||
|
};
|
||||
|
use ark_relations::r1cs::{ConstraintSystemRef, Namespace, SynthesisError};
|
||||
|
use ark_std::fmt::Debug;
|
||||
|
use core::{borrow::Borrow, marker::PhantomData};
|
||||
|
|
||||
|
use super::ova::CommittedInstance;
|
||||
|
use super::NIFSGadgetTrait;
|
||||
|
use crate::folding::circuits::{nonnative::affine::NonNativeAffineVar, CF1};
|
||||
|
use crate::folding::traits::CommittedInstanceVarOps;
|
||||
|
use crate::transcript::TranscriptVar;
|
||||
|
|
||||
|
use crate::folding::nova::nifs::nova::ChallengeGadget;
|
||||
|
|
||||
|
#[derive(Debug, Clone)]
|
||||
|
pub struct CommittedInstanceVar<C: CurveGroup> {
|
||||
|
pub u: FpVar<C::ScalarField>,
|
||||
|
pub x: Vec<FpVar<C::ScalarField>>,
|
||||
|
pub cmWE: NonNativeAffineVar<C>,
|
||||
|
}
|
||||
|
|
||||
|
impl<C> AllocVar<CommittedInstance<C>, CF1<C>> for CommittedInstanceVar<C>
|
||||
|
where
|
||||
|
C: CurveGroup,
|
||||
|
{
|
||||
|
fn new_variable<T: Borrow<CommittedInstance<C>>>(
|
||||
|
cs: impl Into<Namespace<CF1<C>>>,
|
||||
|
f: impl FnOnce() -> Result<T, SynthesisError>,
|
||||
|
mode: AllocationMode,
|
||||
|
) -> Result<Self, SynthesisError> {
|
||||
|
f().and_then(|val| {
|
||||
|
let cs = cs.into();
|
||||
|
|
||||
|
let u = FpVar::<C::ScalarField>::new_variable(cs.clone(), || Ok(val.borrow().u), mode)?;
|
||||
|
let x: Vec<FpVar<C::ScalarField>> =
|
||||
|
Vec::new_variable(cs.clone(), || Ok(val.borrow().x.clone()), mode)?;
|
||||
|
|
||||
|
let cmWE =
|
||||
|
NonNativeAffineVar::<C>::new_variable(cs.clone(), || Ok(val.borrow().cmWE), mode)?;
|
||||
|
|
||||
|
Ok(Self { u, x, cmWE })
|
||||
|
})
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
impl<C> AbsorbGadget<C::ScalarField> for CommittedInstanceVar<C>
|
||||
|
where
|
||||
|
C: CurveGroup,
|
||||
|
<C as ark_ec::CurveGroup>::BaseField: ark_ff::PrimeField,
|
||||
|
{
|
||||
|
fn to_sponge_bytes(&self) -> Result<Vec<UInt8<C::ScalarField>>, SynthesisError> {
|
||||
|
FpVar::batch_to_sponge_bytes(&self.to_sponge_field_elements()?)
|
||||
|
}
|
||||
|
|
||||
|
fn to_sponge_field_elements(&self) -> Result<Vec<FpVar<C::ScalarField>>, SynthesisError> {
|
||||
|
Ok([
|
||||
|
vec![self.u.clone()],
|
||||
|
self.x.clone(),
|
||||
|
self.cmWE.to_constraint_field()?,
|
||||
|
]
|
||||
|
.concat())
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
impl<C: CurveGroup> CommittedInstanceVarOps<C> for CommittedInstanceVar<C> {
|
||||
|
type PointVar = NonNativeAffineVar<C>;
|
||||
|
|
||||
|
fn get_commitments(&self) -> Vec<Self::PointVar> {
|
||||
|
vec![self.cmWE.clone()]
|
||||
|
}
|
||||
|
|
||||
|
fn get_public_inputs(&self) -> &[FpVar<CF1<C>>] {
|
||||
|
&self.x
|
||||
|
}
|
||||
|
|
||||
|
fn enforce_incoming(&self) -> Result<(), SynthesisError> {
|
||||
|
self.u.enforce_equal(&FpVar::one())
|
||||
|
}
|
||||
|
|
||||
|
fn enforce_partial_equal(&self, other: &Self) -> Result<(), SynthesisError> {
|
||||
|
self.u.enforce_equal(&other.u)?;
|
||||
|
self.x.enforce_equal(&other.x)
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
/// Implements the circuit that does the checks of the Non-Interactive Folding Scheme Verifier
|
||||
|
/// described of the Ova variant, where the cmWE check is delegated to the NIFSCycleFoldGadget.
|
||||
|
pub struct NIFSGadget<C: CurveGroup, S: CryptographicSponge, T: TranscriptVar<CF1<C>, S>> {
|
||||
|
_c: PhantomData<C>,
|
||||
|
_s: PhantomData<S>,
|
||||
|
_t: PhantomData<T>,
|
||||
|
}
|
||||
|
|
||||
|
impl<C, S, T> NIFSGadgetTrait<C, S, T> for NIFSGadget<C, S, T>
|
||||
|
where
|
||||
|
C: CurveGroup,
|
||||
|
S: CryptographicSponge,
|
||||
|
T: TranscriptVar<CF1<C>, S>,
|
||||
|
<C as ark_ec::CurveGroup>::BaseField: ark_ff::PrimeField,
|
||||
|
|
||||
|
<C as Group>::ScalarField: Absorb,
|
||||
|
<C as CurveGroup>::BaseField: PrimeField,
|
||||
|
{
|
||||
|
type CommittedInstance = CommittedInstance<C>;
|
||||
|
type CommittedInstanceVar = CommittedInstanceVar<C>;
|
||||
|
type Proof = C::ScalarField;
|
||||
|
type ProofVar = FpVar<C::ScalarField>; // unused
|
||||
|
|
||||
|
fn verify(
|
||||
|
transcript: &mut T,
|
||||
|
pp_hash: FpVar<CF1<C>>,
|
||||
|
U_i: Self::CommittedInstanceVar,
|
||||
|
// U_i_vec is passed to reuse the already computed U_i_vec from previous methods
|
||||
|
U_i_vec: Vec<FpVar<CF1<C>>>,
|
||||
|
u_i: Self::CommittedInstanceVar,
|
||||
|
_proof: Option<Self::ProofVar>,
|
||||
|
) -> Result<(Self::CommittedInstanceVar, Vec<Boolean<CF1<C>>>), SynthesisError> {
|
||||
|
let r_bits = ChallengeGadget::<C, CommittedInstance<C>>::get_challenge_gadget(
|
||||
|
transcript,
|
||||
|
pp_hash.clone(),
|
||||
|
U_i_vec,
|
||||
|
u_i.clone(),
|
||||
|
None,
|
||||
|
)?;
|
||||
|
let r = Boolean::le_bits_to_fp_var(&r_bits)?;
|
||||
|
|
||||
|
Ok((
|
||||
|
Self::CommittedInstanceVar {
|
||||
|
cmWE: NonNativeAffineVar::new_constant(ConstraintSystemRef::None, C::zero())?,
|
||||
|
// ci3.u = U_i.u + r * u_i.u (u_i.u is always 1 in Ova)
|
||||
|
u: U_i.u + &r,
|
||||
|
// ci3.x = U_i.x + r * u_i.x
|
||||
|
x: U_i
|
||||
|
.x
|
||||
|
.iter()
|
||||
|
.zip(u_i.x)
|
||||
|
.map(|(a, b)| a + &r * &b)
|
||||
|
.collect::<Vec<FpVar<CF1<C>>>>(),
|
||||
|
},
|
||||
|
r_bits,
|
||||
|
))
|
||||
|
}
|
||||
|
}
|
||||
|
|
||||
|
#[cfg(test)]
|
||||
|
pub mod tests {
|
||||
|
use super::*;
|
||||
|
use ark_crypto_primitives::sponge::poseidon::constraints::PoseidonSpongeVar;
|
||||
|
use ark_crypto_primitives::sponge::poseidon::PoseidonSponge;
|
||||
|
use ark_pallas::{Fr, Projective};
|
||||
|
use ark_r1cs_std::R1CSVar;
|
||||
|
use ark_std::UniformRand;
|
||||
|
use ark_std::Zero;
|
||||
|
|
||||
|
use crate::commitment::pedersen::Pedersen;
|
||||
|
use crate::folding::nova::nifs::{
|
||||
|
ova::NIFS,
|
||||
|
tests::{
|
||||
|
test_committed_instance_hash_opt, test_committed_instance_to_sponge_preimage_opt,
|
||||
|
test_nifs_gadget_opt,
|
||||
|
},
|
||||
|
};
|
||||
|
|
||||
|
#[test]
|
||||
|
fn test_nifs_gadget() {
|
||||
|
let mut rng = ark_std::test_rng();
|
||||
|
// prepare the committed instances to test in-circuit
|
||||
|
let ci: Vec<CommittedInstance<Projective>> = (0..2)
|
||||
|
.into_iter()
|
||||
|
.map(|_| CommittedInstance::<Projective> {
|
||||
|
u: Fr::rand(&mut rng),
|
||||
|
x: vec![Fr::rand(&mut rng); 1],
|
||||
|
cmWE: Projective::rand(&mut rng),
|
||||
|
})
|
||||
|
.collect();
|
||||
|
|
||||
|
let (ci_out, ciVar_out) = test_nifs_gadget_opt::<
|
||||
|
NIFS<Projective, Pedersen<Projective>, PoseidonSponge<Fr>>,
|
||||
|
NIFSGadget<Projective, PoseidonSponge<Fr>, PoseidonSpongeVar<Fr>>,
|
||||
|
>(ci, Fr::zero())
|
||||
|
.unwrap();
|
||||
|
assert_eq!(ciVar_out.u.value().unwrap(), ci_out.u);
|
||||
|
assert_eq!(ciVar_out.x.value().unwrap(), ci_out.x);
|
||||
|
}
|
||||
|
|
||||
|
#[test]
|
||||
|
fn test_committed_instance_to_sponge_preimage() {
|
||||
|
let mut rng = ark_std::test_rng();
|
||||
|
let ci = CommittedInstance::<Projective> {
|
||||
|
u: Fr::rand(&mut rng),
|
||||
|
x: vec![Fr::rand(&mut rng); 1],
|
||||
|
cmWE: Projective::rand(&mut rng),
|
||||
|
};
|
||||
|
|
||||
|
test_committed_instance_to_sponge_preimage_opt::<
|
||||
|
NIFS<Projective, Pedersen<Projective>, PoseidonSponge<Fr>>,
|
||||
|
NIFSGadget<Projective, PoseidonSponge<Fr>, PoseidonSpongeVar<Fr>>,
|
||||
|
>(ci);
|
||||
|
}
|
||||
|
|
||||
|
#[test]
|
||||
|
fn test_committed_instance_hash() {
|
||||
|
let mut rng = ark_std::test_rng();
|
||||
|
let ci = CommittedInstance::<Projective> {
|
||||
|
u: Fr::rand(&mut rng),
|
||||
|
x: vec![Fr::rand(&mut rng); 1],
|
||||
|
cmWE: Projective::rand(&mut rng),
|
||||
|
};
|
||||
|
test_committed_instance_hash_opt::<
|
||||
|
NIFS<Projective, Pedersen<Projective>, PoseidonSponge<Fr>>,
|
||||
|
NIFSGadget<Projective, PoseidonSponge<Fr>, PoseidonSpongeVar<Fr>>,
|
||||
|
>(ci);
|
||||
|
}
|
||||
|
}
|
||||
@ -1,6 +1,4 @@ |
|||||
use dep::std; |
|
||||
|
|
||||
pub fn main(x: pub [Field; 1]) -> pub Field { |
pub fn main(x: pub [Field; 1]) -> pub Field { |
||||
let hash = std::hash::mimc::mimc_bn254(x); |
|
||||
|
let hash = mimc::mimc_bn254(x); |
||||
hash |
hash |
||||
} |
} |
||||