testudo/benches/sumcheck.rs

#![allow(non_snake_case)]

extern crate byteorder;
extern crate core;
extern crate criterion;
extern crate digest;
extern crate libspartan;
extern crate merlin;
extern crate rand;
extern crate sha3;

use libspartan::commitments::Commitments;
use libspartan::commitments::MultiCommitGens;
use libspartan::dense_mlpoly::DensePolynomial;
use libspartan::math::Math;
use libspartan::nizk::DotProductProof;
use libspartan::scalar::Scalar;
use libspartan::sumcheck::ZKSumcheckInstanceProof;
use libspartan::transcript::ProofTranscript;
use merlin::Transcript;
use rand::rngs::OsRng;

use criterion::*;

fn prove_benchmark(c: &mut Criterion) {
  for &s in [10, 12, 16, 20].iter() {
    let plot_config = PlotConfiguration::default().summary_scale(AxisScale::Logarithmic);
    let mut group = c.benchmark_group("zksumcheck_prove_benchmark");
    group.plot_config(plot_config);

    // produce tables
    let gens_n = MultiCommitGens::new(3, b"test-m");
    let gens_1 = MultiCommitGens::new(1, b"test-1");
    let num_rounds = s;
    let n = s.pow2();

    let mut csprng: OsRng = OsRng;

    let vec_A = (0..n)
      .map(|_i| Scalar::random(&mut csprng))
      .collect::<Vec<Scalar>>();
    let vec_B = (0..n)
      .map(|_i| Scalar::random(&mut csprng))
      .collect::<Vec<Scalar>>();
    let claim = DotProductProof::compute_dotproduct(&vec_A, &vec_B);
    let mut poly_A = DensePolynomial::new(vec_A);
    let mut poly_B = DensePolynomial::new(vec_B);

    let blind_claim = Scalar::random(&mut csprng);
    let comb_func =
      |poly_A_comp: &Scalar, poly_B_comp: &Scalar| -> Scalar { poly_A_comp * poly_B_comp };

    let name = format!("zksumcheck_prove_{}", n);
    group.bench_function(&name, move |b| {
      b.iter(|| {
        let mut random_tape = {
          let mut csprng: OsRng = OsRng;
          let mut tape = Transcript::new(b"proof");
          tape.append_scalar(b"init_randomness", &Scalar::random(&mut csprng));
          tape
        };
        let mut prover_transcript = Transcript::new(b"example");
        ZKSumcheckInstanceProof::prove_quad(
          black_box(&claim),
          black_box(&blind_claim),
          black_box(num_rounds),
          black_box(&mut poly_A),
          black_box(&mut poly_B),
          black_box(comb_func),
          black_box(&gens_1),
          black_box(&gens_n),
          black_box(&mut prover_transcript),
          black_box(&mut random_tape),
        )
      });
    });
    group.finish();
  }
}

fn verify_benchmark(c: &mut Criterion) {
  for &s in [10, 12, 16, 20].iter() {
    let plot_config = PlotConfiguration::default().summary_scale(AxisScale::Logarithmic);
    let mut group = c.benchmark_group("zksumcheck_verify_benchmark");
    group.plot_config(plot_config);

    // produce tables
    let gens_n = MultiCommitGens::new(3, b"test-m");
    let gens_1 = MultiCommitGens::new(1, b"test-1");
    let num_rounds = s;
    let n = s.pow2();

    let mut csprng: OsRng = OsRng;

    let vec_A = (0..n)
      .map(|_i| Scalar::random(&mut csprng))
      .collect::<Vec<Scalar>>();
    let vec_B = (0..n)
      .map(|_i| Scalar::random(&mut csprng))
      .collect::<Vec<Scalar>>();
    let claim = DotProductProof::compute_dotproduct(&vec_A, &vec_B);
    let mut poly_A = DensePolynomial::new(vec_A);
    let mut poly_B = DensePolynomial::new(vec_B);
    let blind_claim = Scalar::random(&mut csprng);
    let comb_func =
      |poly_A_comp: &Scalar, poly_B_comp: &Scalar| -> Scalar { poly_A_comp * poly_B_comp };

    let mut random_tape = {
      let mut csprng: OsRng = OsRng;
      let mut tape = Transcript::new(b"proof");
      tape.append_scalar(b"init_randomness", &Scalar::random(&mut csprng));
      tape
    };

    let mut prover_transcript = Transcript::new(b"example");
    let (proof, _r, _v, _blind_post_claim) = ZKSumcheckInstanceProof::prove_quad(
      &claim,
      &blind_claim,
      num_rounds,
      &mut poly_A,
      &mut poly_B,
      comb_func,
      &gens_1,
      &gens_n,
      &mut prover_transcript,
      &mut random_tape,
    );

    let name = format!("zksumcheck_verify_{}", n);
    let degree_bound = 2;
    let comm_claim = claim.commit(&blind_claim, &gens_1).compress();
    group.bench_function(&name, move |b| {
      b.iter(|| {
        let mut verifier_transcript = Transcript::new(b"example");
        assert!(proof
          .verify(
            black_box(&comm_claim),
            black_box(num_rounds),
            black_box(degree_bound),
            black_box(&gens_1),
            black_box(&gens_n),
            black_box(&mut verifier_transcript)
          )
          .is_ok())
      });
    });
    group.finish();
  }
}

fn set_duration() -> Criterion {
  Criterion::default().sample_size(10)
  // .measurement_time(Duration::new(0, 50000000))
}

criterion_group! {
name = benches_r1cs;
config = set_duration();
targets = verify_benchmark, prove_benchmark
}

criterion_main!(benches_r1cs);