gnark-plonky2-verifier/plonky2_verifier/deserialize.go
plonky2_verifier/deserialize.goRaw
1package plonky2_verifier
2
3import (
4 "encoding/json"
5 . "gnark-ed25519/field"
6 "gnark-ed25519/utils"
7 "io/ioutil"
8 "os"
9)
10
11type ProofWithPublicInputsRaw struct {
12 Proof struct {
13 WiresCap []struct {
14 Elements []uint64 `json:"elements"`
15 } `json:"wires_cap"`
16 PlonkZsPartialProductsCap []struct {
17 Elements []uint64 `json:"elements"`
18 } `json:"plonk_zs_partial_products_cap"`
19 QuotientPolysCap []struct {
20 Elements []uint64 `json:"elements"`
21 } `json:"quotient_polys_cap"`
22 Openings struct {
23 Constants [][]uint64 `json:"constants"`
24 PlonkSigmas [][]uint64 `json:"plonk_sigmas"`
25 Wires [][]uint64 `json:"wires"`
26 PlonkZs [][]uint64 `json:"plonk_zs"`
27 PlonkZsNext [][]uint64 `json:"plonk_zs_next"`
28 PartialProducts [][]uint64 `json:"partial_products"`
29 QuotientPolys [][]uint64 `json:"quotient_polys"`
30 } `json:"openings"`
31 OpeningProof struct {
32 CommitPhaseMerkleCaps []MerkleCapsRaw `json:"commit_phase_merkle_caps"`
33 QueryRoundProofs []struct {
34 InitialTreesProof struct {
35 EvalsProofs []EvalProofRaw `json:"evals_proofs"`
36 } `json:"initial_trees_proof"`
37 Steps []struct {
38 Evals [][]uint64 `json:"evals"`
39 MerkleProof MerkleProofRaw `json:"merkle_proof"`
40 } `json:"steps"`
41 } `json:"query_round_proofs"`
42 FinalPoly struct {
43 Coeffs [][]uint64 `json:"coeffs"`
44 } `json:"final_poly"`
45 PowWitness uint64 `json:"pow_witness"`
46 } `json:"opening_proof"`
47 } `json:"proof"`
48 PublicInputs []uint64 `json:"public_inputs"`
49}
50
51type MerkleCapsRaw struct {
52 hashes [][]uint64
53}
54
55func (m *MerkleCapsRaw) UnmarshalJSON(data []byte) error {
56 var merkleCaps []map[string][]uint64
57 if err := json.Unmarshal(data, &merkleCaps); err != nil {
58 panic(err)
59 }
60
61 m.hashes = make([][]uint64, len(merkleCaps))
62 for i := 0; i < len(merkleCaps); i++ {
63 m.hashes[i] = merkleCaps[i]["elements"]
64 }
65 return nil
66}
67
68type EvalProofRaw struct {
69 leafElements []uint64
70 merkleProof MerkleProofRaw
71}
72
73func (e *EvalProofRaw) UnmarshalJSON(data []byte) error {
74 return json.Unmarshal(data, &[]interface{}{&e.leafElements, &e.merkleProof})
75}
76
77type MerkleProofRaw struct {
78 hash [][]uint64
79}
80
81func (m *MerkleProofRaw) UnmarshalJSON(data []byte) error {
82 type SiblingObject struct {
83 Siblings []map[string][]uint64 // "siblings"
84 }
85
86 var siblings SiblingObject
87 if err := json.Unmarshal(data, &siblings); err != nil {
88 panic(err)
89 }
90
91 m.hash = make([][]uint64, len(siblings.Siblings))
92 for siblingIdx, sibling := range siblings.Siblings {
93 m.hash[siblingIdx] = sibling["elements"]
94 }
95
96 return nil
97}
98
99type CommonCircuitDataRaw struct {
100 Config struct {
101 NumWires uint64 `json:"num_wires"`
102 NumRoutedWires uint64 `json:"num_routed_wires"`
103 NumConstants uint64 `json:"num_constants"`
104 UseBaseArithmeticGate bool `json:"use_base_arithmetic_gate"`
105 SecurityBits uint64 `json:"security_bits"`
106 NumChallenges uint64 `json:"num_challenges"`
107 ZeroKnowledge bool `json:"zero_knowledge"`
108 MaxQuotientDegreeFactor uint64 `json:"max_quotient_degree_factor"`
109 FriConfig struct {
110 RateBits uint64 `json:"rate_bits"`
111 CapHeight uint64 `json:"cap_height"`
112 ProofOfWorkBits uint64 `json:"proof_of_work_bits"`
113 ReductionStrategy struct {
114 ConstantArityBits []uint64 `json:"ConstantArityBits"`
115 } `json:"reduction_strategy"`
116 NumQueryRounds uint64 `json:"num_query_rounds"`
117 } `json:"fri_config"`
118 } `json:"config"`
119 FriParams struct {
120 Config struct {
121 RateBits uint64 `json:"rate_bits"`
122 CapHeight uint64 `json:"cap_height"`
123 ProofOfWorkBits uint64 `json:"proof_of_work_bits"`
124 ReductionStrategy struct {
125 ConstantArityBits []uint64 `json:"ConstantArityBits"`
126 } `json:"reduction_strategy"`
127 NumQueryRounds uint64 `json:"num_query_rounds"`
128 } `json:"config"`
129 Hiding bool `json:"hiding"`
130 DegreeBits uint64 `json:"degree_bits"`
131 ReductionArityBits []uint64 `json:"reduction_arity_bits"`
132 } `json:"fri_params"`
133 DegreeBits uint64 `json:"degree_bits"`
134 SelectorsInfo struct {
135 SelectorIndices []uint64 `json:"selector_indices"`
136 Groups []struct {
137 Start uint64 `json:"start"`
138 End uint64 `json:"end"`
139 } `json:"groups"`
140 } `json:"selectors_info"`
141 QuotientDegreeFactor uint64 `json:"quotient_degree_factor"`
142 NumGateConstraints uint64 `json:"num_gate_constraints"`
143 NumConstants uint64 `json:"num_constants"`
144 NumPublicInputs uint64 `json:"num_public_inputs"`
145 KIs []uint64 `json:"k_is"`
146 NumPartialProducts uint64 `json:"num_partial_products"`
147 CircuitDigest struct {
148 Elements []uint64 `json:"elements"`
149 } `json:"circuit_digest"`
150}
151
152type VerifierOnlyCircuitDataRaw struct {
153 ConstantsSigmasCap []struct {
154 Elements []uint64 `json:"elements"`
155 } `json:"constants_sigmas_cap"`
156}
157
158func DeserializeMerkleCap(merkleCapRaw []struct{ Elements []uint64 }) MerkleCap {
159 n := len(merkleCapRaw)
160 merkleCap := make([]Hash, n)
161 for i := 0; i < n; i++ {
162 copy(merkleCap[i][:], utils.Uint64ArrayToFArray(merkleCapRaw[i].Elements))
163 }
164 return merkleCap
165}
166
167func DeserializeMerkleProof(merkleProofRaw struct{ Siblings []interface{} }) MerkleProof {
168 n := len(merkleProofRaw.Siblings)
169 var mp MerkleProof
170 mp.Siblings = make([]Hash, n)
171 for i := 0; i < n; i++ {
172 element := merkleProofRaw.Siblings[i].(struct{ Elements []uint64 })
173 copy(mp.Siblings[i][:], utils.Uint64ArrayToFArray(element.Elements))
174 }
175 return mp
176}
177
178func DeserializeOpeningSet(openingSetRaw struct {
179 Constants [][]uint64
180 PlonkSigmas [][]uint64
181 Wires [][]uint64
182 PlonkZs [][]uint64
183 PlonkZsNext [][]uint64
184 PartialProducts [][]uint64
185 QuotientPolys [][]uint64
186}) OpeningSet {
187 return OpeningSet{
188 Constants: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.Constants),
189 PlonkSigmas: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.PlonkSigmas),
190 Wires: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.Wires),
191 PlonkZs: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.PlonkZs),
192 PlonkZsNext: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.PlonkZsNext),
193 PartialProducts: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.PartialProducts),
194 QuotientPolys: utils.Uint64ArrayToQuadraticExtensionArray(openingSetRaw.QuotientPolys),
195 }
196}
197
198func DeserializeFriProof(openingProofRaw struct {
199 CommitPhaseMerkleCaps []MerkleCapsRaw
200 QueryRoundProofs []struct {
201 InitialTreesProof struct {
202 EvalsProofs []EvalProofRaw
203 }
204 Steps []struct {
205 Evals [][]uint64
206 MerkleProof MerkleProofRaw
207 }
208 }
209 FinalPoly struct {
210 Coeffs [][]uint64
211 }
212 PowWitness uint64
213}) FriProof {
214 var openingProof FriProof
215 openingProof.PowWitness = NewFieldElement(openingProofRaw.PowWitness)
216 openingProof.FinalPoly.Coeffs = utils.Uint64ArrayToQuadraticExtensionArray(openingProofRaw.FinalPoly.Coeffs)
217
218 openingProof.CommitPhaseMerkleCaps = make([]MerkleCap, len(openingProofRaw.CommitPhaseMerkleCaps))
219 for i := 0; i < len(openingProofRaw.CommitPhaseMerkleCaps); i++ {
220 openingProof.CommitPhaseMerkleCaps[i] = utils.Uint64ArrayToHashArray(openingProofRaw.CommitPhaseMerkleCaps[i].hashes)
221 }
222
223 numQueryRoundProofs := len(openingProofRaw.QueryRoundProofs)
224 openingProof.QueryRoundProofs = make([]FriQueryRound, numQueryRoundProofs)
225
226 for i := 0; i < numQueryRoundProofs; i++ {
227 numEvalProofs := len(openingProofRaw.QueryRoundProofs[i].InitialTreesProof.EvalsProofs)
228 openingProof.QueryRoundProofs[i].InitialTreesProof.EvalsProofs = make([]EvalProof, numEvalProofs)
229 for j := 0; j < numEvalProofs; j++ {
230 openingProof.QueryRoundProofs[i].InitialTreesProof.EvalsProofs[j].Elements = utils.Uint64ArrayToFArray(openingProofRaw.QueryRoundProofs[i].InitialTreesProof.EvalsProofs[j].leafElements)
231 openingProof.QueryRoundProofs[i].InitialTreesProof.EvalsProofs[j].MerkleProof.Siblings = utils.Uint64ArrayToHashArray(openingProofRaw.QueryRoundProofs[i].InitialTreesProof.EvalsProofs[j].merkleProof.hash)
232 }
233
234 numSteps := len(openingProofRaw.QueryRoundProofs[i].Steps)
235 openingProof.QueryRoundProofs[i].Steps = make([]FriQueryStep, numSteps)
236 for j := 0; j < numSteps; j++ {
237 openingProof.QueryRoundProofs[i].Steps[j].Evals = utils.Uint64ArrayToQuadraticExtensionArray(openingProofRaw.QueryRoundProofs[i].Steps[j].Evals)
238 openingProof.QueryRoundProofs[i].Steps[j].MerkleProof.Siblings = utils.Uint64ArrayToHashArray(openingProofRaw.QueryRoundProofs[i].Steps[j].MerkleProof.hash)
239 }
240 }
241
242 return openingProof
243}
244
245func DeserializeProofWithPublicInputs(path string) ProofWithPublicInputs {
246 jsonFile, err := os.Open(path)
247 if err != nil {
248 panic(err)
249 }
250
251 defer jsonFile.Close()
252 rawBytes, _ := ioutil.ReadAll(jsonFile)
253
254 var raw ProofWithPublicInputsRaw
255 err = json.Unmarshal(rawBytes, &raw)
256 if err != nil {
257 panic(err)
258 }
259
260 var proofWithPis ProofWithPublicInputs
261 proofWithPis.Proof.WiresCap = DeserializeMerkleCap([]struct{ Elements []uint64 }(raw.Proof.WiresCap))
262 proofWithPis.Proof.PlonkZsPartialProductsCap = DeserializeMerkleCap([]struct{ Elements []uint64 }(raw.Proof.PlonkZsPartialProductsCap))
263 proofWithPis.Proof.QuotientPolysCap = DeserializeMerkleCap([]struct{ Elements []uint64 }(raw.Proof.QuotientPolysCap))
264 proofWithPis.Proof.Openings = DeserializeOpeningSet(struct {
265 Constants [][]uint64
266 PlonkSigmas [][]uint64
267 Wires [][]uint64
268 PlonkZs [][]uint64
269 PlonkZsNext [][]uint64
270 PartialProducts [][]uint64
271 QuotientPolys [][]uint64
272 }(raw.Proof.Openings))
273 proofWithPis.Proof.OpeningProof = DeserializeFriProof(struct {
274 CommitPhaseMerkleCaps []MerkleCapsRaw
275 QueryRoundProofs []struct {
276 InitialTreesProof struct {
277 EvalsProofs []EvalProofRaw
278 }
279 Steps []struct {
280 Evals [][]uint64
281 MerkleProof MerkleProofRaw
282 }
283 }
284 FinalPoly struct{ Coeffs [][]uint64 }
285 PowWitness uint64
286 }(raw.Proof.OpeningProof))
287 proofWithPis.PublicInputs = utils.Uint64ArrayToFArray(raw.PublicInputs)
288
289 return proofWithPis
290}
291
292func ReductionArityBits(
293 arityBits uint64,
294 finalPolyBits uint64,
295 degreeBits uint64,
296 rateBits uint64,
297 capHeight uint64,
298) []uint64 {
299 returnArr := make([]uint64, 0)
300
301 for degreeBits > finalPolyBits && degreeBits+rateBits-arityBits >= capHeight {
302 returnArr = append(returnArr, arityBits)
303 if degreeBits < arityBits {
304 panic("degreeBits < arityBits")
305 }
306 degreeBits -= arityBits
307 }
308
309 return returnArr
310}
311
312func DeserializeCommonCircuitData(path string) CommonCircuitData {
313 jsonFile, err := os.Open(path)
314 if err != nil {
315 panic(err)
316 }
317
318 defer jsonFile.Close()
319 rawBytes, _ := ioutil.ReadAll(jsonFile)
320
321 var raw CommonCircuitDataRaw
322 err = json.Unmarshal(rawBytes, &raw)
323 if err != nil {
324 panic(err)
325 }
326
327 var commonCircuitData CommonCircuitData
328 commonCircuitData.Config.NumWires = raw.Config.NumWires
329 commonCircuitData.Config.NumRoutedWires = raw.Config.NumRoutedWires
330 commonCircuitData.Config.NumConstants = raw.Config.NumConstants
331 commonCircuitData.Config.UseBaseArithmeticGate = raw.Config.UseBaseArithmeticGate
332 commonCircuitData.Config.SecurityBits = raw.Config.SecurityBits
333 commonCircuitData.Config.NumChallenges = raw.Config.NumChallenges
334 commonCircuitData.Config.ZeroKnowledge = raw.Config.ZeroKnowledge
335 commonCircuitData.Config.MaxQuotientDegreeFactor = raw.Config.MaxQuotientDegreeFactor
336
337 commonCircuitData.Config.FriConfig.RateBits = raw.Config.FriConfig.RateBits
338 commonCircuitData.Config.FriConfig.CapHeight = raw.Config.FriConfig.CapHeight
339 commonCircuitData.Config.FriConfig.ProofOfWorkBits = raw.Config.FriConfig.ProofOfWorkBits
340 commonCircuitData.Config.FriConfig.NumQueryRounds = raw.Config.FriConfig.NumQueryRounds
341
342 commonCircuitData.FriParams.DegreeBits = raw.FriParams.DegreeBits
343 commonCircuitData.FriParams.Config.RateBits = raw.FriParams.Config.RateBits
344 commonCircuitData.FriParams.Config.CapHeight = raw.FriParams.Config.CapHeight
345 commonCircuitData.FriParams.Config.ProofOfWorkBits = raw.FriParams.Config.ProofOfWorkBits
346 commonCircuitData.FriParams.Config.NumQueryRounds = raw.FriParams.Config.NumQueryRounds
347 commonCircuitData.FriParams.ReductionArityBits = raw.FriParams.ReductionArityBits
348
349 commonCircuitData.DegreeBits = raw.DegreeBits
350 commonCircuitData.QuotientDegreeFactor = raw.QuotientDegreeFactor
351 commonCircuitData.NumGateConstraints = raw.NumGateConstraints
352 commonCircuitData.NumConstants = raw.NumConstants
353 commonCircuitData.NumPublicInputs = raw.NumPublicInputs
354 commonCircuitData.KIs = utils.Uint64ArrayToFArray(raw.KIs)
355 commonCircuitData.NumPartialProducts = raw.NumPartialProducts
356 copy(commonCircuitData.CircuitDigest[:], utils.Uint64ArrayToFArray(raw.CircuitDigest.Elements))
357
358 return commonCircuitData
359}
360
361func DeserializeVerifierOnlyCircuitData(path string) VerifierOnlyCircuitData {
362 jsonFile, err := os.Open(path)
363 if err != nil {
364 panic(err)
365 }
366
367 defer jsonFile.Close()
368 rawBytes, _ := ioutil.ReadAll(jsonFile)
369
370 var raw VerifierOnlyCircuitDataRaw
371 err = json.Unmarshal(rawBytes, &raw)
372 if err != nil {
373 panic(err)
374 }
375
376 return VerifierOnlyCircuitData{
377 ConstantSigmasCap: DeserializeMerkleCap([]struct{ Elements []uint64 }(raw.ConstantsSigmasCap)),
378 }
379}