79 commits

Author	SHA1	Message	Date
Sean Bowe	7d8daa5d05	Refactor h_eval computation into separate, more functional code. ... Co-authored-by: str4d <thestr4d@gmail.com>	2020-09-29 16:56:21 -06:00
Sean Bowe	e275d78c7d	Simplify permutations field of ConstraintSystem ... Co-authored-by: therealyingtong <yingtong@electriccoin.co>	2020-09-29 08:51:00 -06:00
Sean Bowe	c97da352ee	Remove SRS and replace with ProvingKey/VerifyingKey abstractions ... Co-authored-by: therealyingtong <yingtong@electriccoin.co>	2020-09-29 08:25:04 -06:00
Sean Bowe	56b6d8bd03	Auxilary wires in PLONK are foux blinded just like fixed wires.	2020-09-25 10:21:15 -06:00
Sean Bowe	2d1f69328f	Rename OpeningProof to just Proof.	2020-09-25 09:39:32 -06:00
Sean Bowe	a37c926a89	Address clippy lints	2020-09-20 13:09:03 -06:00
Sean Bowe	6620817d81	Return errors from verifier instead of assuming points aren't at infinity in the proof.	2020-09-19 13:47:37 -06:00
Sean Bowe	73d494a72d	Various changes, including restoring permutation argument to advice wires only for now.	2020-09-19 13:31:56 -06:00
therealyingtong	e8839a7579	Refactor wire pattern matching when computing permutation product	2020-09-19 12:39:04 -06:00
therealyingtong	24fe3fae29	Remove aux_commitments computation from Prover; remove blinding factor when accumulator aux_evals	2020-09-19 12:39:04 -06:00
therealyingtong	c772801f8f	Pass aux_lagrange_polys to prover as a slice	2020-09-19 12:39:04 -06:00
therealyingtong	0bdcbb6c67	Introduce Wire enum for use in permutations	2020-09-19 12:39:04 -06:00
therealyingtong	a257308ba2	Add aux wires to ConstraintSystem	2020-09-19 12:39:04 -06:00
therealyingtong	0caf1d2087	Provide aux_commitments to verifier and aux_lagrange_polys to prover	2020-09-19 12:39:04 -06:00
therealyingtong	76c49a4df3	Minor refactor	2020-09-19 23:44:00 +08:00
therealyingtong	33261ec1a0	Recover from OpeningProof::create() failure in PLONK prover	2020-09-19 23:19:30 +08:00
therealyingtong	69a612fb59	Increment blinding factor instead of choosing new random blinding factor	2020-09-19 23:04:17 +08:00
therealyingtong	a6f5d0ad5e	Remove fork from OpeningProof prover; add loop in PLONK prover to try different f_blind values	2020-09-19 16:57:32 +08:00
Sean Bowe	52a85380bc	Rename f_eval to msm_eval.	2020-09-16 13:15:10 -06:00
Sean Bowe	68de5db8c6	Mitigate unnecessary scaling operations in commitment verifier.	2020-09-15 17:42:02 -06:00
Sean Bowe	a886663e05	Incorporate MSM/Guard into PLONK verifier API and arithmetic.	2020-09-15 17:32:39 -06:00
Sean Bowe	643077b150	Rename ConstraintSystem to Assignment, and MetaCircuit to ConstraintSystem.	2020-09-13 10:30:02 -06:00
therealyingtong	1eb2a36086	Return MSM from PLONK verifier	2020-09-13 23:10:06 +08:00
therealyingtong	1a52d8f6b8	Add MSM to PLONK verifier signature	2020-09-13 12:32:32 +08:00
therealyingtong	14d1f41e08	Address review comments	2020-09-13 03:03:36 +08:00
therealyingtong	5f1cd6ced2	Only return Guard from OpeningProof.verify()	2020-09-13 00:50:35 +08:00
therealyingtong	d41fcf842b	Modify MSM and Guard structs and methods	2020-09-11 18:57:22 +08:00
therealyingtong	5724706a09	Add MSM and Guard structs in polycommit scheme	2020-09-10 18:51:41 +08:00
Sean Bowe	549232234f	Finish comment on Proof::verify.	2020-09-07 16:34:40 -06:00
Sean Bowe	116659c1ba	Refactor module tree.	2020-09-07 13:07:51 -06:00
Sean Bowe	21f02a73c2	Don't mutate the witness during permutation argument. Also, adds parallelism and reduces state/multiplications.	2020-09-07 09:43:02 -06:00
Sean Bowe	b65e75921b	Remove stale comment	2020-09-06 14:21:28 -06:00
Sean Bowe	190242a4e9	Remove redundant permutation_queries vector.	2020-09-06 14:18:05 -06:00
Sean Bowe	eff149e734	Fix incorrect indexing into advice_cosets during proving.	2020-09-06 14:10:25 -06:00
Sean Bowe	e37d0c946b	Add parallelism in various locations in the prover.	2020-09-06 13:40:06 -06:00
Sean Bowe	3157fdd7d0	Batch inversions during domain setup.	2020-09-06 12:44:36 -06:00
Sean Bowe	ff8f9eb20e	Reduce number of inversions by batch inverting when possible.	2020-09-06 12:29:34 -06:00
Sean Bowe	624eb6a421	Remove unnecessary computation of permutation length in prover.	2020-09-06 11:33:09 -06:00
therealyingtong	503939db05	Minor cleanups	2020-09-06 06:34:29 +08:00
Sean Bowe	965362c1f5	Don't precompute deltaomega; inline its computation.	2020-09-05 14:44:13 -06:00
Sean Bowe	937861c0b8	Add implementation of daira's algorithm for copy constraint enforcement.	2020-09-05 12:56:45 -06:00
Sean Bowe	d7132404ba	Index into q_evals consistently between prover and verifier.	2020-09-05 12:08:56 -06:00
Sean Bowe	869aba389a	Cleanups	2020-09-05 11:40:25 -06:00
Sean Bowe	da9c24bcfa	Obtain permutation product polynomial correctly.	2020-09-05 10:52:40 -06:00
Sean Bowe	114653f366	Fix indexing for permutation argument.	2020-09-04 14:45:05 -06:00
Sean Bowe	a128d5d9b3	Undo unnecessarily complicated negation thing.	2020-09-04 14:25:16 -06:00
therealyingtong	c7c5cf4db6	Rename tmp variables	2020-09-04 20:31:37 +08:00
ying tong	10a4b4252c	Fix current_delta initialisation in verifier	2020-09-04 19:05:08 +08:00
Sean Bowe	06a4cfe13b	Use extended omega for coset in prover.	2020-09-04 04:49:59 -06:00
Sean Bowe	0651359cb8	[WIP] Finish prover	2020-09-03 17:21:44 -06:00