Commit graph

348 commits

Author SHA1 Message Date
Sean Bowe
98c1d80c90
Avoid square challenges and forking in inner product argument
This modifies the scheme to be almost identical to the construction
outlined in Appenix A.2 of "Proof-Carrying Data from Accumulation
Schemes" (https://eprint.iacr.org/2020/499). The only remaining
difference is that we do not compute [v] U but instead subtract
[v] G_0 from the commitment before opening.
2021-01-12 07:40:20 -07:00
Sean Bowe
c8dedf2ec3
Fix challenge multiplications as per #119. 2021-01-06 10:47:06 -07:00
Sean Bowe
c5e0364962
Remove the Read/Write type parameters from Transcript{Read,Write}. 2021-01-06 10:45:11 -07:00
Sean Bowe
dff5a3a692
Generate the URS using a homebrew mixture of blake2b and try-and-increment. 2021-01-06 10:45:11 -07:00
Sean Bowe
a2999accb5
Rename DummyHash{Reader,Writer} to DummyHash{Read,Write}. 2021-01-06 10:45:11 -07:00
Sean Bowe
7ffd28a1b5
Remove unnecessary separate msm from commitment::verify_proof. 2021-01-06 10:45:11 -07:00
Sean Bowe
4ecbfb548e
Remove unnecessary lifetimes. 2021-01-06 10:45:11 -07:00
Sean Bowe
06552eec44
Update the PLONK implementation to adapt to the new transcript API. 2021-01-06 10:45:11 -07:00
Sean Bowe
5be7d9525d
Update multiopen APIs to reflect changes made to Transcript APIs 2021-01-06 10:45:10 -07:00
Sean Bowe
d30c6b62e4
Modification of the polynomial commitment scheme to compensate for Transcript API changes. 2021-01-06 10:40:26 -07:00
Sean Bowe
fb232ddec0
Change API for dealing with transcripts to integrate proof reading/writing. 2021-01-06 10:39:11 -07:00
str4d
fb37172ffa
Merge pull request #119 from zcash/fix-rust-breakage
Fix breakage of trait resolution in Rust 1.49.0
2021-01-07 04:15:00 +13:00
ying tong
0ed37a937f
Merge pull request #122 from zcash/book-patch-compression
[book] Fix compression table formatting
2021-01-06 20:41:42 +08:00
therealyingtong
1a3fccd71b [book] Fix compression table formatting 2021-01-06 20:41:13 +08:00
ying tong
b0fc9a0b37
Merge pull request #121 from zcash/book-sha256-compression
[book] Add compression region to table16.md
2021-01-06 20:31:11 +08:00
therealyingtong
38c78b8c50 [book] Add compression region to table16.md 2021-01-06 20:30:28 +08:00
Jack Grigg
ac75aac455 CI: Set toolchain for book tests 2021-01-06 00:48:29 +00:00
Jack Grigg
f49e1e6177 Fix breakage of trait resolution in Rust 1.49.0
Previously, `ChallengeScalar` could use the operator traits defined on
the `F: Field` type it wrapped, due to its `impl Deref<Target = F>`.
This was technically ambiguous, and Rust 1.49.0 makes that ambiguity an
error.

We could fix this by adding operator impls with `ChallengeScalar` on the
RHS, but that would conflict with zcash/halo2#111. Instead we manually
dereference every challenge scalar when used in an arithmetic operation.
2021-01-06 00:48:29 +00:00
ying tong
26346adb9b
Merge pull request #118 from zcash/book-patch-sha256-4
[book] table16.md: Add sb1 selector
2021-01-04 23:57:01 +08:00
therealyingtong
29738d4214 Add sb1 selector 2020-12-28 22:57:50 +08:00
ying tong
71c26f0497
Merge pull request #115 from zcash/book-patch-sha256-3
[book] sha-256: Standardise notation and add sb selector to check subpieces
2020-12-28 15:11:43 +08:00
therealyingtong
50e6920ed7 Standardise notation and add sb column to check subpieces 2020-12-28 14:57:33 +08:00
Daira Hopwood
a4c874ed24
Merge pull request #114 from daira/book-concepts
[book] Write Concepts section
2020-12-26 15:46:20 +00:00
Daira Hopwood
e932352390 Rename 'Background' to 'Proof systems' and add a note about intermediate values.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2020-12-26 15:45:15 +00:00
Daira Hopwood
fcb176aeb1 Apply suggestions from code review
Minor fixes.
2020-12-26 15:33:59 +00:00
Daira Hopwood
f23677cea9 [book] Write Concepts section.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2020-12-26 15:33:59 +00:00
Daira Hopwood
591ab49266 Add book/Makefile for local HTML generation.
This is mainly useful for syntax checking rather than to produce good-quality output.
It assumes that pandoc is installed.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2020-12-26 15:33:59 +00:00
ying tong
659655a4de
Merge pull request #112 from zcash/book-patch-sha256-2
(cont.) Patch message scheduling table
2020-12-24 20:37:40 +08:00
therealyingtong
2c3cda4b01 (cont.) Patch message scheduling table 2020-12-24 20:36:03 +08:00
str4d
d47c83febf
Merge pull request #109 from zcash/fix-book-tests
book: Fix book tests by adding missing definitions to SHA-256 page
2020-12-23 17:41:08 +00:00
ebfull
d34e82f31c
Merge pull request #106 from zcash/refactor-permutation-argument
Refactor permutation proofs to reflect the separate permutations
2020-12-23 09:41:24 -07:00
Jack Grigg
a4029222fd book: Fix book tests by adding missing definitions to SHA-256 page 2020-12-23 16:13:44 +00:00
ying tong
2fe7daa6f4
Merge pull request #108 from zcash/book-patch-sha256
[book] Patch message scheduling table
2020-12-23 21:21:13 +08:00
therealyingtong
a14c538b55 Update message scheduling table 2020-12-23 21:19:42 +08:00
ying tong
d7abe3ca00
Merge pull request #98 from zcash/book-sha256
[book] Add sha256 spec
2020-12-23 13:35:37 +08:00
therealyingtong
00cb254141 Inline sigma_0 v1 in message scheduling region 2020-12-23 13:33:33 +08:00
str4d
935e806821
Merge pull request #107 from zcash/book-reorg
book: Move multipoint argument into design section
2020-12-23 03:32:44 +00:00
Jack Grigg
8f8a8e0772 book: Move multipoint argument into design section 2020-12-23 03:26:45 +00:00
Jack Grigg
d5bae060f3 book: Zero-index message schedule in the giant table 2020-12-23 03:09:26 +00:00
Jack Grigg
7fabdc1fe4 book: Mark diagram as plaintext so it doesn't get tested 2020-12-23 02:54:35 +00:00
Jack Grigg
0a9c130276 book: Fix table formatting 2020-12-23 02:51:43 +00:00
Jack Grigg
7d37ff370b book: Fix internal links in Table16 chip 2020-12-23 02:46:28 +00:00
Jack Grigg
8cf0cdeda3 book: Update TOC entry for SHA-256 chip 2020-12-23 02:44:33 +00:00
Jack Grigg
00b33bd48e book: Rework documentation of modular addition for SHA-256 chip 2020-12-23 02:42:53 +00:00
Jack Grigg
151adc83dd book: Document SHA-256 chip instructions and gadget interface 2020-12-23 02:42:27 +00:00
Jack Grigg
90c50fdd11 Refactor permutation proofs to reflect the separate permutations 2020-12-22 23:51:32 +00:00
Jack Grigg
d2c0c8b623 book: Remove trailing whitespace 2020-12-22 21:35:20 +00:00
therealyingtong
e4d5ddecb2 book: Use 0-indexing for message scheduling table16.md 2020-12-22 21:31:13 +00:00
therealyingtong
fc4497ac7c book: Bring in second SHA-256 table spec page from HackMD 2020-12-22 21:31:13 +00:00
therealyingtong
6abcc70928 book: Bring in first SHA-256 table spec page from HackMD 2020-12-22 21:31:13 +00:00