61 commits

Author	SHA1	Message	Date
Sean Bowe	c5e0364962	Remove the Read/Write type parameters from Transcript{Read,Write}.	2021-01-06 10:45:11 -07:00
Sean Bowe	4ecbfb548e	Remove unnecessary lifetimes.	2021-01-06 10:45:11 -07:00
Sean Bowe	06552eec44	Update the PLONK implementation to adapt to the new transcript API.	2021-01-06 10:45:11 -07:00
Jack Grigg	90c50fdd11	Refactor permutation proofs to reflect the separate permutations	2020-12-22 23:51:32 +00:00
Sean Bowe	65ed1d8568	Check h_evals/h_commitments lengths in vanishing argument verifier.	2020-12-22 08:59:06 -07:00
therealyingtong	8360b94f89	Extract plonk::vanishing::{Argument, Proof} from prover and verifier ... Co-authored-by: Jack Grigg <jack@electriccoin.co>	2020-12-08 00:57:14 +08:00
therealyingtong	0c81e9adab	Use lookup mod in plonk::prover and plonk::verifier	2020-12-03 10:50:20 +08:00
therealyingtong	2ba44cff9f	Add theta challenge	2020-12-03 10:50:20 +08:00
Jack Grigg	f63f3ff2af	Introduce typed challenge scalars ... This also centralises the challenge generation logic in Challenge::get, ensuring it is consistent across the codebase.	2020-12-01 21:09:03 +00:00
Jack Grigg	4a3b830165	Extract permutation argument into a submodule	2020-12-01 21:03:31 +00:00
Jack Grigg	cdbc41148a	Migrate to ff traits ... The `Field` trait in this crate is now `FieldExt: ff::PrimeField`.	2020-12-01 20:55:03 +00:00
Jack Grigg	6360da1f4e	Remove query allocations from Proof::verify ... multiopen::Proof::verify takes `queries: IntoIterator`, so we can just pass it an iterator directly.	2020-11-24 18:23:27 +00:00
Jack Grigg	7f29ab913d	Simplify h(x_3) computation in verifier using Horner's rule ... Closes zcash/halo2#45	2020-11-24 18:18:45 +00:00
therealyingtong	2375507f4f	Update error handling	2020-11-16 21:26:46 +00:00
therealyingtong	43337dea1b	Make Transcript generic over curve points ... Co-authored-by: Jack Grigg <jack@electriccoin.co>	2020-11-16 21:26:46 +00:00
ebfull	5d1e1a29db	Merge pull request #51 from zcash/update-ci ... Update Actions CI with improved workflow	2020-11-11 08:52:59 -07:00
therealyingtong	766caf9214	Make getters for column index() and column_type()	2020-11-10 00:45:52 +08:00
therealyingtong	075988ae4e	Introduce Column struct and ColumnType trait	2020-11-06 11:29:42 +08:00
therealyingtong	2034179d82	Rename wire -> column	2020-11-06 11:18:12 +08:00
Jack Grigg	5a6a45c6a8	Fix deref breakage with nightly-2020-10-06 ... I think this is related to rust-lang/rust#77638	2020-10-30 01:21:09 +00:00
therealyingtong	24b85dec67	Remove q_evals.len() = rotations.len() check ... q_evals should now have the same length as point_sets, which is only constructed in the multiopen verifier.	2020-10-14 00:43:48 +08:00
therealyingtong	c3d0a172a7	Create multiopen abstraction	2020-10-14 00:35:25 +08:00
Sean Bowe	2ccddac674	Split proof/input length checks into separate method of verifier	2020-09-29 17:35:24 -06:00
Sean Bowe	9672bf9725	Minor improvements to check_hx()	2020-09-29 17:14:37 -06:00
Sean Bowe	7d8daa5d05	Refactor h_eval computation into separate, more functional code. ... Co-authored-by: str4d <thestr4d@gmail.com>	2020-09-29 16:56:21 -06:00
Sean Bowe	e275d78c7d	Simplify permutations field of ConstraintSystem ... Co-authored-by: therealyingtong <yingtong@electriccoin.co>	2020-09-29 08:51:00 -06:00
Sean Bowe	c97da352ee	Remove SRS and replace with ProvingKey/VerifyingKey abstractions ... Co-authored-by: therealyingtong <yingtong@electriccoin.co>	2020-09-29 08:25:04 -06:00
Sean Bowe	6620817d81	Return errors from verifier instead of assuming points aren't at infinity in the proof.	2020-09-19 13:47:37 -06:00
Sean Bowe	73d494a72d	Various changes, including restoring permutation argument to advice wires only for now.	2020-09-19 13:31:56 -06:00
therealyingtong	24fe3fae29	Remove aux_commitments computation from Prover; remove blinding factor when accumulator aux_evals	2020-09-19 12:39:04 -06:00
therealyingtong	a257308ba2	Add aux wires to ConstraintSystem	2020-09-19 12:39:04 -06:00
therealyingtong	0caf1d2087	Provide aux_commitments to verifier and aux_lagrange_polys to prover	2020-09-19 12:39:04 -06:00
Sean Bowe	52a85380bc	Rename f_eval to msm_eval.	2020-09-16 13:15:10 -06:00
Sean Bowe	68de5db8c6	Mitigate unnecessary scaling operations in commitment verifier.	2020-09-15 17:42:02 -06:00
Sean Bowe	a886663e05	Incorporate MSM/Guard into PLONK verifier API and arithmetic.	2020-09-15 17:32:39 -06:00
Sean Bowe	643077b150	Rename ConstraintSystem to Assignment, and MetaCircuit to ConstraintSystem.	2020-09-13 10:30:02 -06:00
therealyingtong	1eb2a36086	Return MSM from PLONK verifier	2020-09-13 23:10:06 +08:00
therealyingtong	1a52d8f6b8	Add MSM to PLONK verifier signature	2020-09-13 12:32:32 +08:00
therealyingtong	14d1f41e08	Address review comments	2020-09-13 03:03:36 +08:00
therealyingtong	5f1cd6ced2	Only return Guard from OpeningProof.verify()	2020-09-13 00:50:35 +08:00
therealyingtong	d41fcf842b	Modify MSM and Guard structs and methods	2020-09-11 18:57:22 +08:00
therealyingtong	5724706a09	Add MSM and Guard structs in polycommit scheme	2020-09-10 18:51:41 +08:00
Sean Bowe	549232234f	Finish comment on Proof::verify.	2020-09-07 16:34:40 -06:00
Sean Bowe	116659c1ba	Refactor module tree.	2020-09-07 13:07:51 -06:00
Sean Bowe	190242a4e9	Remove redundant permutation_queries vector.	2020-09-06 14:18:05 -06:00
Sean Bowe	a128d5d9b3	Undo unnecessarily complicated negation thing.	2020-09-04 14:25:16 -06:00
ying tong	10a4b4252c	Fix current_delta initialisation in verifier	2020-09-04 19:05:08 +08:00
Sean Bowe	0651359cb8	[WIP] Finish prover	2020-09-03 17:21:44 -06:00
Sean Bowe	160dabe9c5	Cleanups for verifier of permutation argument	2020-09-02 13:15:40 -06:00
therealyingtong	c44a020de7	Permutation checks in verifier	2020-09-03 00:45:03 +08:00