snark/systems/ppzksnark/r1cs_gg_ppzksnark/ipp2/proof.hpp

Go to the documentation of this file.

//---------------------------------------------------------------------------//
// Copyright (c) 2018-2021 Mikhail Komarov <nemo@nil.foundation>
// Copyright (c) 2020-2021 Nikita Kaskov <nbering@nil.foundation>
// Copyright (c) 2020-2021 Ilias Khairullin <ilias@nil.foundation>
//
// MIT License
//
// Permission is hereby granted, free of charge, to any person obtaining a copy
// of this software and associated documentation files (the "Software"), to deal
// in the Software without restriction, including without limitation the rights
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
// copies of the Software, and to permit persons to whom the Software is
// furnished to do so, subject to the following conditions:
//
// The above copyright notice and this permission notice shall be included in all
// copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
// SOFTWARE.
//---------------------------------------------------------------------------//
 
#ifndef CRYPTO3_R1CS_GG_PPZKSNARK_IPP2_AGGREGATE_PROOF_HPP
#define CRYPTO3_R1CS_GG_PPZKSNARK_IPP2_AGGREGATE_PROOF_HPP
 
#include <vector>
#include <tuple>
#include <cmath>
 
#include <nil/crypto3/zk/snark/systems/ppzksnark/r1cs_gg_ppzksnark/proof.hpp>
#include <nil/crypto3/zk/snark/systems/ppzksnark/r1cs_gg_ppzksnark/ipp2/commitment.hpp>
#include <nil/crypto3/zk/snark/systems/ppzksnark/r1cs_gg_ppzksnark/ipp2/srs.hpp>
 
namespace nil {
    namespace crypto3 {
        namespace zk {
            namespace snark {
                template<typename GroupType>
                using kzg_opening = std::pair<typename GroupType::value_type, typename GroupType::value_type>;
 
                template<typename CurveType>
                struct gipa_proof {
                    typedef CurveType curve_type;
 
                    std::size_t nproofs;
                    std::vector<std::pair<r1cs_gg_ppzksnark_ipp2_commitment_output<curve_type>,
                                          r1cs_gg_ppzksnark_ipp2_commitment_output<curve_type>>>
                        comms_ab;
                    std::vector<std::pair<r1cs_gg_ppzksnark_ipp2_commitment_output<curve_type>,
                                          r1cs_gg_ppzksnark_ipp2_commitment_output<curve_type>>>
                        comms_c;
                    std::vector<
                        std::pair<typename curve_type::gt_type::value_type, typename curve_type::gt_type::value_type>>
                        z_ab;
                    std::vector<std::pair<typename curve_type::template g1_type<>::value_type,
                                          typename curve_type::template g1_type<>::value_type>>
                        z_c;
                    typename curve_type::template g1_type<>::value_type final_a;
                    typename curve_type::template g2_type<>::value_type final_b;
                    typename curve_type::template g1_type<>::value_type final_c;
 
                    std::pair<typename curve_type::template g2_type<>::value_type,
                              typename curve_type::template g2_type<>::value_type>
                        final_vkey;
                    std::pair<typename curve_type::template g1_type<>::value_type,
                              typename curve_type::template g1_type<>::value_type>
                        final_wkey;
 
                    static std::size_t log_proofs(std::size_t nproofs) {
                        return std::ceil(std::log2(nproofs));
                    }
                };
 
                template<typename CurveType>
                struct tipp_mipp_proof {
                    typedef CurveType curve_type;
 
                    gipa_proof<curve_type> gipa;
                    kzg_opening<typename curve_type::template g2_type<>> vkey_opening;
                    kzg_opening<typename curve_type::template g1_type<>> wkey_opening;
                };
                template<typename CurveType>
                struct r1cs_gg_ppzksnark_aggregate_proof {
                    typedef CurveType curve_type;
                    r1cs_gg_ppzksnark_ipp2_commitment_output<curve_type> com_ab;
                    r1cs_gg_ppzksnark_ipp2_commitment_output<curve_type> com_c;
                    typename curve_type::gt_type::value_type ip_ab;
                    typename curve_type::template g1_type<>::value_type agg_c;
                    tipp_mipp_proof<curve_type> tmipp;
 
                    bool is_valid() const {
                        // 1. Check length of the proofs
                        if (tmipp.gipa.nproofs < 2 ||
                            tmipp.gipa.nproofs >
                                r1cs_gg_ppzksnark_aggregate_srs<curve_type>::MAX_SRS_SIZE) {
                            return false;
                        }
                        // 2. Check if it's a power of two
                        if ((tmipp.gipa.nproofs & (tmipp.gipa.nproofs - 1)) != 0) {
                            return false;
                        }
                        // 3. Check all vectors are of the same length and of the correct length
                        if (tmipp.gipa.comms_ab.size() != std::ceil(std::log2(tmipp.gipa.nproofs))) {
                            return false;
                        }
                        if (!(tmipp.gipa.comms_ab.size() == tmipp.gipa.comms_c &&
                              tmipp.gipa.comms_ab == tmipp.gipa.z_ab && tmipp.gipa.comms_ab == tmipp.gipa.z_c)) {
                            return false;
                        }
 
                        return true;
                    }
                };
            }    // namespace snark
        }        // namespace zk
    }            // namespace crypto3
}    // namespace nil
 
#endif    // CRYPTO3_R1CS_GG_PPZKSNARK_TYPES_POLICY_HPP