From 24e3ec36337bf36ec5359b4114f9f54e22610aa9 Mon Sep 17 00:00:00 2001 From: ashWhiteHat Date: Wed, 6 Sep 2023 12:57:57 +0900 Subject: [PATCH] arithmetic::best_multiexp refactor buckets --- halo2_proofs/src/arithmetic.rs | 103 ++++++++++++++++----------------- 1 file changed, 49 insertions(+), 54 deletions(-) diff --git a/halo2_proofs/src/arithmetic.rs b/halo2_proofs/src/arithmetic.rs index 914851f9..f10ae041 100644 --- a/halo2_proofs/src/arithmetic.rs +++ b/halo2_proofs/src/arithmetic.rs @@ -56,24 +56,58 @@ impl Bucket { } } -fn get_at(segment: usize, c: usize, bytes: &F::Repr) -> usize { - let skip_bits = segment * c; - let skip_bytes = skip_bits / 8; +#[derive(Clone)] +struct Buckets { + c: usize, + coeffs: Vec>, +} - if skip_bytes >= 32 { - return 0; +impl Buckets { + fn new(c: usize) -> Self { + Self { + c, + coeffs: vec![Bucket::None; (1 << c) - 1], + } } - let mut v = [0; 8]; - for (v, o) in v.iter_mut().zip(bytes.as_ref()[skip_bytes..].iter()) { - *v = *o; + fn sum(&mut self, coeffs: &[C::Scalar], bases: &[C], i: usize) -> C::Curve { + // get segmentation and add coeff to buckets content + for (coeff, base) in coeffs.iter().zip(bases.iter()) { + let seg = self.get_at::(i, &coeff.to_repr()); + if seg != 0 { + self.coeffs[seg - 1].add_assign(base); + } + } + // Summation by parts + // e.g. 3a + 2b + 1c = a + + // (a) + b + + // ((a) + b) + c + let mut acc = C::Curve::identity(); + let mut sum = C::Curve::identity(); + self.coeffs.iter().rev().for_each(|b| { + sum = b.add(sum); + acc += sum; + }); + acc } - let mut tmp = u64::from_le_bytes(v); - tmp >>= skip_bits - (skip_bytes * 8); - tmp %= 1 << c; + fn get_at(&self, segment: usize, bytes: &F::Repr) -> usize { + let skip_bits = segment * self.c; + let skip_bytes = skip_bits / 8; - tmp as usize + if skip_bytes >= 32 { + 0 + } else { + let mut v = [0; 8]; + for (v, o) in v.iter_mut().zip(bytes.as_ref()[skip_bytes..].iter()) { + *v = *o; + } + + let mut tmp = u64::from_le_bytes(v); + tmp >>= skip_bits - (skip_bytes * 8); + (tmp % (1 << self.c)) as usize + } + } } /// Performs a small multi-exponentiation operation. @@ -116,9 +150,7 @@ pub fn best_multiexp(coeffs: &[C::Scalar], bases: &[C]) -> C::Cu (f64::from(bases.len() as u32)).ln().ceil() as usize }; - let mut multi_buckets: Vec>> = - vec![vec![Bucket::None; (1 << c) - 1]; (256 / c) + 1]; - + let mut multi_buckets: Vec> = vec![Buckets::new(c); (256 / c) + 1]; let num_threads = multicore::current_num_threads(); if coeffs.len() > num_threads { multi_buckets @@ -126,24 +158,7 @@ pub fn best_multiexp(coeffs: &[C::Scalar], bases: &[C]) -> C::Cu .enumerate() .rev() .map(|(i, buckets)| { - // get segmentation and add coeff to buckets content - for (coeff, base) in coeffs.iter().zip(bases.iter()) { - let seg = get_at::(i, c, &coeff.to_repr()); - if seg != 0 { - buckets[seg - 1].add_assign(base); - } - } - - // Summation by parts - // e.g. 3a + 2b + 1c = a + - // (a) + b + - // ((a) + b) + c - let mut acc = C::Curve::identity(); - let mut sum = C::Curve::identity(); - buckets.iter().rev().for_each(|b| { - sum = b.add(sum); - acc += sum; - }); + let mut acc = buckets.sum(coeffs, bases, i); (0..c * i).for_each(|_| acc = acc.double()); acc }) @@ -153,27 +168,7 @@ pub fn best_multiexp(coeffs: &[C::Scalar], bases: &[C]) -> C::Cu .iter_mut() .enumerate() .rev() - .map(|(i, buckets)| { - // get segmentation and add coeff to buckets content - for (coeff, base) in coeffs.iter().zip(bases.iter()) { - let seg = get_at::(i, c, &coeff.to_repr()); - if seg != 0 { - buckets[seg - 1].add_assign(base); - } - } - - // Summation by parts - // e.g. 3a + 2b + 1c = a + - // (a) + b + - // ((a) + b) + c - let mut acc = C::Curve::identity(); - let mut sum = C::Curve::identity(); - buckets.iter().rev().for_each(|b| { - sum = b.add(sum); - acc += sum; - }); - acc - }) + .map(|(i, buckets)| buckets.sum(coeffs, bases, i)) .fold(C::Curve::identity(), |mut sum, bucket| { // restore original evaluation point (0..c).for_each(|_| sum = sum.double());