Commit Graph

353 Commits

Author SHA1 Message Date
Sean Bowe cc6b0bb7f2
Rename blind to \xi for consistency. 2021-01-13 15:24:44 -07:00
Sean Bowe 47d021ceb3
Add reference to issue in TODO comment. 2021-01-13 08:41:14 -07:00
Daira Hopwood adf1c2f451
Merge pull request #113 from zcash/avoid-square-challenges
Avoid square challenges in inner product argument
2021-01-13 12:14:36 +00:00
Sean Bowe e1a772d6e1
Remove transcript forking API. 2021-01-12 07:40:31 -07:00
Sean Bowe f308eb969c
Remove deterministic square root calculation as it's no longer needed. 2021-01-12 07:40:26 -07:00
Sean Bowe 98c1d80c90
Avoid square challenges and forking in inner product argument
This modifies the scheme to be almost identical to the construction
outlined in Appenix A.2 of "Proof-Carrying Data from Accumulation
Schemes" (https://eprint.iacr.org/2020/499). The only remaining
difference is that we do not compute [v] U but instead subtract
[v] G_0 from the commitment before opening.
2021-01-12 07:40:20 -07:00
Sean Bowe c8dedf2ec3
Fix challenge multiplications as per #119. 2021-01-06 10:47:06 -07:00
Sean Bowe c5e0364962
Remove the Read/Write type parameters from Transcript{Read,Write}. 2021-01-06 10:45:11 -07:00
Sean Bowe dff5a3a692
Generate the URS using a homebrew mixture of blake2b and try-and-increment. 2021-01-06 10:45:11 -07:00
Sean Bowe a2999accb5
Rename DummyHash{Reader,Writer} to DummyHash{Read,Write}. 2021-01-06 10:45:11 -07:00
Sean Bowe 7ffd28a1b5
Remove unnecessary separate msm from commitment::verify_proof. 2021-01-06 10:45:11 -07:00
Sean Bowe 4ecbfb548e
Remove unnecessary lifetimes. 2021-01-06 10:45:11 -07:00
Sean Bowe 06552eec44
Update the PLONK implementation to adapt to the new transcript API. 2021-01-06 10:45:11 -07:00
Sean Bowe 5be7d9525d
Update multiopen APIs to reflect changes made to Transcript APIs 2021-01-06 10:45:10 -07:00
Sean Bowe d30c6b62e4
Modification of the polynomial commitment scheme to compensate for Transcript API changes. 2021-01-06 10:40:26 -07:00
Sean Bowe fb232ddec0
Change API for dealing with transcripts to integrate proof reading/writing. 2021-01-06 10:39:11 -07:00
str4d fb37172ffa
Merge pull request #119 from zcash/fix-rust-breakage
Fix breakage of trait resolution in Rust 1.49.0
2021-01-07 04:15:00 +13:00
ying tong 0ed37a937f
Merge pull request #122 from zcash/book-patch-compression
[book] Fix compression table formatting
2021-01-06 20:41:42 +08:00
therealyingtong 1a3fccd71b [book] Fix compression table formatting 2021-01-06 20:41:13 +08:00
ying tong b0fc9a0b37
Merge pull request #121 from zcash/book-sha256-compression
[book] Add compression region to table16.md
2021-01-06 20:31:11 +08:00
therealyingtong 38c78b8c50 [book] Add compression region to table16.md 2021-01-06 20:30:28 +08:00
Jack Grigg ac75aac455 CI: Set toolchain for book tests 2021-01-06 00:48:29 +00:00
Jack Grigg f49e1e6177 Fix breakage of trait resolution in Rust 1.49.0
Previously, `ChallengeScalar` could use the operator traits defined on
the `F: Field` type it wrapped, due to its `impl Deref<Target = F>`.
This was technically ambiguous, and Rust 1.49.0 makes that ambiguity an
error.

We could fix this by adding operator impls with `ChallengeScalar` on the
RHS, but that would conflict with zcash/halo2#111. Instead we manually
dereference every challenge scalar when used in an arithmetic operation.
2021-01-06 00:48:29 +00:00
ying tong 26346adb9b
Merge pull request #118 from zcash/book-patch-sha256-4
[book] table16.md: Add sb1 selector
2021-01-04 23:57:01 +08:00
therealyingtong 29738d4214 Add sb1 selector 2020-12-28 22:57:50 +08:00
ying tong 71c26f0497
Merge pull request #115 from zcash/book-patch-sha256-3
[book] sha-256: Standardise notation and add sb selector to check subpieces
2020-12-28 15:11:43 +08:00
therealyingtong 50e6920ed7 Standardise notation and add sb column to check subpieces 2020-12-28 14:57:33 +08:00
Daira Hopwood a4c874ed24
Merge pull request #114 from daira/book-concepts
[book] Write Concepts section
2020-12-26 15:46:20 +00:00
Daira Hopwood e932352390 Rename 'Background' to 'Proof systems' and add a note about intermediate values.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2020-12-26 15:45:15 +00:00
Daira Hopwood fcb176aeb1 Apply suggestions from code review
Minor fixes.
2020-12-26 15:33:59 +00:00
Daira Hopwood f23677cea9 [book] Write Concepts section.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2020-12-26 15:33:59 +00:00
Daira Hopwood 591ab49266 Add book/Makefile for local HTML generation.
This is mainly useful for syntax checking rather than to produce good-quality output.
It assumes that pandoc is installed.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2020-12-26 15:33:59 +00:00
ying tong 659655a4de
Merge pull request #112 from zcash/book-patch-sha256-2
(cont.) Patch message scheduling table
2020-12-24 20:37:40 +08:00
therealyingtong 2c3cda4b01 (cont.) Patch message scheduling table 2020-12-24 20:36:03 +08:00
str4d d47c83febf
Merge pull request #109 from zcash/fix-book-tests
book: Fix book tests by adding missing definitions to SHA-256 page
2020-12-23 17:41:08 +00:00
ebfull d34e82f31c
Merge pull request #106 from zcash/refactor-permutation-argument
Refactor permutation proofs to reflect the separate permutations
2020-12-23 09:41:24 -07:00
Jack Grigg a4029222fd book: Fix book tests by adding missing definitions to SHA-256 page 2020-12-23 16:13:44 +00:00
ying tong 2fe7daa6f4
Merge pull request #108 from zcash/book-patch-sha256
[book] Patch message scheduling table
2020-12-23 21:21:13 +08:00
therealyingtong a14c538b55 Update message scheduling table 2020-12-23 21:19:42 +08:00
ying tong d7abe3ca00
Merge pull request #98 from zcash/book-sha256
[book] Add sha256 spec
2020-12-23 13:35:37 +08:00
therealyingtong 00cb254141 Inline sigma_0 v1 in message scheduling region 2020-12-23 13:33:33 +08:00
str4d 935e806821
Merge pull request #107 from zcash/book-reorg
book: Move multipoint argument into design section
2020-12-23 03:32:44 +00:00
Jack Grigg 8f8a8e0772 book: Move multipoint argument into design section 2020-12-23 03:26:45 +00:00
Jack Grigg d5bae060f3 book: Zero-index message schedule in the giant table 2020-12-23 03:09:26 +00:00
Jack Grigg 7fabdc1fe4 book: Mark diagram as plaintext so it doesn't get tested 2020-12-23 02:54:35 +00:00
Jack Grigg 0a9c130276 book: Fix table formatting 2020-12-23 02:51:43 +00:00
Jack Grigg 7d37ff370b book: Fix internal links in Table16 chip 2020-12-23 02:46:28 +00:00
Jack Grigg 8cf0cdeda3 book: Update TOC entry for SHA-256 chip 2020-12-23 02:44:33 +00:00
Jack Grigg 00b33bd48e book: Rework documentation of modular addition for SHA-256 chip 2020-12-23 02:42:53 +00:00
Jack Grigg 151adc83dd book: Document SHA-256 chip instructions and gadget interface 2020-12-23 02:42:27 +00:00