#include <eccvm_flavor.hpp>

Classes
class	AllEntities
	A base class labelling all entities (for instance, all of the polynomials used by the prover during sumcheck) in this Honk variant along with particular subsets of interest. More...

class	AllValues
	A field element for each entity of the flavor. These entities represent the prover polynomials evaluated at one point. More...

class	CommitmentLabels
	A container for commitment labels. More...

struct	DerivedWitnessEntities
	Container for all derived witness polynomials used/constructed by the prover. More...

class	IPATranscript
	Derived class that defines proof structure for ECCVM IPA proof, as well as supporting functions. More...

class	MaskingEntities
	Container for ZK entities (gemini masking polynomial for ZK-PCS) More...

class	PrecomputedEntities
	A base class labelling precomputed entities and (ordered) subsets of interest. More...

class	ProverPolynomials
	A container for the prover polynomials. More...

class	ProvingKey
	The proving key is responsible for storing the polynomials used by the prover. More...

class	ShiftedEntities
	Represents polynomials shifted by 1 or their evaluations, defined relative to WitnessEntities. More...

class	VerifierCommitments_

class	WireNonShiftedEntities

class	WireToBeShiftedAccumulatorEntities
	Containter for transcript accumulators, they stand out as the only to-be-shifted wires that are always populated until the dyadic size of the circuit. More...

class	WireToBeShiftedWithoutAccumulatorsEntities
	Container for all to-be-shifted witness polynomials excluding the accumulators used/constructed by the prover. More...

class	WitnessEntities
	Container for all witness polynomials used/constructed by the prover. More...

Public Types
using	CircuitBuilder = ECCVMCircuitBuilder

using	CycleGroup = bb::g1

using	Curve = curve::Grumpkin

using	G1 = typename Curve::Group

using	FF = typename Curve::ScalarField

using	BF = typename Curve::BaseField

using	Polynomial = bb::Polynomial< FF >

using	GroupElement = typename G1::element

using	Commitment = typename G1::affine_element

using	CommitmentKey = bb::CommitmentKey< Curve >

using	VerifierCommitmentKey = bb::VerifierCommitmentKey< Curve >

using	MSM = bb::eccvm::MSM< CycleGroup >

using	Codec = FrCodec

using	HashFunction = crypto::Poseidon2< crypto::Poseidon2Bn254ScalarFieldParams >

using	Transcript = BaseTranscript< Codec, HashFunction >

using	Proof = HonkProof

using	GrandProductRelations = std::tuple< ECCVMSetRelation< FF > >

template<typename FF >
using	Relations_ = std::tuple< ECCVMTranscriptRelation< FF >, ECCVMPointTableRelation< FF >, ECCVMWnafRelation< FF >, ECCVMMSMRelation< FF >, ECCVMSetRelation< FF >, ECCVMLookupRelation< FF >, ECCVMBoolsRelation< FF > >

using	Relations = Relations_< FF >

using	LookupRelation = ECCVMLookupRelation< FF >

using	SubrelationSeparators = std::array< FF, NUM_SUBRELATIONS - 1 >

template<size_t LENGTH>
using	ProverUnivariates = AllEntities< bb::Univariate< FF, LENGTH > >
	A container for univariates used during sumcheck.

using	ExtendedEdges = ProverUnivariates< MAX_PARTIAL_RELATION_LENGTH >
	A container for univariates produced during the hot loop in sumcheck.

using	PartiallyEvaluatedMultivariates = PartiallyEvaluatedMultivariatesBase< AllEntities< Polynomial >, ProverPolynomials, Polynomial >
	A container for storing the partially evaluated multivariates produced by sumcheck.

using	VerificationKey = FixedVKAndHash_< PrecomputedEntities< Commitment >, BF, ECCVMHardcodedVKAndHash >
	The verification key stores commitments to the precomputed polynomials used by the verifier.

using	VerifierCommitments = VerifierCommitments_< Commitment, VerificationKey >

Static Public Member Functions
template<typename DataType , typename PrecomputedAndWitnessEntitiesSuperset >
static auto	get_to_be_shifted (PrecomputedAndWitnessEntitiesSuperset &entities)

template<typename ProverPolynomialsOrPartiallyEvaluatedMultivariates , typename EdgeType >
static bool	skip_entire_row (const ProverPolynomialsOrPartiallyEvaluatedMultivariates &polynomials, const EdgeType edge_idx)
	When evaluating the sumcheck protocol - can we skip evaluation of all relations for a given row? This is purely a prover-side optimization.

Static Public Attributes
static constexpr bool	USE_SHORT_MONOMIALS = false

static constexpr bool	HasZK = true

static constexpr bool	USE_PADDING = false

static constexpr size_t	ECCVM_FIXED_SIZE = 1UL << CONST_ECCVM_LOG_N

static constexpr size_t	NUM_WIRES = 85

static constexpr size_t	NUM_MASKING_POLYNOMIALS = 1

static constexpr size_t	NUM_ALL_ENTITIES = 118

static constexpr size_t	NUM_PRECOMPUTED_ENTITIES = 4

static constexpr size_t	NUM_WITNESS_ENTITIES = 87

static constexpr size_t	NUM_SHIFTED_ENTITIES = 26

static constexpr size_t	NUM_DERIVED_WITNESS_ENTITIES_NON_SHIFTED = 1

static constexpr RepeatedCommitmentsData	REPEATED_COMMITMENTS

static constexpr size_t	NUM_SUBRELATIONS = compute_number_of_subrelations<Relations>()

static constexpr size_t	MAX_PARTIAL_RELATION_LENGTH = compute_max_partial_relation_length<Relations>()

static constexpr size_t	BATCHED_RELATION_PARTIAL_LENGTH = MAX_PARTIAL_RELATION_LENGTH + 2

static constexpr size_t	NUM_RELATIONS = std::tuple_size<Relations>::value

static constexpr size_t	num_frs_comm = FrCodec::calc_num_fields<Commitment>()

static constexpr size_t	num_frs_fq = FrCodec::calc_num_fields<FF>()

static constexpr size_t	PROOF_LENGTH_WITHOUT_PUB_INPUTS

static constexpr size_t	NUM_TRANSLATION_OPENING_CLAIMS = NUM_SMALL_IPA_EVALUATIONS + 1

Detailed Description

Definition at line 36 of file eccvm_flavor.hpp.

Member Typedef Documentation

◆ BF

using bb::ECCVMFlavor::BF = typename Curve::BaseField

Definition at line 43 of file eccvm_flavor.hpp.

◆ CircuitBuilder

using bb::ECCVMFlavor::CircuitBuilder = ECCVMCircuitBuilder

Definition at line 38 of file eccvm_flavor.hpp.

◆ Codec

using bb::ECCVMFlavor::Codec = FrCodec

Definition at line 50 of file eccvm_flavor.hpp.

◆ Commitment

using bb::ECCVMFlavor::Commitment = typename G1::affine_element

Definition at line 46 of file eccvm_flavor.hpp.

◆ CommitmentKey

using bb::ECCVMFlavor::CommitmentKey = bb::CommitmentKey<Curve>

Definition at line 47 of file eccvm_flavor.hpp.

◆ Curve

using bb::ECCVMFlavor::Curve = curve::Grumpkin

Definition at line 40 of file eccvm_flavor.hpp.

◆ CycleGroup

using bb::ECCVMFlavor::CycleGroup = bb::g1

Definition at line 39 of file eccvm_flavor.hpp.

◆ ExtendedEdges

using bb::ECCVMFlavor::ExtendedEdges = ProverUnivariates<MAX_PARTIAL_RELATION_LENGTH>

A container for univariates produced during the hot loop in sumcheck.

Definition at line 454 of file eccvm_flavor.hpp.

◆ FF

using bb::ECCVMFlavor::FF = typename Curve::ScalarField

Definition at line 42 of file eccvm_flavor.hpp.

◆ G1

using bb::ECCVMFlavor::G1 = typename Curve::Group

Definition at line 41 of file eccvm_flavor.hpp.

◆ GrandProductRelations

using bb::ECCVMFlavor::GrandProductRelations = std::tuple<ECCVMSetRelation<FF> >

Definition at line 95 of file eccvm_flavor.hpp.

◆ GroupElement

using bb::ECCVMFlavor::GroupElement = typename G1::element

Definition at line 45 of file eccvm_flavor.hpp.

◆ HashFunction

using bb::ECCVMFlavor::HashFunction = crypto::Poseidon2<crypto::Poseidon2Bn254ScalarFieldParams>

Definition at line 51 of file eccvm_flavor.hpp.

◆ LookupRelation

using bb::ECCVMFlavor::LookupRelation = ECCVMLookupRelation<FF>

Definition at line 106 of file eccvm_flavor.hpp.

◆ MSM

using bb::ECCVMFlavor::MSM = bb::eccvm::MSM<CycleGroup>

Definition at line 49 of file eccvm_flavor.hpp.

◆ PartiallyEvaluatedMultivariates

using bb::ECCVMFlavor::PartiallyEvaluatedMultivariates = PartiallyEvaluatedMultivariatesBase<AllEntities<Polynomial>, ProverPolynomials, Polynomial>

A container for storing the partially evaluated multivariates produced by sumcheck.

Definition at line 769 of file eccvm_flavor.hpp.

◆ Polynomial

using bb::ECCVMFlavor::Polynomial = bb::Polynomial<FF>

Definition at line 44 of file eccvm_flavor.hpp.

◆ Proof

using bb::ECCVMFlavor::Proof = HonkProof

Definition at line 53 of file eccvm_flavor.hpp.

◆ ProverUnivariates

template<size_t LENGTH>

using bb::ECCVMFlavor::ProverUnivariates = AllEntities<bb::Univariate<FF, LENGTH> >

A container for univariates used during sumcheck.

Definition at line 449 of file eccvm_flavor.hpp.

◆ Relations

using bb::ECCVMFlavor::Relations = Relations_<FF>

Definition at line 105 of file eccvm_flavor.hpp.

◆ Relations_

template<typename FF >

using bb::ECCVMFlavor::Relations_ = std::tuple<ECCVMTranscriptRelation<FF>, ECCVMPointTableRelation<FF>, ECCVMWnafRelation<FF>, ECCVMMSMRelation<FF>, ECCVMSetRelation<FF>, ECCVMLookupRelation<FF>, ECCVMBoolsRelation<FF> >

Definition at line 98 of file eccvm_flavor.hpp.

◆ SubrelationSeparators

using bb::ECCVMFlavor::SubrelationSeparators = std::array<FF, NUM_SUBRELATIONS - 1>

Definition at line 109 of file eccvm_flavor.hpp.

◆ Transcript

using bb::ECCVMFlavor::Transcript = BaseTranscript<Codec, HashFunction>

Definition at line 52 of file eccvm_flavor.hpp.

◆ VerificationKey

using bb::ECCVMFlavor::VerificationKey = FixedVKAndHash_<PrecomputedEntities<Commitment>, BF, ECCVMHardcodedVKAndHash>

The verification key stores commitments to the precomputed polynomials used by the verifier.

ECCVM has a fixed circuit size, so the VK is hardcoded in recursive verifiers.

Definition at line 798 of file eccvm_flavor.hpp.

◆ VerifierCommitmentKey

using bb::ECCVMFlavor::VerifierCommitmentKey = bb::VerifierCommitmentKey<Curve>

Definition at line 48 of file eccvm_flavor.hpp.

◆ VerifierCommitments

using bb::ECCVMFlavor::VerifierCommitments = VerifierCommitments_<Commitment, VerificationKey>

Definition at line 922 of file eccvm_flavor.hpp.

Member Function Documentation

◆ get_to_be_shifted()

template<typename DataType , typename PrecomputedAndWitnessEntitiesSuperset >

static auto bb::ECCVMFlavor::get_to_be_shifted ( PrecomputedAndWitnessEntitiesSuperset & entities )

inlinestatic

Definition at line 374 of file eccvm_flavor.hpp.

◆ skip_entire_row()

template<typename ProverPolynomialsOrPartiallyEvaluatedMultivariates , typename EdgeType >

static bool bb::ECCVMFlavor::skip_entire_row	(	const ProverPolynomialsOrPartiallyEvaluatedMultivariates &	polynomials,
		const EdgeType	edge_idx
	)

inlinestatic

When evaluating the sumcheck protocol - can we skip evaluation of all relations for a given row? This is purely a prover-side optimization.

When used in Chonk, the ECCVM has a large fixed size, which is often not fully utilized. If a row is completely empty, the values of z_perm and z_perm_shift will match, we can use this as a proxy to determine if we can skip Sumcheck::compute_univariate_with_row_skipping. In fact, here are several other conditions that need to be checked to see if we can skip the computation of all relations in the row.

Definition at line 986 of file eccvm_flavor.hpp.

Member Data Documentation

◆ BATCHED_RELATION_PARTIAL_LENGTH

constexpr size_t bb::ECCVMFlavor::BATCHED_RELATION_PARTIAL_LENGTH = MAX_PARTIAL_RELATION_LENGTH + 2

staticconstexpr

Definition at line 118 of file eccvm_flavor.hpp.

◆ ECCVM_FIXED_SIZE

constexpr size_t bb::ECCVMFlavor::ECCVM_FIXED_SIZE = 1UL << CONST_ECCVM_LOG_N

staticconstexpr

Definition at line 65 of file eccvm_flavor.hpp.

◆ HasZK

constexpr bool bb::ECCVMFlavor::HasZK = true

staticconstexpr

Definition at line 59 of file eccvm_flavor.hpp.

◆ MAX_PARTIAL_RELATION_LENGTH

constexpr size_t bb::ECCVMFlavor::MAX_PARTIAL_RELATION_LENGTH = compute_max_partial_relation_length<Relations>()

staticconstexpr

Definition at line 111 of file eccvm_flavor.hpp.

◆ NUM_ALL_ENTITIES

constexpr size_t bb::ECCVMFlavor::NUM_ALL_ENTITIES = 118

staticconstexpr

Definition at line 76 of file eccvm_flavor.hpp.

◆ NUM_DERIVED_WITNESS_ENTITIES_NON_SHIFTED

constexpr size_t bb::ECCVMFlavor::NUM_DERIVED_WITNESS_ENTITIES_NON_SHIFTED = 1

staticconstexpr

Definition at line 86 of file eccvm_flavor.hpp.

◆ num_frs_comm

constexpr size_t bb::ECCVMFlavor::num_frs_comm = FrCodec::calc_num_fields<Commitment>()

staticconstexpr

Definition at line 121 of file eccvm_flavor.hpp.

◆ num_frs_fq

constexpr size_t bb::ECCVMFlavor::num_frs_fq = FrCodec::calc_num_fields<FF>()

staticconstexpr

Definition at line 122 of file eccvm_flavor.hpp.

◆ NUM_MASKING_POLYNOMIALS

constexpr size_t bb::ECCVMFlavor::NUM_MASKING_POLYNOMIALS = 1

staticconstexpr

Definition at line 70 of file eccvm_flavor.hpp.

◆ NUM_PRECOMPUTED_ENTITIES

constexpr size_t bb::ECCVMFlavor::NUM_PRECOMPUTED_ENTITIES = 4

staticconstexpr

Definition at line 79 of file eccvm_flavor.hpp.

◆ NUM_RELATIONS

constexpr size_t bb::ECCVMFlavor::NUM_RELATIONS = std::tuple_size<Relations>::value

staticconstexpr

Definition at line 119 of file eccvm_flavor.hpp.

◆ NUM_SHIFTED_ENTITIES

constexpr size_t bb::ECCVMFlavor::NUM_SHIFTED_ENTITIES = 26

staticconstexpr

Definition at line 84 of file eccvm_flavor.hpp.

◆ NUM_SUBRELATIONS

constexpr size_t bb::ECCVMFlavor::NUM_SUBRELATIONS = compute_number_of_subrelations<Relations>()

staticconstexpr

Definition at line 108 of file eccvm_flavor.hpp.

◆ NUM_TRANSLATION_OPENING_CLAIMS

constexpr size_t bb::ECCVMFlavor::NUM_TRANSLATION_OPENING_CLAIMS = NUM_SMALL_IPA_EVALUATIONS + 1

staticconstexpr

Definition at line 161 of file eccvm_flavor.hpp.

◆ NUM_WIRES

constexpr size_t bb::ECCVMFlavor::NUM_WIRES = 85

staticconstexpr

Definition at line 67 of file eccvm_flavor.hpp.

◆ NUM_WITNESS_ENTITIES

constexpr size_t bb::ECCVMFlavor::NUM_WITNESS_ENTITIES = 87

staticconstexpr

Definition at line 82 of file eccvm_flavor.hpp.

◆ PROOF_LENGTH_WITHOUT_PUB_INPUTS

constexpr size_t bb::ECCVMFlavor::PROOF_LENGTH_WITHOUT_PUB_INPUTS

staticconstexpr

Definition at line 125 of file eccvm_flavor.hpp.

◆ REPEATED_COMMITMENTS

constexpr RepeatedCommitmentsData bb::ECCVMFlavor::REPEATED_COMMITMENTS

staticconstexpr

Initial value:

=
        RepeatedCommitmentsData(NUM_PRECOMPUTED_ENTITIES + NUM_WITNESS_ENTITIES -
                                    NUM_DERIVED_WITNESS_ENTITIES_NON_SHIFTED - NUM_SHIFTED_ENTITIES,
                                NUM_PRECOMPUTED_ENTITIES + NUM_WITNESS_ENTITIES,
                                NUM_SHIFTED_ENTITIES)

Definition at line 89 of file eccvm_flavor.hpp.

◆ USE_PADDING

constexpr bool bb::ECCVMFlavor::USE_PADDING = false

staticconstexpr

Definition at line 61 of file eccvm_flavor.hpp.

◆ USE_SHORT_MONOMIALS

constexpr bool bb::ECCVMFlavor::USE_SHORT_MONOMIALS = false

staticconstexpr

Definition at line 56 of file eccvm_flavor.hpp.

The documentation for this class was generated from the following file:

src/barretenberg/eccvm/eccvm_flavor.hpp

Classes

Public Types

Static Public Member Functions

Static Public Attributes

Detailed Description

Member Typedef Documentation

◆ BF

◆ CircuitBuilder

◆ Codec

◆ Commitment

◆ CommitmentKey

◆ Curve

◆ CycleGroup

◆ ExtendedEdges

◆ FF

◆ G1

◆ GrandProductRelations

◆ GroupElement

◆ HashFunction

◆ LookupRelation

◆ MSM

◆ PartiallyEvaluatedMultivariates

◆ Polynomial

◆ Proof

◆ ProverUnivariates

◆ Relations

◆ Relations_

◆ SubrelationSeparators

◆ Transcript

◆ VerificationKey

◆ VerifierCommitmentKey

◆ VerifierCommitments

Member Function Documentation

◆ get_to_be_shifted()

◆ skip_entire_row()

Member Data Documentation

◆ BATCHED_RELATION_PARTIAL_LENGTH

◆ ECCVM_FIXED_SIZE

◆ HasZK

◆ MAX_PARTIAL_RELATION_LENGTH

◆ NUM_ALL_ENTITIES

◆ NUM_DERIVED_WITNESS_ENTITIES_NON_SHIFTED

◆ num_frs_comm

◆ num_frs_fq

◆ NUM_MASKING_POLYNOMIALS

◆ NUM_PRECOMPUTED_ENTITIES

◆ NUM_RELATIONS

◆ NUM_SHIFTED_ENTITIES

◆ NUM_SUBRELATIONS

◆ NUM_TRANSLATION_OPENING_CLAIMS

◆ NUM_WIRES

◆ NUM_WITNESS_ENTITIES

◆ PROOF_LENGTH_WITHOUT_PUB_INPUTS

◆ REPEATED_COMMITMENTS

◆ USE_PADDING

◆ USE_SHORT_MONOMIALS