Skip to main content

alloy_eips/eip4844/
mod.rs

1//! [EIP-4844] constants and helpers.
2//!
3//! [EIP-4844]: https://eips.ethereum.org/EIPS/eip-4844
4
5/// Re-export the `c_kzg` crate for downstream consumers.
6#[cfg(feature = "kzg")]
7pub use c_kzg;
8
9/// Module houses the KZG settings, enabling Custom and Default
10#[cfg(feature = "kzg")]
11pub mod env_settings;
12/// This module contains functions and types used for parsing and utilizing the [Trusted Setup]( https://ceremony.ethereum.org/) for the `KzgSettings`.
13#[cfg(feature = "kzg")]
14pub mod trusted_setup_points;
15
16/// Builder and utils for the [EIP-4844 Blob Transaction](https://eips.ethereum.org/EIPS/eip-4844#blob-transaction)
17pub mod builder;
18pub mod utils;
19
20mod engine;
21pub use engine::*;
22
23/// Contains sidecar related types
24#[cfg(feature = "kzg-sidecar")]
25mod sidecar;
26#[cfg(feature = "kzg-sidecar")]
27pub use sidecar::*;
28
29use alloy_primitives::{b256, Bytes, FixedBytes, B256, U256};
30
31use crate::eip7840;
32
33/// The modulus of the BLS group used in the KZG commitment scheme. All field
34/// elements contained in a blob MUST be STRICTLY LESS than this value.
35pub const BLS_MODULUS_BYTES: B256 =
36    b256!("73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001");
37
38/// The modulus of the BLS group used in the KZG commitment scheme. All field
39/// elements contained in a blob MUST be STRICTLY LESS than this value.
40pub const BLS_MODULUS: U256 = U256::from_be_bytes(BLS_MODULUS_BYTES.0);
41
42/// Size a single field element in bytes.
43pub const FIELD_ELEMENT_BYTES: u64 = 32;
44
45/// Size a single field element in bytes.
46pub const FIELD_ELEMENT_BYTES_USIZE: usize = FIELD_ELEMENT_BYTES as usize;
47
48/// How many field elements are stored in a single data blob.
49pub const FIELD_ELEMENTS_PER_BLOB: u64 = 4096;
50
51/// Number of usable bits in a field element. The top two bits are always zero.
52pub const USABLE_BITS_PER_FIELD_ELEMENT: usize = 254;
53
54/// The number of usable bytes in a single data blob. This is the number of
55/// bytes you can encode in a blob without any field element being >=
56/// [`BLS_MODULUS`].
57pub const USABLE_BYTES_PER_BLOB: usize =
58    USABLE_BITS_PER_FIELD_ELEMENT * FIELD_ELEMENTS_PER_BLOB as usize / 8;
59
60/// Gas consumption of a single data blob.
61pub const DATA_GAS_PER_BLOB: u64 = 131_072u64; // 32*4096 = 131072 == 2^17 == 0x20000
62
63/// How many bytes are in a blob
64/// Same as [DATA_GAS_PER_BLOB], but as an usize
65pub const BYTES_PER_BLOB: usize = 131_072;
66
67/// Maximum data gas for data blobs in a single block.
68pub const MAX_DATA_GAS_PER_BLOCK_DENCUN: u64 = 786_432u64; // 0xC0000 = 6 * 0x20000
69
70/// Target data gas for data blobs in a single block.
71pub const TARGET_DATA_GAS_PER_BLOCK_DENCUN: u64 = 393_216u64; // 0x60000 = 3 * 0x20000
72
73/// Maximum number of data blobs in a single block.
74pub const MAX_BLOBS_PER_BLOCK_DENCUN: usize =
75    (MAX_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) as usize; // 786432 / 131072  = 6
76
77/// Target number of data blobs in a single block.
78pub const TARGET_BLOBS_PER_BLOCK_DENCUN: u64 = TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB; // 393216 / 131072 = 3
79
80/// Determines the maximum rate of change for blob fee
81pub const BLOB_GASPRICE_UPDATE_FRACTION: u128 = 3_338_477u128; // 3338477
82
83/// Minimum gas price for a data blob
84pub const BLOB_TX_MIN_BLOB_GASPRICE: u128 = 1u128;
85
86/// Commitment version of a KZG commitment
87pub const VERSIONED_HASH_VERSION_KZG: u8 = 0x01;
88
89/// How many bytes are in a commitment
90pub const BYTES_PER_COMMITMENT: usize = 48;
91
92/// How many bytes are in a proof
93pub const BYTES_PER_PROOF: usize = 48;
94
95/// A Blob serialized as 0x-prefixed hex string
96pub type Blob = FixedBytes<BYTES_PER_BLOB>;
97
98/// Helper function to deserialize boxed blobs.
99#[cfg(feature = "serde")]
100pub fn deserialize_blob<'de, D>(deserializer: D) -> Result<alloc::boxed::Box<Blob>, D::Error>
101where
102    D: serde::de::Deserializer<'de>,
103{
104    use serde::Deserialize;
105    let raw_blob = <alloy_primitives::Bytes>::deserialize(deserializer)?;
106    let blob = alloc::boxed::Box::new(
107        Blob::try_from(raw_blob.as_ref()).map_err(serde::de::Error::custom)?,
108    );
109    Ok(blob)
110}
111
112/// Helper function to deserialize boxed blobs from a serde deserializer.
113#[cfg(all(debug_assertions, feature = "serde"))]
114pub fn deserialize_blobs<'de, D>(deserializer: D) -> Result<alloc::vec::Vec<Blob>, D::Error>
115where
116    D: serde::de::Deserializer<'de>,
117{
118    use alloc::vec::Vec;
119    use serde::Deserialize;
120
121    let raw_blobs = Vec::<alloy_primitives::Bytes>::deserialize(deserializer)?;
122    let mut blobs = Vec::with_capacity(raw_blobs.len());
123    for blob in raw_blobs {
124        blobs.push(Blob::try_from(blob.as_ref()).map_err(serde::de::Error::custom)?);
125    }
126    Ok(blobs)
127}
128
129#[cfg(all(not(debug_assertions), feature = "serde"))]
130#[inline(always)]
131/// Helper function to deserialize boxed blobs from a serde deserializer.
132pub fn deserialize_blobs<'de, D>(deserializer: D) -> Result<alloc::vec::Vec<Blob>, D::Error>
133where
134    D: serde::de::Deserializer<'de>,
135{
136    serde::Deserialize::deserialize(deserializer)
137}
138
139/// A heap allocated blob that serializes as 0x-prefixed hex string
140#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord, Hash, alloy_rlp::RlpEncodableWrapper)]
141pub struct HeapBlob(Bytes);
142
143impl HeapBlob {
144    /// Create a new heap blob from a byte slice.
145    pub fn new(blob: &[u8]) -> Result<Self, InvalidBlobLength> {
146        if blob.len() != BYTES_PER_BLOB {
147            return Err(InvalidBlobLength(blob.len()));
148        }
149
150        Ok(Self(Bytes::copy_from_slice(blob)))
151    }
152
153    /// Create a new heap blob from an array.
154    pub fn from_array(blob: [u8; BYTES_PER_BLOB]) -> Self {
155        Self(Bytes::from(blob))
156    }
157
158    /// Create a new heap blob from [`Bytes`].
159    pub fn from_bytes(bytes: Bytes) -> Result<Self, InvalidBlobLength> {
160        if bytes.len() != BYTES_PER_BLOB {
161            return Err(InvalidBlobLength(bytes.len()));
162        }
163
164        Ok(Self(bytes))
165    }
166
167    /// Generate a new heap blob with all bytes set to `byte`.
168    pub fn repeat_byte(byte: u8) -> Self {
169        Self(Bytes::from(vec![byte; BYTES_PER_BLOB]))
170    }
171
172    /// Get the inner
173    pub const fn inner(&self) -> &Bytes {
174        &self.0
175    }
176}
177
178impl Default for HeapBlob {
179    fn default() -> Self {
180        Self::repeat_byte(0)
181    }
182}
183
184/// Error indicating that the blob length is invalid.
185#[derive(Debug, Clone)]
186pub struct InvalidBlobLength(usize);
187impl core::fmt::Display for InvalidBlobLength {
188    fn fmt(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result {
189        write!(f, "Invalid blob length: {}, expected: {BYTES_PER_BLOB}", self.0)
190    }
191}
192impl core::error::Error for InvalidBlobLength {}
193
194#[cfg(feature = "serde")]
195impl serde::Serialize for HeapBlob {
196    fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
197    where
198        S: serde::Serializer,
199    {
200        self.inner().serialize(serializer)
201    }
202}
203
204#[cfg(any(test, feature = "arbitrary"))]
205impl<'a> arbitrary::Arbitrary<'a> for HeapBlob {
206    fn arbitrary(u: &mut arbitrary::Unstructured<'a>) -> arbitrary::Result<Self> {
207        let mut blob = vec![0u8; BYTES_PER_BLOB];
208        u.fill_buffer(&mut blob)?;
209        Ok(Self(Bytes::from(blob)))
210    }
211}
212
213#[cfg(feature = "serde")]
214impl<'de> serde::Deserialize<'de> for HeapBlob {
215    fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
216    where
217        D: serde::de::Deserializer<'de>,
218    {
219        let inner = <Bytes>::deserialize(deserializer)?;
220
221        Self::from_bytes(inner).map_err(serde::de::Error::custom)
222    }
223}
224
225impl alloy_rlp::Decodable for HeapBlob {
226    fn decode(buf: &mut &[u8]) -> alloy_rlp::Result<Self> {
227        let bytes = <Bytes>::decode(buf)?;
228
229        Self::from_bytes(bytes).map_err(|_| alloy_rlp::Error::Custom("invalid blob length"))
230    }
231}
232
233/// A commitment/proof serialized as 0x-prefixed hex string
234pub type Bytes48 = FixedBytes<48>;
235
236/// Calculates the versioned hash for a KzgCommitment of 48 bytes.
237///
238/// Specified in [EIP-4844](https://eips.ethereum.org/EIPS/eip-4844#header-extension)
239///
240/// # Panics
241///
242/// If the given commitment is not 48 bytes long.
243#[cfg(feature = "sha2")]
244pub fn kzg_to_versioned_hash(commitment: &[u8]) -> B256 {
245    use sha2::Digest;
246
247    debug_assert_eq!(commitment.len(), 48, "commitment length is not 48");
248    let mut res = sha2::Sha256::digest(commitment);
249    res[0] = VERSIONED_HASH_VERSION_KZG;
250    B256::new(res.into())
251}
252
253/// Calculates the `excess_blob_gas` from the parent header's `blob_gas_used` and `excess_blob_gas`.
254///
255/// See also [the EIP-4844 helpers](https://eips.ethereum.org/EIPS/eip-4844#helpers)
256/// (`calc_excess_blob_gas`).
257#[inline]
258pub const fn calc_excess_blob_gas(parent_excess_blob_gas: u64, parent_blob_gas_used: u64) -> u64 {
259    eip7840::BlobParams::cancun().next_block_excess_blob_gas_osaka(
260        parent_excess_blob_gas,
261        parent_blob_gas_used,
262        // base fee is not used in EIP-4844 excess blob gas calculation
263        0,
264    )
265}
266
267/// Calculates the blob gas price from the header's excess blob gas field.
268///
269/// See also [the EIP-4844 helpers](https://eips.ethereum.org/EIPS/eip-4844#helpers)
270/// (`get_blob_gasprice`).
271#[inline]
272pub const fn calc_blob_gasprice(excess_blob_gas: u64) -> u128 {
273    eip7840::BlobParams::cancun().calc_blob_fee(excess_blob_gas)
274}
275
276/// Approximates `factor * e ** (numerator / denominator)` using Taylor expansion.
277///
278/// This is used to calculate the blob price.
279///
280/// See also [the EIP-4844 helpers](https://eips.ethereum.org/EIPS/eip-4844#helpers)
281/// (`fake_exponential`).
282///
283/// # Panics
284///
285/// This function panics if `denominator` is zero.
286#[inline]
287pub const fn fake_exponential(factor: u128, numerator: u128, denominator: u128) -> u128 {
288    assert!(denominator != 0, "attempt to divide by zero");
289
290    let mut i = 1;
291    let mut output = 0;
292    let mut numerator_accum = factor * denominator;
293    while numerator_accum > 0 {
294        output += numerator_accum;
295
296        // Use checked multiplication to prevent overflow
297        let Some(val) = numerator_accum.checked_mul(numerator) else {
298            break;
299        };
300
301        // Denominator is asserted as not zero at the start of the function.
302        numerator_accum = val / (denominator * i);
303        i += 1;
304    }
305    output / denominator
306}
307
308#[cfg(test)]
309mod tests {
310    use super::*;
311
312    // https://github.com/ethereum/go-ethereum/blob/28857080d732857030eda80c69b9ba2c8926f221/consensus/misc/eip4844/eip4844_test.go#L27
313    #[test]
314    fn test_calc_excess_blob_gas() {
315        for t @ &(excess, blobs, expected) in &[
316            // The excess blob gas should not increase from zero if the used blob
317            // slots are below - or equal - to the target.
318            (0, 0, 0),
319            (0, 1, 0),
320            (0, TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB, 0),
321            // If the target blob gas is exceeded, the excessBlobGas should increase
322            // by however much it was overshot
323            (0, (TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) + 1, DATA_GAS_PER_BLOB),
324            (1, (TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) + 1, DATA_GAS_PER_BLOB + 1),
325            (
326                1,
327                (TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) + 2,
328                2 * DATA_GAS_PER_BLOB + 1,
329            ),
330            // The excess blob gas should decrease by however much the target was
331            // under-shot, capped at zero.
332            (
333                TARGET_DATA_GAS_PER_BLOCK_DENCUN,
334                TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB,
335                TARGET_DATA_GAS_PER_BLOCK_DENCUN,
336            ),
337            (
338                TARGET_DATA_GAS_PER_BLOCK_DENCUN,
339                (TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) - 1,
340                TARGET_DATA_GAS_PER_BLOCK_DENCUN - DATA_GAS_PER_BLOB,
341            ),
342            (
343                TARGET_DATA_GAS_PER_BLOCK_DENCUN,
344                (TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) - 2,
345                TARGET_DATA_GAS_PER_BLOCK_DENCUN - (2 * DATA_GAS_PER_BLOB),
346            ),
347            (DATA_GAS_PER_BLOB - 1, (TARGET_DATA_GAS_PER_BLOCK_DENCUN / DATA_GAS_PER_BLOB) - 1, 0),
348        ] {
349            let actual = calc_excess_blob_gas(excess, blobs * DATA_GAS_PER_BLOB);
350            assert_eq!(actual, expected, "test: {t:?}");
351        }
352    }
353
354    // https://github.com/ethereum/go-ethereum/blob/28857080d732857030eda80c69b9ba2c8926f221/consensus/misc/eip4844/eip4844_test.go#L60
355    #[test]
356    fn test_calc_blob_fee() {
357        let blob_fee_vectors = &[
358            (0, 1),
359            (2314057, 1),
360            (2314058, 2),
361            (10 * 1024 * 1024, 23),
362            // calc_blob_gasprice approximates `e ** (excess_blob_gas /
363            // BLOB_GASPRICE_UPDATE_FRACTION)` using Taylor expansion
364            //
365            // to roughly find where boundaries will be hit:
366            // 2 ** bits = e ** (excess_blob_gas / BLOB_GASPRICE_UPDATE_FRACTION)
367            // excess_blob_gas = ln(2 ** bits) * BLOB_GASPRICE_UPDATE_FRACTION
368            (148099578, 18446739238971471609), // output is just below the overflow
369            (148099579, 18446744762204311910), // output is just after the overflow
370            (161087488, 902580055246494526580),
371        ];
372
373        for &(excess, expected) in blob_fee_vectors {
374            let actual = calc_blob_gasprice(excess);
375            assert_eq!(actual, expected, "test: {excess}");
376        }
377    }
378
379    // https://github.com/ethereum/go-ethereum/blob/28857080d732857030eda80c69b9ba2c8926f221/consensus/misc/eip4844/eip4844_test.go#L78
380    #[test]
381    fn fake_exp() {
382        for t @ &(factor, numerator, denominator, expected) in &[
383            (1u64, 0u64, 1u64, 1u128),
384            (38493, 0, 1000, 38493),
385            (0, 1234, 2345, 0),
386            (1, 2, 1, 6), // approximate 7.389
387            (1, 4, 2, 6),
388            (1, 3, 1, 16), // approximate 20.09
389            (1, 6, 2, 18),
390            (1, 4, 1, 49), // approximate 54.60
391            (1, 8, 2, 50),
392            (10, 8, 2, 542), // approximate 540.598
393            (11, 8, 2, 596), // approximate 600.58
394            (1, 5, 1, 136),  // approximate 148.4
395            (1, 5, 2, 11),   // approximate 12.18
396            (2, 5, 2, 23),   // approximate 24.36
397            (1, 50000000, 2225652, 5709098764),
398            (1, 380928, BLOB_GASPRICE_UPDATE_FRACTION.try_into().unwrap(), 1),
399        ] {
400            let actual = fake_exponential(factor as u128, numerator as u128, denominator as u128);
401            assert_eq!(actual, expected, "test: {t:?}");
402        }
403    }
404
405    #[test]
406    #[cfg(feature = "serde")]
407    fn serde_heap_blob() {
408        let blob = HeapBlob::repeat_byte(0x42);
409        let serialized = serde_json::to_string(&blob).unwrap();
410
411        let deserialized: HeapBlob = serde_json::from_str(&serialized).unwrap();
412        assert_eq!(blob, deserialized);
413    }
414
415    #[test]
416    fn fake_exp_handles_overflow() {
417        // Test with very large excess blob gas values that would cause overflow
418        let factor = 1u128; // BLOB_TX_MIN_BLOB_GASPRICE
419        let numerator = u64::MAX as u128; // Very large excess blob gas
420        let denominator = 5007716u128; // BLOB_GASPRICE_UPDATE_FRACTION_PECTRA
421
422        // This should not panic even with very large inputs
423        let result = fake_exponential(factor, numerator, denominator);
424
425        // The result should be a valid value (not panic)
426        assert!(result > 0);
427
428        // Test with Prague parameters
429        let prague_params = crate::eip7840::BlobParams::prague();
430        // This should also not panic when excess_blob_gas is very large
431        let _blob_fee = prague_params.calc_blob_fee(u64::MAX);
432    }
433}