curdleproofs 0.0.1

An implementation of the Curdleproofs shuffle zero-knowledge argument
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126

#![allow(non_snake_case)]
#![allow(unused_assignments)]

use ark_bls12_381::Fr;
use ark_bls12_381::G1Affine;
use ark_bls12_381::G1Projective;
use ark_ec::AffineCurve;
use ark_ec::ProjectiveCurve;
use ark_ff::fields::PrimeField;
use ark_std::rand::prelude::SliceRandom;
use ark_std::rand::{rngs::StdRng, SeedableRng};
use ark_std::UniformRand;
use core::iter;
use core::time::Duration;
use criterion::*;

use curdleproofs::curdleproofs::{generate_crs, CurdleproofsProof};
use curdleproofs::util::{generate_blinders, get_permutation, msm};

fn apply_permutation_group(vec_a: Vec<G1Affine>, permutation: &Vec<u32>) -> Vec<G1Affine> {
    permutation
        .into_iter()
        .map(|i| vec_a[*i as usize])
        .collect()
}

fn benchmark_shuffle(c: &mut Criterion) {
    let mut rng = StdRng::seed_from_u64(0u64);

    let N = 512;
    let N_BLINDERS = 4;
    let ell = N - N_BLINDERS;

    // Construct the CRS
    let crs = generate_crs(ell);

    // Get witnesses: the permutation, the randomizer, and a bunch of blinders
    let mut permutation: Vec<u32> = (0..ell as u32).collect();
    permutation.shuffle(&mut rng);
    let k = Fr::rand(&mut rng);
    let vec_r_m = generate_blinders(&mut rng, N_BLINDERS);

    // Get shuffle inputs
    let vec_R: Vec<G1Affine> = iter::repeat_with(|| G1Projective::rand(&mut rng).into_affine())
        .take(ell)
        .collect();
    let vec_S: Vec<G1Affine> = iter::repeat_with(|| G1Projective::rand(&mut rng).into_affine())
        .take(ell)
        .collect();

    // Derive shuffled outputs
    c.bench_function("shuffling", |b| {
        b.iter(|| {
            let mut vec_T: Vec<G1Affine> = vec_R
                .iter()
                .map(|R| R.mul(k.into_repr()).into_affine())
                .collect();
            let mut vec_U: Vec<G1Affine> = vec_S
                .iter()
                .map(|S| S.mul(k.into_repr()).into_affine())
                .collect();
            vec_T = apply_permutation_group(vec_T, &permutation);
            vec_U = apply_permutation_group(vec_U, &permutation);
        })
    });

    let mut vec_T: Vec<G1Affine> = vec_R
        .iter()
        .map(|R| R.mul(k.into_repr()).into_affine())
        .collect();
    let mut vec_U: Vec<G1Affine> = vec_S
        .iter()
        .map(|S| S.mul(k.into_repr()).into_affine())
        .collect();
    vec_T = apply_permutation_group(vec_T, &permutation);
    vec_U = apply_permutation_group(vec_U, &permutation);

    let range_as_fr: Vec<Fr> = (0..ell as u32).into_iter().map(|s| Fr::from(s)).collect();
    let sigma_ell = get_permutation(&range_as_fr, &permutation);
    let M = msm(&crs.vec_G, &sigma_ell) + msm(&crs.vec_H, &vec_r_m);

    c.bench_function("prover", |b| {
        b.iter(|| {
            CurdleproofsProof::new(
                &crs,
                vec_R.clone(),
                vec_S.clone(),
                vec_T.clone(),
                vec_U.clone(),
                M,
                permutation.clone(),
                k,
                vec_r_m.clone(),
                &mut rng,
            );
        })
    });

    let shuffle_proof = CurdleproofsProof::new(
        &crs,
        vec_R.clone(),
        vec_S.clone(),
        vec_T.clone(),
        vec_U.clone(),
        M,
        permutation,
        k,
        vec_r_m,
        &mut rng,
    );

    c.bench_function("verifier", |b| {
        b.iter(|| {
            assert!(shuffle_proof
                .verify(&crs, &vec_R, &vec_S, &vec_T, &vec_U, &M, &mut rng)
                .is_ok());
        })
    });
}

criterion_group! {name = shuffle;
                 config = Criterion::default().measurement_time(Duration::from_secs(60));
                 targets = benchmark_shuffle
}

criterion_main!(shuffle);