hekate-aes 0.1.1

AES-128 / AES-256 AIR chiplet for the Hekate ZK proving system.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

# hekate-aes

[![Crates.io](https://img.shields.io/crates/v/hekate-aes.svg)](https://crates.io/crates/hekate-aes)
[![Docs.rs](https://docs.rs/hekate-aes/badge.svg)](https://docs.rs/hekate-aes)
[![CI](https://github.com/oumuamua-labs/hekate-aes/actions/workflows/ci.yml/badge.svg)](https://github.com/oumuamua-labs/hekate-aes/actions/workflows/ci.yml)
[![License: Apache 2.0](https://img.shields.io/badge/License-Apache2-yellow.svg)](./LICENSE)

AES-128 / AES-256 AIR chiplet for the [Hekate](https://github.com/oumuamua-labs/hekate) ZK proving system.

Implements FIPS 197 round function (SubBytes, ShiftRows, MixColumns, AddRoundKey) as a binary-field AIR with an
S-box ROM chiplet for the GF(2^8) inversion. Round-AIR trace is wired to the CPU AIR via LogUp bus.

```
Per-block proving cost (Apple M3 Max, 31,250 blocks per run):
  AES-128: ~69 µs/block, 772 MB peak, 3,405 KiB proof
  AES-256: ~73 µs/block, 1,005 MB peak, 3,706 KiB proof
```

## Examples

- [AES-128 / AES-256 proving and verification](https://github.com/oumuamua-labs/hekate/blob/main/hekate/examples/aes.rs)

## Security & Audits

> [!WARNING]
> This implementation is currently UNAUDITED.
>
> It is provided "AS IS" with ABSOLUTELY NO WARRANTY under the terms
> of the Apache 2.0 License. The authors assume zero liability for
> any damages arising from its use in production environments.

## License

Apache-2.0. See [LICENSE](LICENSE) and [NOTICE](NOTICE).