legogroth16 0.6.0

An implementation of the LegoGroth16, the Legosnark variant of Groth16 zkSNARK proof system
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

use ark_ec::pairing::{Pairing, PairingOutput};
use ark_serialize::{CanonicalDeserialize, CanonicalSerialize};
use ark_std::{cfg_iter, fmt::Debug, vec::Vec};

#[cfg(feature = "parallel")]
use rayon::prelude::*;

use crate::aggregation::error::AggregationError;
use crate::aggregation::key::{PreparedVKey, WKey};

/// Commits to either a single vector of group G1 elements or 2 vectors, 1 of group G1 and 1 of group G2 elements.
/// Both commitment outputs a pair of $F_q^k$ element.
#[derive(CanonicalSerialize, CanonicalDeserialize, Clone, Debug, PartialEq)]
pub struct PairCommitment<E: Pairing> {
    pub t: PairingOutput<E>,
    pub u: PairingOutput<E>,
}

impl<E: Pairing> PairCommitment<E> {
    /// Commits to a single vector of group G1 elements.
    pub fn single(
        vkey: impl Into<PreparedVKey<E>>,
        a_vec: &[E::G1Affine],
    ) -> Result<Self, AggregationError> {
        let vkey = vkey.into();
        vkey.ensure_sufficient_len(a_vec)?;
        let PreparedVKey { a, b } = vkey;
        let t = E::multi_pairing(a_vec, a);
        let u = E::multi_pairing(a_vec, b);
        Ok(Self { t, u })
    }

    /// Commits to 2 vector, 1 of group G1 elements and 1 of group G2 elements.
    pub fn double(
        vkey: impl Into<PreparedVKey<E>>,
        wkey: &WKey<E>,
        a: &[E::G1Affine],
        b: impl IntoIterator<Item = impl Into<E::G2Prepared>>,
    ) -> Result<Self, AggregationError> {
        let vkey = vkey.into();
        let PreparedVKey {
            a: mut v_a,
            b: mut v_b,
        } = vkey;
        let b_prep: Vec<E::G2Prepared> = b.into_iter().map(|b| b.into()).collect::<Vec<_>>();
        let b_len = b_prep.len();
        v_a.truncate(a.len());
        v_a.append(&mut b_prep.clone());
        v_b.truncate(a.len());
        v_b.append(&mut b_prep.clone());
        Ok(Self {
            t: E::multi_pairing(
                cfg_iter!(a)
                    .map(|e| E::G1Prepared::from(*e))
                    .chain(cfg_iter!(wkey.a[0..b_len]).map(|e| E::G1Prepared::from(*e)))
                    .collect::<Vec<_>>(),
                v_a,
            ),
            u: E::multi_pairing(
                cfg_iter!(a)
                    .map(|e| E::G1Prepared::from(*e))
                    .chain(cfg_iter!(wkey.b[0..b_len]).map(|e| E::G1Prepared::from(*e)))
                    .collect::<Vec<_>>(),
                v_b,
            ),
        })
    }
}