1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89
// Copyright 2024 RISC Zero, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//! A Poseidon based CRNG used in Fiat-Shamir.
use risc0_core::field::{
baby_bear::{BabyBear, BabyBearExtElem, Elem},
ExtElem,
};
use super::{consts::CELLS, poseidon_mix, CELLS_OUT, CELLS_RATE};
use crate::core::{digest::Digest, hash::Rng};
/// A random number generator driven by Poseidon
#[derive(Clone, Debug)]
pub struct PoseidonRng {
// The cells of the sponge
cells: [Elem; CELLS],
// How many cells have used so far
pool_used: usize,
}
impl Default for PoseidonRng {
fn default() -> Self {
Self::new()
}
}
impl PoseidonRng {
/// Construct a new PoseidonRng
pub fn new() -> Self {
Self {
cells: [Elem::new(0); CELLS],
pool_used: 0,
}
}
}
impl Rng<BabyBear> for PoseidonRng {
fn mix(&mut self, val: &Digest) {
// if switching from squeezing, do a mix
if self.pool_used != 0 {
poseidon_mix(&mut self.cells);
self.pool_used = 0;
}
// Add in CELLS_OUT elements (also # of digest words)
for i in 0..CELLS_OUT {
self.cells[i] += Elem::new_raw(val.as_words()[i]);
}
// Mix
poseidon_mix(&mut self.cells);
}
fn random_bits(&mut self, bits: usize) -> u32 {
let mut val = self.random_elem().as_u32();
for _ in 0..3 {
let new_val = self.random_elem().as_u32();
if val == 0 {
val = new_val;
}
}
((1 << bits) - 1) & val
}
fn random_elem(&mut self) -> Elem {
if self.pool_used == CELLS_RATE {
poseidon_mix(&mut self.cells);
self.pool_used = 0;
}
let out = self.cells[self.pool_used];
self.pool_used += 1;
out
}
fn random_ext_elem(&mut self) -> BabyBearExtElem {
ExtElem::from_subelems((0..4).map(|_| self.random_elem()))
}
}