zkevm_circuits 0.153.12

ZKsync Era circuits for EraVM
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70



# This file was *autogenerated* from the file scalar_decomposition.sage
from sage.all_cmdline import *   # import sage library

_sage_const_0x89d3256894d213e3 = Integer(0x89d3256894d213e3); _sage_const_0x6f4d8248eeb859fc8211bbeb7d4f1128 = Integer(0x6f4d8248eeb859fc8211bbeb7d4f1128); _sage_const_0x6f4d8248eeb859fd0be4e1541221250b = Integer(0x6f4d8248eeb859fd0be4e1541221250b); _sage_const_0x24ccef014a773d2cf7a7bd9d4391eb18d = Integer(0x24ccef014a773d2cf7a7bd9d4391eb18d); _sage_const_0x2d91d232ec7e0b3d7 = Integer(0x2d91d232ec7e0b3d7); _sage_const_21888242871839275222246405745257275088548364400416034343698204186575808495617 = Integer(21888242871839275222246405745257275088548364400416034343698204186575808495617); _sage_const_4407920970296243842393367215006156084916469457145843978461 = Integer(4407920970296243842393367215006156084916469457145843978461); _sage_const_256 = Integer(256)# Defining vectors (a1,b1) and (a2,b2)
a1 = _sage_const_0x89d3256894d213e3 
b1 = -_sage_const_0x6f4d8248eeb859fc8211bbeb7d4f1128 
a2 = _sage_const_0x6f4d8248eeb859fd0be4e1541221250b 
b2 = _sage_const_0x89d3256894d213e3 

# Precomputed b1/n and b2/n times 2**256
g1 = _sage_const_0x24ccef014a773d2cf7a7bd9d4391eb18d 
g2 = _sage_const_0x2d91d232ec7e0b3d7 

# Defining some curve parameters
n = _sage_const_21888242871839275222246405745257275088548364400416034343698204186575808495617 
Fq = GF(n)
lambd = Integer(_sage_const_4407920970296243842393367215006156084916469457145843978461 )

# Regular decomposition
def decompose(k: Integer):
    c1 = b2 * k // n
    c2 = -b1 * k // n

    k1 = k - c1*a1 - c2*a2
    k2 = -c1*b1 - c2*b2
    return k1, k2

# Decomposition using precomputed g1 and g2
def decompose_aztec(k: Integer):
    c1 = (g2 * k) >> _sage_const_256 
    print(c1)
    c2 = (g1 * k) >> _sage_const_256 
    print(c2)

    q1 = c1 * b1
    print(q1)
    q2 = -c2 * b2
    print(q2)

    k2 = q2 - q1
    k2_lambda = k2 * lambd % n
    print(k2_lambda)
    k1 = k - k2_lambda

    return k1, k2

# Decomposing the scalar
print('\n--- Regular decomposition: ---')
k = Integer('0x161a87df4ee5620c75acf8cf7b2f1547183bf7368e2956fcc42ae0e439200c20')
k1, k2 = decompose(k)

# Printing results for regular decomposition
print(f'k1 = {Fq(k1)}')
print(f'-k1 = {Fq(-k1)}')
print(f'k2 = {Fq(k2)}')
print(f'-k2 = {Fq(-k2)}')

# Decomposing the scalar using Aztec Protocol's method 
# https://github.com/AztecProtocol/weierstrudel/blob/master/js_snippets/endomorphism.js#L47
print('\n--- Aztec decomposition: ---')
k1, k2 = decompose_aztec(k)

# Printing results for Aztec decomposition
print(f'k1 = {Fq(k1)}')
print(f'-k1 = {Fq(-k1)}')
print(f'k2 = {Fq(k2)}')
print(f'-k2 = {Fq(-k2)}')