Struct RingGadget 

pub struct RingGadget<F> {
    pub ring: Vec<(u32, Flat<F>)>,
    pub mu: Vec<Flat<F>>,
    pub first_wire: u32,
    pub first_row: usize,
}

Δ = Σ_c a_c φ(h_c) over the pad entries (pad, a_c) as the chain X_127 = T'_127, X_j = T'_j + X_{j+1}², T'_j = Σ_c σ^{-j}(μ_j a_c) h_c, on squaring wires first_wire + j - 1 for j = 1..128; Δ = X_0.

Fields

ring: Vec<(u32, Flat<F>)>

mu: Vec<Flat<F>>

first_wire: u32

first_row: usize

Statement row of Lhs_1; the chain occupies 2 · (BITS - 1) rows from there.

Implementations

impl<F: HardwareField> RingGadget<F>

pub fn new(ring: Vec<(u32, Flat<F>)>, mu: Vec<Flat<F>>, first_wire: u32) -> Self

pub fn row_of(&self, j: usize) -> usize

Statement row of Lhs_j; Rhs_j follows it.

pub fn for_each_tie_row(&self, f: impl FnMut(usize, &[Flat<F>]))

f(j, tie_j) for j = 127 down to 1, tie_j[c] = σ^{-j}(μ_j a_c); the coefficients of row Lhs_j on the pad entries.

pub fn wire_rows(&self) -> Vec<AffineRow<F>>

Wire terms of the chain rows, in [row_of] order: Lhs_j + Product_{j+1} and Rhs_j + Lhs_j.

pub fn delta_form(&self) -> Vec<(Unknown, Flat<F>)>

Δ over the pad entries and the wire Product_1.

pub fn wires(&self, pad_values: &[Flat<F>]) -> Vec<[Flat<F>; 3]>

Honest [X_j, X_j, X_j²] for j = 1..128 from the pad values, indexed by wire.

pub fn delta(&self, pad_values: &[Flat<F>]) -> Flat<F>

Δ = Σ_c a_c φ(h_c) on plaintext pad values.