Struct ZkpVerifier 

pub struct ZkpVerifier {}

Verifier for verifying zero-knowledge proofs

Implementations

impl ZkpVerifier

pub fn new() -> ZkpVerifier

Create a new ZKP verifier

pub fn verify_secret_value( &self, proof: &ZkpProof, preimage: &[u8], ) -> Result<bool, Error>

Verify a zero-knowledge proof of secret value (preimage) knowledge

This verifies a proof generated by ZkpProver::prove_secret_value. The verifier recomputes the public Poseidon commitment from the preimage, so the caller passes the same secret preimage that was given to the prover (NOT the hash output). The proof then attests that the prover knew a preimage hashing to that commitment. For NIST proofs use verify_secret_value_nist.

Arguments

• proof - The proof to verify
• preimage - The secret preimage (same bytes passed to prove_secret_value); the verifier hashes it with Poseidon-128 to reconstruct the public commitment

Returns

Ok(true) if the proof is valid, Ok(false) or Err otherwise

pub fn verify_secret_value_nist( &self, proof: &ZkpProof, expected_hash: &[u8], ) -> Result<bool, Error>

Verify a NIST (cSHAKE256) secret value proof

Verifies a proof from prove_secret_value_nist. expected_hash is the raw 32-byte cSHAKE256 output (same as used in proving).

pub fn verify_computation( &self, proof: &ZkpProof, circuit: &ArithmeticCircuit<BinomialExtensionField<Mersenne31, 2>>, public: &[BinomialExtensionField<Mersenne31, 2>], ) -> Result<bool, Error>

Verify a zero-knowledge proof of computation

This verifies a proof generated by ZkpProver::prove_computation.

Arguments

• proof - The proof to verify
• circuit - The arithmetic circuit that was proven
• public - The public input values

Returns

Ok(true) if the proof is valid, Ok(false) or Err otherwise

pub fn verify( &self, proof: ZkpProof, public_statement: &[u8], ) -> Result<bool, Error>

Verify a zero-knowledge proof.

Performs full cryptographic (STARK) verification for proof types whose public inputs are fully described by a byte slice:

• ProofMetadata::HashPreimage: public_statement is the expected hash output (same semantics as verify_secret_value).
• ProofMetadata::HashPreimageNist: public_statement is the expected cSHAKE256 hash output (same semantics as verify_secret_value_nist).
• ProofMetadata::MerkleInclusion: public_statement is the expected Merkle root hash (same semantics as api::verify_membership).

Returns Ok(false) for Circuit, Credential, Identity, and None metadata variants. Those proof types require a type-specific verifier that accepts the additional inputs needed to reconstruct verification state.

batch_verify delegates to this method, so the same rules apply in bulk.

pub fn batch_verify( &self, proofs: &[ZkpProof], publics: &[&[u8]], ) -> Result<bool, Error>

Batch verify multiple proofs

Arguments

• proofs - The proofs to verify
• publics - The public statements for each proof

Returns

true if all proofs are valid, false otherwise

Trait Implementations

impl Default for ZkpVerifier

fn default() -> ZkpVerifier

Returns the “default value” for a type.