Struct StarkProverTranscript 

pub struct StarkProverTranscript<'a, C, F: PrimeField64, EF> { /* private fields */ }

Prover-side transcript of one uni-STARK run.

Holds the only definition of what a prover writes outside the opening argument.

The challenger is borrowed, not consumed. The caller keeps whatever it was doing with the sponge before and after.

Implementations

impl<'a, C, F, EF> StarkProverTranscript<'a, C, F, EF>

where F: PrimeField64, EF: ExtensionField<F>, C: CanObserve<F> + CanSample<F> + CanSampleBits<usize> + GrindingChallenger<Witness = F>,

pub fn new(challenger: &'a mut C, shape: StarkShape) -> Self

Seed the transcript from the shape.

pub fn constraint_phase<Com>( &mut self, trace_commitment: Com, preprocessed_commitment: Option<Com>, public_values: &[F], ) -> EF

where Com: Clone, C: CanObserve<Com>,

Bind the committed traces and the public values, then draw alpha.

Arguments

• trace_commitment: commitment to the main trace.
• preprocessed_commitment: commitment to the preprocessed trace, when the AIR has one.
• public_values: the public values, exactly as many as the AIR reads.

Returns

The challenge that batches every constraint into one identity.

Panics

When the arguments do not match the shape this run was described with.

pub fn ood_phase<Com>( &mut self, quotient_commitment: Com, random_commitment: Option<Com>, ) -> (EF, Option<F>)

where Com: Clone, C: CanObserve<Com>,

Bind the quotient commitment, grind, and draw zeta.

Arguments

• quotient_commitment: commitment to the quotient chunks.
• random_commitment: commitment to the randomization polynomial, under a hiding PCS.

Returns

• The out-of-domain point.
• The grinding witness, when the difficulty is positive.

Panics

When the arguments do not match the shape this run was described with.

pub fn delegate<R>(&mut self, run: impl FnOnce(&mut C) -> R) -> R

Lend the sponge to the opening argument, bracketed as a sub-protocol.

The callee seeds its own driver from the state this one has reached.

Returns

Whatever the delegated run produced.

pub fn abort(&mut self)

Abandon proof generation after a recoverable error, releasing the drop check.

pub fn finish(self)

Close the transcript once every described step has been played.

Panics

When the run played fewer steps than it was described with.