pub struct VerifiableQueryResult<CP: CommitmentEvaluationProof> {
pub result: OwnedTable<CP::Scalar>,
pub proof: QueryProof<CP>,
}
Expand description
The result of an sql query along with a proof that the query is valid. The result and proof can be verified using commitments to database columns.
Note: the query result is stored in an intermediate form rather than the final form
the end-user sees. The final form is obtained after verification. Using an
intermediate form allows us to handle overflow and certain cases where the final
result might use floating point numbers (e.g. SELECT STDDEV(A) FROM T WHERE B = 0
).
Below we demonstrate typical usage of VerifiableQueryResult
with pseudo-code.
Here we assume that a verifier only has access to the commitments of database columns. To
process a query, the verifier forwards the query to an untrusted
prover. The prover has full access to the database and constructs a VerifiableQueryResult
that
it sends back to the verifier. The verifier checks that the result is valid using its
commitments, and constructs the finalized form of the query result.
prover_process_query(database_accessor) {
query <- receive_query_from_verifier()
verifiable_result <- VerifiableQueryResult::new(query, database_accessor)
// When we construct VerifiableQueryResult from a query expression, we compute
// both the result of the query in intermediate form and the proof of the result
// at the same time.
send_to_verifier(verifiable_result)
}
verifier_process_query(query, commitment_accessor) {
verifiable_result <- send_query_to_prover(query)
verify_result <- verifiable_result.verify(query, commitment_accessor)
if verify_result.is_error() {
// The prover did something wrong. Perhaps the prover tried to tamper with the query
// result or maybe its version of the database was out-of-sync with the verifier's
// version.
do_verification_error()
}
query_result <- verify_result.query_result()
if query_result.is_error() {
// The prover processed the query correctly, but the query resulted in an error.
// For example, perhaps the query added two 64-bit integer columns together that
// resulted in an overflow.
do_query_error()
}
do_query_success(query_result)
// The prover correctly processed a query and the query succeeded. Now, we can
// proceed to use the result.
}
Note: Because the class is deserialized from untrusted data, it cannot maintain any invariant on its data members; hence, they are all public so as to allow for easy manipulation for testing.
Fields§
§result: OwnedTable<CP::Scalar>
The result of the query in intermediate form.
proof: QueryProof<CP>
The proof that the query result is valid.
Implementations§
Source§impl<CP: CommitmentEvaluationProof> VerifiableQueryResult<CP>
impl<CP: CommitmentEvaluationProof> VerifiableQueryResult<CP>
Sourcepub fn new(
expr: &(impl ProofPlan + Serialize),
accessor: &impl DataAccessor<CP::Scalar>,
setup: &CP::ProverPublicSetup<'_>,
params: &[LiteralValue],
) -> PlaceholderResult<Self>
pub fn new( expr: &(impl ProofPlan + Serialize), accessor: &impl DataAccessor<CP::Scalar>, setup: &CP::ProverPublicSetup<'_>, params: &[LiteralValue], ) -> PlaceholderResult<Self>
Form a VerifiableQueryResult
from a query expression.
This function both computes the result of a query and constructs a proof of the results validity.
Sourcepub fn verify(
self,
expr: &(impl ProofPlan + Serialize),
accessor: &impl CommitmentAccessor<CP::Commitment>,
setup: &CP::VerifierPublicSetup<'_>,
params: &[LiteralValue],
) -> QueryResult<CP::Scalar>
pub fn verify( self, expr: &(impl ProofPlan + Serialize), accessor: &impl CommitmentAccessor<CP::Commitment>, setup: &CP::VerifierPublicSetup<'_>, params: &[LiteralValue], ) -> QueryResult<CP::Scalar>
Verify a VerifiableQueryResult
. Upon success, this function returns the finalized form of
the query result.
Note: a verified result can still respresent an error (e.g. overflow), but it is a verified error.
Note: This does NOT transform the result!
Trait Implementations§
Source§impl<CP: Clone + CommitmentEvaluationProof> Clone for VerifiableQueryResult<CP>
impl<CP: Clone + CommitmentEvaluationProof> Clone for VerifiableQueryResult<CP>
Source§fn clone(&self) -> VerifiableQueryResult<CP>
fn clone(&self) -> VerifiableQueryResult<CP>
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source
. Read moreSource§impl<'de, CP> Deserialize<'de> for VerifiableQueryResult<CP>where
CP: Deserialize<'de> + CommitmentEvaluationProof,
impl<'de, CP> Deserialize<'de> for VerifiableQueryResult<CP>where
CP: Deserialize<'de> + CommitmentEvaluationProof,
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl<CP> Serialize for VerifiableQueryResult<CP>where
CP: Serialize + CommitmentEvaluationProof,
impl<CP> Serialize for VerifiableQueryResult<CP>where
CP: Serialize + CommitmentEvaluationProof,
Auto Trait Implementations§
impl<CP> Freeze for VerifiableQueryResult<CP>where
CP: Freeze,
impl<CP> RefUnwindSafe for VerifiableQueryResult<CP>where
CP: RefUnwindSafe,
<CP as CommitmentEvaluationProof>::Commitment: RefUnwindSafe,
<CP as CommitmentEvaluationProof>::Scalar: RefUnwindSafe,
impl<CP> Send for VerifiableQueryResult<CP>where
CP: Send,
impl<CP> Sync for VerifiableQueryResult<CP>where
CP: Sync,
impl<CP> Unpin for VerifiableQueryResult<CP>where
CP: Unpin,
<CP as CommitmentEvaluationProof>::Commitment: Unpin,
<CP as CommitmentEvaluationProof>::Scalar: Unpin,
impl<CP> UnwindSafe for VerifiableQueryResult<CP>where
CP: UnwindSafe,
<CP as CommitmentEvaluationProof>::Commitment: UnwindSafe,
<CP as CommitmentEvaluationProof>::Scalar: UnwindSafe,
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> FmtForward for T
impl<T> FmtForward for T
Source§fn fmt_binary(self) -> FmtBinary<Self>where
Self: Binary,
fn fmt_binary(self) -> FmtBinary<Self>where
Self: Binary,
self
to use its Binary
implementation when Debug
-formatted.Source§fn fmt_display(self) -> FmtDisplay<Self>where
Self: Display,
fn fmt_display(self) -> FmtDisplay<Self>where
Self: Display,
self
to use its Display
implementation when
Debug
-formatted.Source§fn fmt_lower_exp(self) -> FmtLowerExp<Self>where
Self: LowerExp,
fn fmt_lower_exp(self) -> FmtLowerExp<Self>where
Self: LowerExp,
self
to use its LowerExp
implementation when
Debug
-formatted.Source§fn fmt_lower_hex(self) -> FmtLowerHex<Self>where
Self: LowerHex,
fn fmt_lower_hex(self) -> FmtLowerHex<Self>where
Self: LowerHex,
self
to use its LowerHex
implementation when
Debug
-formatted.Source§fn fmt_octal(self) -> FmtOctal<Self>where
Self: Octal,
fn fmt_octal(self) -> FmtOctal<Self>where
Self: Octal,
self
to use its Octal
implementation when Debug
-formatted.Source§fn fmt_pointer(self) -> FmtPointer<Self>where
Self: Pointer,
fn fmt_pointer(self) -> FmtPointer<Self>where
Self: Pointer,
self
to use its Pointer
implementation when
Debug
-formatted.Source§fn fmt_upper_exp(self) -> FmtUpperExp<Self>where
Self: UpperExp,
fn fmt_upper_exp(self) -> FmtUpperExp<Self>where
Self: UpperExp,
self
to use its UpperExp
implementation when
Debug
-formatted.Source§fn fmt_upper_hex(self) -> FmtUpperHex<Self>where
Self: UpperHex,
fn fmt_upper_hex(self) -> FmtUpperHex<Self>where
Self: UpperHex,
self
to use its UpperHex
implementation when
Debug
-formatted.Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left
is true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left(&self)
returns true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read moreSource§impl<T> Pipe for Twhere
T: ?Sized,
impl<T> Pipe for Twhere
T: ?Sized,
Source§fn pipe<R>(self, func: impl FnOnce(Self) -> R) -> Rwhere
Self: Sized,
fn pipe<R>(self, func: impl FnOnce(Self) -> R) -> Rwhere
Self: Sized,
Source§fn pipe_ref<'a, R>(&'a self, func: impl FnOnce(&'a Self) -> R) -> Rwhere
R: 'a,
fn pipe_ref<'a, R>(&'a self, func: impl FnOnce(&'a Self) -> R) -> Rwhere
R: 'a,
self
and passes that borrow into the pipe function. Read moreSource§fn pipe_ref_mut<'a, R>(&'a mut self, func: impl FnOnce(&'a mut Self) -> R) -> Rwhere
R: 'a,
fn pipe_ref_mut<'a, R>(&'a mut self, func: impl FnOnce(&'a mut Self) -> R) -> Rwhere
R: 'a,
self
and passes that borrow into the pipe function. Read moreSource§fn pipe_borrow<'a, B, R>(&'a self, func: impl FnOnce(&'a B) -> R) -> R
fn pipe_borrow<'a, B, R>(&'a self, func: impl FnOnce(&'a B) -> R) -> R
Source§fn pipe_borrow_mut<'a, B, R>(
&'a mut self,
func: impl FnOnce(&'a mut B) -> R,
) -> R
fn pipe_borrow_mut<'a, B, R>( &'a mut self, func: impl FnOnce(&'a mut B) -> R, ) -> R
Source§fn pipe_as_ref<'a, U, R>(&'a self, func: impl FnOnce(&'a U) -> R) -> R
fn pipe_as_ref<'a, U, R>(&'a self, func: impl FnOnce(&'a U) -> R) -> R
self
, then passes self.as_ref()
into the pipe function.Source§fn pipe_as_mut<'a, U, R>(&'a mut self, func: impl FnOnce(&'a mut U) -> R) -> R
fn pipe_as_mut<'a, U, R>(&'a mut self, func: impl FnOnce(&'a mut U) -> R) -> R
self
, then passes self.as_mut()
into the pipe
function.Source§fn pipe_deref<'a, T, R>(&'a self, func: impl FnOnce(&'a T) -> R) -> R
fn pipe_deref<'a, T, R>(&'a self, func: impl FnOnce(&'a T) -> R) -> R
self
, then passes self.deref()
into the pipe function.Source§impl<T> Pointable for T
impl<T> Pointable for T
Source§impl<T> Tap for T
impl<T> Tap for T
Source§fn tap_borrow<B>(self, func: impl FnOnce(&B)) -> Self
fn tap_borrow<B>(self, func: impl FnOnce(&B)) -> Self
Borrow<B>
of a value. Read moreSource§fn tap_borrow_mut<B>(self, func: impl FnOnce(&mut B)) -> Self
fn tap_borrow_mut<B>(self, func: impl FnOnce(&mut B)) -> Self
BorrowMut<B>
of a value. Read moreSource§fn tap_ref<R>(self, func: impl FnOnce(&R)) -> Self
fn tap_ref<R>(self, func: impl FnOnce(&R)) -> Self
AsRef<R>
view of a value. Read moreSource§fn tap_ref_mut<R>(self, func: impl FnOnce(&mut R)) -> Self
fn tap_ref_mut<R>(self, func: impl FnOnce(&mut R)) -> Self
AsMut<R>
view of a value. Read moreSource§fn tap_deref<T>(self, func: impl FnOnce(&T)) -> Self
fn tap_deref<T>(self, func: impl FnOnce(&T)) -> Self
Deref::Target
of a value. Read moreSource§fn tap_deref_mut<T>(self, func: impl FnOnce(&mut T)) -> Self
fn tap_deref_mut<T>(self, func: impl FnOnce(&mut T)) -> Self
Deref::Target
of a value. Read moreSource§fn tap_dbg(self, func: impl FnOnce(&Self)) -> Self
fn tap_dbg(self, func: impl FnOnce(&Self)) -> Self
.tap()
only in debug builds, and is erased in release builds.Source§fn tap_mut_dbg(self, func: impl FnOnce(&mut Self)) -> Self
fn tap_mut_dbg(self, func: impl FnOnce(&mut Self)) -> Self
.tap_mut()
only in debug builds, and is erased in release
builds.Source§fn tap_borrow_dbg<B>(self, func: impl FnOnce(&B)) -> Self
fn tap_borrow_dbg<B>(self, func: impl FnOnce(&B)) -> Self
.tap_borrow()
only in debug builds, and is erased in release
builds.Source§fn tap_borrow_mut_dbg<B>(self, func: impl FnOnce(&mut B)) -> Self
fn tap_borrow_mut_dbg<B>(self, func: impl FnOnce(&mut B)) -> Self
.tap_borrow_mut()
only in debug builds, and is erased in release
builds.Source§fn tap_ref_dbg<R>(self, func: impl FnOnce(&R)) -> Self
fn tap_ref_dbg<R>(self, func: impl FnOnce(&R)) -> Self
.tap_ref()
only in debug builds, and is erased in release
builds.Source§fn tap_ref_mut_dbg<R>(self, func: impl FnOnce(&mut R)) -> Self
fn tap_ref_mut_dbg<R>(self, func: impl FnOnce(&mut R)) -> Self
.tap_ref_mut()
only in debug builds, and is erased in release
builds.Source§fn tap_deref_dbg<T>(self, func: impl FnOnce(&T)) -> Self
fn tap_deref_dbg<T>(self, func: impl FnOnce(&T)) -> Self
.tap_deref()
only in debug builds, and is erased in release
builds.