Struct tari_bulletproofs::r1cs::Prover
source · pub struct Prover<'g, T: BorrowMut<Transcript>> { /* private fields */ }
Expand description
A ConstraintSystem
implementation for use by the prover.
The prover commits high-level variables and their blinding factors (v, v_blinding)
,
allocates low-level variables and creates constraints in terms of these
high-level variables and low-level variables.
When all constraints are added, the proving code calls prove
which consumes the Prover
instance, samples random challenges
that instantiate the randomized constraints, and creates a complete proof.
Implementations§
source§impl<'g, T: BorrowMut<Transcript>> Prover<'g, T>
impl<'g, T: BorrowMut<Transcript>> Prover<'g, T>
sourcepub fn new(pc_gens: &'g PedersenGens, transcript: T) -> Self
pub fn new(pc_gens: &'g PedersenGens, transcript: T) -> Self
Construct an empty constraint system with specified external input variables.
Inputs
The bp_gens
and pc_gens
are generators for Bulletproofs
and for the Pedersen commitments, respectively. The
BulletproofGens
should have gens_capacity
greater than
the number of multiplication constraints that will eventually
be added into the constraint system.
The transcript
parameter is a Merlin proof transcript. The
ProverCS
holds onto the &mut Transcript
until it consumes
itself during [ProverCS::prove
], releasing its borrow of the
transcript. This ensures that the transcript cannot be
altered except by the ProverCS
before proving is complete.
Returns
Returns a new Prover
instance.
sourcepub fn commit(
&mut self,
v: Scalar,
v_blinding: Scalar
) -> (CompressedRistretto, Variable)
pub fn commit( &mut self, v: Scalar, v_blinding: Scalar ) -> (CompressedRistretto, Variable)
Creates commitment to a high-level variable and adds it to the transcript.
Inputs
The v
and v_blinding
parameters are openings to the
commitment to the external variable for the constraint
system. Passing the opening (the value together with the
blinding factor) makes it possible to reference pre-existing
commitments in the constraint system. All external variables
must be passed up-front, so that challenges produced by
[ConstraintSystem::challenge_scalar
] are bound to the
external variables.
Returns
Returns a pair of a Pedersen commitment (as a compressed Ristretto point),
and a Variable
corresponding to it, which can be used to form constraints.
sourcepub fn eval(&self, lc: &LinearCombination) -> Scalar
pub fn eval(&self, lc: &LinearCombination) -> Scalar
Returns the secret value of the linear combination.
sourcepub fn prove(self, bp_gens: &BulletproofGens) -> Result<R1CSProof, R1CSError>
pub fn prove(self, bp_gens: &BulletproofGens) -> Result<R1CSProof, R1CSError>
Consume this ConstraintSystem
to produce a proof.
sourcepub fn prove_and_return_transcript(
self,
bp_gens: &BulletproofGens
) -> Result<(R1CSProof, T), R1CSError>
pub fn prove_and_return_transcript( self, bp_gens: &BulletproofGens ) -> Result<(R1CSProof, T), R1CSError>
Consume this ConstraintSystem
to produce a proof. Returns the proof and the transcript passed in Prover::new
.