codex-storage
/
constantine
mirror of https://github.com/codex-storage/constantine.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
constantine/benchmarks/bench_fp12.nim

48 lines
1.3 KiB
Nim
Raw Normal View History

Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
# Constantine
# Copyright (c) 2018-2019 Status Research & Development GmbH
# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
# Licensed and distributed under either of
# * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
# * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
# at your option. This file may not be copied, modified, or distributed except according to those terms.
import
# Internals
Don't dump all in "backend" (#184) * backend -> math * towers -> extension fields * move ISA and compiler specific code out of math/ * fix export
2022-02-27 00:49:08 +00:00
../constantine/math/config/curves,
../constantine/math/extension_fields,
Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
# Helpers
chore: remove stew/byteutils dependencies and unneeded imports
2023-01-12 19:25:57 +00:00
./bench_fields_template
Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
# ############################################################
#
# Benchmark of 𝔽p12
#
# ############################################################
const Iters = 10_000
const InvIters = 1000
const AvailableCurves = [
# Pairing-Friendly curves
BLS12-377 (#91) * add Sage for constant time tonelli shanks * Fused sqrt and invsqrt via Tonelli Shanks * isolate sqrt in their own folder * Implement constant-time Tonelli Shanks for any prime * Implement Fp2 sqrt for any non-residue * Add tests for BLS12_377 * Lattice decomposition script for BLS12_377 G1 * BLS12-377 G1 GLV ok, G2 GLV issue * Proper endomorphism acceleration support for BLS12-377 * Add naive pairing support for BLS12-377 * Activate more bench for BLS12-377 * Fix MSB computation * Optimize final exponentiation + add benches
2020-09-27 07:15:14 +00:00
BN254_Nogami,
Properly distinguish between Nogami and Snark/Ethereum BN254 closes #19
2020-04-12 01:01:50 +00:00
BN254_Snarks,
Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
BLS12_377,
Refactor: Higher-Kinded Tower of Extension Fields (#25) * Mention that the inverse of 0 is 0 (TODO tests) * Introduce "Higher-Kinded tower extensions" * rename isCOmplexExtension -> fromComplexExtension * update benchmarks with the new tower scheme * Try to recover some speed on mul/squaring for an optimal tower (but this was not it)
2020-04-14 00:05:42 +00:00
BLS12_381
Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
]
proc main() =
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
separator()
Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
staticFor i, 0, AvailableCurves.len:
const curve = AvailableCurves[i]
addBench(Fp12[curve], Iters)
subBench(Fp12[curve], Iters)
negBench(Fp12[curve], Iters)
mulBench(Fp12[curve], Iters)
sqrBench(Fp12[curve], Iters)
invBench(Fp12[curve], InvIters)
Multi-Scalar-Multiplication / Linear combination (#220) * unoptimized msm * MSM: reorder loops * add a signed windowed recoding technique * improve wNAF table access * use batchAffine * revamp EC tests * MSM signed digit support * refactor MSM: recode signed ahead of time * missing test vector * refactor allocs and Alloca sideeffect * add an endomorphism threshold * Add Jacobian extended coordinates * refactor recodings, prepare for parallelizable on-the-fly signed recoding * recoding changes, introduce proper NAF for pairings * more pairings refactoring, introduce miller accumulator for EVM * some optim to the addchain miller loop * start optimizing multi-pairing * finish multi-miller loop refactoring * minor tuning * MSM: signed encoding suitable for parallelism (no precompute) * cleanup signed window encoding * add prefetching * add metering * properly init result to infinity * comment on prefetching * introduce vartime inversion for batch additions * fix JacExt infinity conversion * add batchAffine for MSM, though slower than JacExtended at the moment * add a batch affine scheduler for MSM * Add Multi-Scalar-Multiplication endomorphism acceleration * some tuning * signed integer fixes + 32-bit + tuning * Some more tuning * common msm bench + don't use affine for c < 9 * nit
2023-02-16 11:45:05 +00:00
invVartimeBench(Fp12[curve], InvIters)
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
separator()
Implement 𝔽p12 inversion, enable 𝔽p12 tests and bench
2020-04-09 12:28:01 +00:00
main()
Assembly backend (#69) * Proof-of-Concept Assembly code generator * Tag inline per procedure so we can easily track the tradeoff on tower fields * Implement Assembly for modular addition (but very curious off-by-one) * Fix off-by one for moduli with non msb set * Stash (super fast) alternative but still off by carry * Fix GCC optimizing ASM away * Save 1 register to allow compiling for BLS12-381 (in the GMP test) * The compiler cannot find enough registers if the ASM file is not compiled with -O3 * Add modsub * Add field negation * Implement no-carry Assembly optimized field multiplication * Expose UseX86ASM to the EC benchmark * omit frame pointer to save registers instead of hardcoding -O3. Also ensure early clobber constraints for Clang * Prepare for assembly fallback * Implement fallback for CPU that don't support ADX and BMI2 * Add CPU runtime detection * Update README closes #66 * Remove commented out code
2020-07-24 20:02:30 +00:00
notes()