codex-storage
/
constantine
mirror of https://github.com/codex-storage/constantine.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
constantine/benchmarks/bench_ec_g1.nim

79 lines
3.0 KiB
Nim
Raw Normal View History

Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
# Constantine
# Copyright (c) 2018-2019 Status Research & Development GmbH
# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
# Licensed and distributed under either of
# * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
# * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
# at your option. This file may not be copied, modified, or distributed except according to those terms.
import
# Internals
../constantine/config/curves,
../constantine/arithmetic,
Jacobian coordinates (#95) * Add projective-> affine bench * Add conditional copy and div2 benches * Fp4 benchmarks * Constant-time Jacobian addition * Jacobian doubling * Use a simpler Add+Dbl complete formula * Update tests * Fix conditional negate * Rollaback complete addition, we were only handling curve coef a == 0
2020-10-01 22:01:09 +00:00
../constantine/elliptic/[
ec_shortweierstrass_projective,
ec_shortweierstrass_jacobian],
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
# Helpers
../helpers/static_for,
./bench_elliptic_template,
# Standard library
std/strutils
# ############################################################
#
# Benchmark of the G1 group of
# Short Weierstrass elliptic curves
# in (homogeneous) projective coordinates
#
# ############################################################
Naive pairings + Naive cofactor clearing (#82) * Pairing - initial commit - line functions - sparse Fp12 functions * Small fixes: - Line parametrized by twist for generic algorithm - Add a conjugate operator for quadratic extensions - Have frobenius use it - Create an Affine coordinate type for elliptic curve * Implement (failing) pairing test * Stash pairing debug session, temp switch Fp12 over Fp4 * Proper naive pairing on BLS12-381 * Frobenius map * Implement naive pairing for BN curves * Add pairing tests to CI + reduce time spent on lower-level tests * Test without assembler in Github Actions + less base layers test iterations
2020-09-21 21:24:00 +00:00
const Iters = 10_000
const MulIters = 100
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
const AvailableCurves = [
# P224,
Endomorphism acceleration for BN254-Nogami (#102)
2020-10-10 16:53:48 +00:00
BN254_Nogami,
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
BN254_Snarks,
# Curve25519,
# P256,
# Secp256k1,
BLS12-377 (#91) * add Sage for constant time tonelli shanks * Fused sqrt and invsqrt via Tonelli Shanks * isolate sqrt in their own folder * Implement constant-time Tonelli Shanks for any prime * Implement Fp2 sqrt for any non-residue * Add tests for BLS12_377 * Lattice decomposition script for BLS12_377 G1 * BLS12-377 G1 GLV ok, G2 GLV issue * Proper endomorphism acceleration support for BLS12-377 * Add naive pairing support for BLS12-377 * Activate more bench for BLS12-377 * Fix MSB computation * Optimize final exponentiation + add benches
2020-09-27 07:15:14 +00:00
BLS12_377,
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
BLS12_381,
]
proc main() =
separator()
staticFor i, 0, AvailableCurves.len:
const curve = AvailableCurves[i]
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
addBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], Iters)
BW6-761 part 1 (#100) * Add Fp, Fp2, Fp6 support for BW6-761 * Add G1 for BW6-761 * Prepare to support G2 twists on the same field as G1 * Remove a useless dependent type for lines * Implement G2 for BW6-761 * Fix Line leftover
2020-10-09 05:51:47 +00:00
addBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], Iters)
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
mixedAddBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], Iters)
Implement Jacobian mixed addition (#142)
2021-01-30 13:21:55 +00:00
mixedAddBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], Iters)
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
doublingBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], Iters)
BW6-761 part 1 (#100) * Add Fp, Fp2, Fp6 support for BW6-761 * Add G1 for BW6-761 * Prepare to support G2 twists on the same field as G1 * Remove a useless dependent type for lines * Implement G2 for BW6-761 * Fix Line leftover
2020-10-09 05:51:47 +00:00
doublingBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], Iters)
Jacobian coordinates (#95) * Add projective-> affine bench * Add conditional copy and div2 benches * Fp4 benchmarks * Constant-time Jacobian addition * Jacobian doubling * Use a simpler Add+Dbl complete formula * Update tests * Fix conditional negate * Rollaback complete addition, we were only handling curve coef a == 0
2020-10-01 22:01:09 +00:00
separator()
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
affFromProjBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], MulIters)
BW6-761 part 1 (#100) * Add Fp, Fp2, Fp6 support for BW6-761 * Add G1 for BW6-761 * Prepare to support G2 twists on the same field as G1 * Remove a useless dependent type for lines * Implement G2 for BW6-761 * Fix Line leftover
2020-10-09 05:51:47 +00:00
affFromJacBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], MulIters)
Add elliptic doubling in projective coordinates
2020-04-15 20:23:46 +00:00
separator()
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
scalarMulUnsafeDoubleAddBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], MulIters)
BW6-761 part 1 (#100) * Add Fp, Fp2, Fp6 support for BW6-761 * Add G1 for BW6-761 * Prepare to support G2 twists on the same field as G1 * Remove a useless dependent type for lines * Implement G2 for BW6-761 * Fix Line leftover
2020-10-09 05:51:47 +00:00
scalarMulUnsafeDoubleAddBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], MulIters)
Scalar mul tests (#28) * Add sage script for BN254 * Implement (failing) scalar multiplication tests * Add a first test against sagemath * Finish the tests against SAGE for BN254 * Add significant test coverage of scalar multiplication with reference checks for BN254_Snarks and BLS12_381
2020-06-04 18:37:29 +00:00
separator()
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], window = 2, MulIters)
scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], window = 3, MulIters)
scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], window = 4, MulIters)
scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], NotOnTwist], window = 5, MulIters)
BW6-761 part 1 (#100) * Add Fp, Fp2, Fp6 support for BW6-761 * Add G1 for BW6-761 * Prepare to support G2 twists on the same field as G1 * Remove a useless dependent type for lines * Implement G2 for BW6-761 * Fix Line leftover
2020-10-09 05:51:47 +00:00
scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], window = 2, MulIters)
scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], window = 3, MulIters)
scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], window = 4, MulIters)
scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], NotOnTwist], window = 5, MulIters)
Windowed GLV acceleration - 25% faster signing on G1 (#74) * Fix 8x bigger than necessary encoding size of miniscalars in scalar mul * initial windowed GLV-SAC implementation * Simplify table encoding to match k0 without flipping bits
2020-08-24 22:02:30 +00:00
separator()
Rename ECP_ShortW_Proj -> ECP_ShortW_Prj
2021-02-06 15:29:53 +00:00
scalarMulEndo(ECP_ShortW_Prj[Fp[curve], NotOnTwist], MulIters)
scalarMulEndoWindow(ECP_ShortW_Prj[Fp[curve], NotOnTwist], MulIters)
BW6-761 part 1 (#100) * Add Fp, Fp2, Fp6 support for BW6-761 * Add G1 for BW6-761 * Prepare to support G2 twists on the same field as G1 * Remove a useless dependent type for lines * Implement G2 for BW6-761 * Fix Line leftover
2020-10-09 05:51:47 +00:00
scalarMulEndo(ECP_ShortW_Jac[Fp[curve], NotOnTwist], MulIters)
scalarMulEndoWindow(ECP_ShortW_Jac[Fp[curve], NotOnTwist], MulIters)
Windowed GLV acceleration - 25% faster signing on G1 (#74) * Fix 8x bigger than necessary encoding size of miniscalars in scalar mul * initial windowed GLV-SAC implementation * Simplify table encoding to match k0 without flipping bits
2020-08-24 22:02:30 +00:00
separator()
separator()
Add EC bench on G1 + Add throughput to benches
2020-04-15 17:38:02 +00:00
main()
Assembly backend (#69) * Proof-of-Concept Assembly code generator * Tag inline per procedure so we can easily track the tradeoff on tower fields * Implement Assembly for modular addition (but very curious off-by-one) * Fix off-by one for moduli with non msb set * Stash (super fast) alternative but still off by carry * Fix GCC optimizing ASM away * Save 1 register to allow compiling for BLS12-381 (in the GMP test) * The compiler cannot find enough registers if the ASM file is not compiled with -O3 * Add modsub * Add field negation * Implement no-carry Assembly optimized field multiplication * Expose UseX86ASM to the EC benchmark * omit frame pointer to save registers instead of hardcoding -O3. Also ensure early clobber constraints for Clang * Prepare for assembly fallback * Implement fallback for CPU that don't support ADX and BMI2 * Add CPU runtime detection * Update README closes #66 * Remove commented out code
2020-07-24 20:02:30 +00:00
notes()