plonky2/evm/Cargo.toml

[package]
name = "plonky2_evm"
description = "Implementation of STARKs for the Ethereum Virtual Machine"
version = "0.1.0"
edition = "2021"

[dependencies]
plonky2 = { path = "../plonky2", default-features = false, features = ["rand", "timing"] }
plonky2_util = { path = "../util" }
eth_trie_utils = "0.4.0"
anyhow = "1.0.40"
env_logger = "0.9.0"
ethereum-types = "0.14.0"
hex = { version = "0.4.3", optional = true }
hex-literal = "0.3.4"
itertools = "0.10.3"
keccak-hash = "0.10.0"
log = "0.4.14"
num = "0.4.0"
maybe_rayon = { path = "../maybe_rayon" }
once_cell = "1.13.0"
pest = "2.1.3"
pest_derive = "2.1.0"
rand = "0.8.5"
rand_chacha = "0.3.1"
ripemd = "0.1.3"
rlp = "0.5.1"
rlp-derive = "0.1.0"
serde = { version = "1.0.144", features = ["derive"] }
sha2 = "0.10.2"
tiny-keccak = "2.0.2"

[dev-dependencies]
criterion = "0.3.5"
hex = "0.4.3"

[features]
default = ["parallel"]
asmtools = ["hex"]
parallel = ["plonky2/parallel", "maybe_rayon/parallel"]

[[bin]]
name = "assemble"
required-features = ["asmtools"]

[[bench]]
name = "stack_manipulation"
harness = false
Start of multi-table STARKs 2022-05-04 20:57:07 +02:00			`[package]`
Rename starky2 -> evm (#547) 2022-05-18 10:32:14 -07:00			`name = "plonky2_evm"`
			`description = "Implementation of STARKs for the Ethereum Virtual Machine"`
Start of multi-table STARKs 2022-05-04 20:57:07 +02:00			`version = "0.1.0"`
			`edition = "2021"`

			`[dependencies]`
Tweak features 2022-09-07 15:09:56 -07:00			`plonky2 = { path = "../plonky2", default-features = false, features = ["rand", "timing"] }`
Start of multi-table STARKs 2022-05-04 20:57:07 +02:00			`plonky2_util = { path = "../util" }`
Updated `eth_trie_utils` to `0.4.0` 2022-10-31 15:15:10 -06:00			`eth_trie_utils = "0.4.0"`
Start of multi-table STARKs 2022-05-04 20:57:07 +02:00			`anyhow = "1.0.40"`
			`env_logger = "0.9.0"`
Few small changes related to switching to `H256` 2022-09-29 17:24:23 -06:00			`ethereum-types = "0.14.0"`
Util for assembling EVM code to hex (#586) This is just for debugging the kernel. It's fully disposable. 2022-06-27 18:08:03 -07:00			`hex = { version = "0.4.3", optional = true }`
Minor 2022-07-20 00:10:52 -07:00			`hex-literal = "0.3.4"`
Fix EVM dependency list (#576) 2022-06-23 18:33:34 -07:00			`itertools = "0.10.3"`
Treat storage tries as sub-tries of the state trie I.e. have leaves in the state trie point to the root of a storage trie 2022-10-16 10:11:45 -07:00			`keccak-hash = "0.10.0"`
Start of multi-table STARKs 2022-05-04 20:57:07 +02:00			`log = "0.4.14"`
Modular operations for the EVM arithmetic unit (#755) * First draft of 256-bit addition. * Update comment. * cargo fmt * Rename addition evaluation file. * Port ALU logic from SZ. * Give a name to some magic numbers. * `addition.rs` -> `add.rs`; fix carry propagation in add; impl sub. * Clippy. * Combine hi and lo parts of the output. * Implement MUL. * Suppress Clippy's attempt to make my code even harder to read. * Next draft of MUL. * Make all limbs (i.e. input and output) 16-bits. * Tidying. * Use iterators instead of building arrays. * Documentation. * Clippy is wrong; also cargo fmt. * Un-refactor equality checking, since it was wrong for sub. * Daniel comments. * Daniel comments. * Rename folder 'alu' -> 'arithmetic'. * Rename file. * Finish changing name ALU -> Arithmetic Unit. * Finish removing dependency on array_zip feature. * Remove operations that will be handled elsewhere. * Rename var; tidy up. * Clean up columns; mark places where range-checks need to be done. * Import all names in 'columns' to reduce verbiage. * cargo fmt * Fix aux_in calculation in mul. * Remove redundant 'allow's; more precise range-check size. * Document functions. * Document MUL instruction verification technique. * Initial tests for ADD. * Minor test fixes; add test for SUB. * Fix bugs in generate functions. * Fix SUB verification; refactor equality verification. * cargo fmt * Add test for MUL and fix some bugs. * Update doc. * Quiet incorrect clippy error. * Initial implementation of ADDMOD and MOD. * Fixes to addmod. * Update doc. * Do 1000 random tests instead of just 1. * Documentation fix. * Working version of ADDMOD. * Working version of MOD. * Name magic number; do multiple MUL tests. * Add code and test for special case; add some docs. * Fix spelling mistake. * Simplify asserts. * Tidy comment. * Remove unused module. * cargo fmt * Check that output is reduced. * Add conversion of canonical `i64` to a `Field64`. * Handle zero modulus within degree constraint. * cargo fmt * Fix some comments. * Check that the top half of the product is zero! * Start of refactor. * Refactoring. * Remove zero and reduction handling from addmod. * Refactoring; renaming; bug fixes. * Reuse intermediate calculations across all modular operations; don't negate quot poly unnecessarily. * Fix bug where last elt of qm wasn't checked. Refactoring. * Move circuit poly functions to utils.rs. * Rename ADDMOD stuff to MODULAR. * Rename module addmod -> modular. * Handle zero modulus. * Verify that output is reduced. * Implement recursive version of modular circuits. * clippy * Tidy up i64 -> Field conversion following Jacqui's comments. * cargo fmt * Improved documentation. * Address Jacqui's comments. * Save some gates by using builder.arithmetic_extension(). 2022-10-07 17:15:50 +11:00			`num = "0.4.0"`
sha2 testing infrastructure 2022-09-19 10:32:52 -07:00			`maybe_rayon = { path = "../maybe_rayon" }`
Continue work on bootstrapping The kernel is hashed using a Keccak based sponge for now. We could switch to Poseidon later if our kernel grows too large. Note that we use simple zero-padding (pad0) instead of the standard pad10 rule. It's simpler, and we don't care that the prover can add extra 0s at the end of the code. The program counter can never reach those bytes, and even if it could, they'd be 0 anyway given the EVM's zero-initialization rule. In one CPU row, we can do a whole Keccak hash (via the CTL), absorbing 136 bytes. But we can't actually bootstrap that many bytes of kernel code in one row, because we're also limited by memory bandwidth. Currently we can write 4 bytes of the kernel to memory in one row. So we treat the `keccak_input_limbs` columns as a buffer. We gradually fill up this buffer, 4 bytes (one `u32` word) at a time. Every `136 / 4 = 34` rows, the buffer will be full, so at that point we activate the Keccak CTL to absorb the buffer. 2022-07-14 11:31:47 -07:00			`once_cell = "1.13.0"`
Parse and assemble kernel functions (#567) * Parse and assemble kernel functions Written in "EVM++" assembly. Later on we will add some priviledged opcodes (in unused opcode ordinals), making it an extension of EVM bytecode. I don't think there's much of a standard for EVM assembly, but I loosely based the syntax on this [proposal](https://gist.github.com/axic/17ddbbce4738ccf4040d30cbb5de484e). * PR feedback * tweaks for consistency * terminology tweaks * Update evm/src/cpu/kernel/opcodes.rs Co-authored-by: Jacqueline Nabaglo <jakub@mirprotocol.org> * Update evm/src/cpu/kernel/opcodes.rs Co-authored-by: Jacqueline Nabaglo <jakub@mirprotocol.org> * Update evm/src/cpu/kernel/opcodes.rs Co-authored-by: Jacqueline Nabaglo <jakub@mirprotocol.org> Co-authored-by: Jacqueline Nabaglo <jakub@mirprotocol.org> 2022-06-20 20:32:29 -07:00			`pest = "2.1.3"`
			`pest_derive = "2.1.0"`
Add mock test (doesn't work) 2022-05-12 20:38:11 +02:00			`rand = "0.8.5"`
included everything 2022-05-26 08:22:23 -07:00			`rand_chacha = "0.3.1"`
almost done 2022-10-03 15:30:17 -07:00			`ripemd = "0.1.3"`
Add test (won't work for a while, but to illustrate) 2022-07-04 18:10:03 -07:00			`rlp = "0.5.1"`
RLP related fixes 2022-10-04 15:12:44 -07:00			`rlp-derive = "0.1.0"`
Replaced `PartialTrie` definitions with `eth-trie-utils` crate - There were enough dependencies that it made sense to move `PartialTrie` logic to its own crate. 2022-09-19 11:05:48 -06:00			`serde = { version = "1.0.144", features = ["derive"] }`
sha2 testing infrastructure 2022-09-19 10:32:52 -07:00			`sha2 = "0.10.2"`
Fix 2022-08-24 16:06:50 -07:00			`tiny-keccak = "2.0.2"`
Util for assembling EVM code to hex (#586) This is just for debugging the kernel. It's fully disposable. 2022-06-27 18:08:03 -07:00
Add test (won't work for a while, but to illustrate) 2022-07-04 18:10:03 -07:00			`[dev-dependencies]`
For permutations, find the optimal sequence of swaps Using a method Angus described. This is mainly his idea and code, I just ported it to Rust. 2022-08-04 17:14:07 -05:00			`criterion = "0.3.5"`
Passing tests 2022-07-14 14:26:01 +02:00			`hex = "0.4.3"`
Add test (won't work for a while, but to illustrate) 2022-07-04 18:10:03 -07:00
Util for assembling EVM code to hex (#586) This is just for debugging the kernel. It's fully disposable. 2022-06-27 18:08:03 -07:00			`[features]`
use maybe_rayon in starky and evm 2022-07-24 17:47:14 -04:00			`default = ["parallel"]`
Util for assembling EVM code to hex (#586) This is just for debugging the kernel. It's fully disposable. 2022-06-27 18:08:03 -07:00			`asmtools = ["hex"]`
Tweak features 2022-09-07 15:09:56 -07:00			`parallel = ["plonky2/parallel", "maybe_rayon/parallel"]`
Util for assembling EVM code to hex (#586) This is just for debugging the kernel. It's fully disposable. 2022-06-27 18:08:03 -07:00
			`[[bin]]`
			`name = "assemble"`
			`required-features = ["asmtools"]`
For permutations, find the optimal sequence of swaps Using a method Angus described. This is mainly his idea and code, I just ported it to Rust. 2022-08-04 17:14:07 -05:00
			`[[bench]]`
			`name = "stack_manipulation"`
			`harness = false`