Daniel Lubarov
518470a2d7
Merge pull request #20 from mir-protocol/beta_gamma
...
Properly use the three betas and gammas
2021-04-24 10:54:32 -07:00
Daniel Lubarov
7ffb9cf9b2
Merge pull request #17 from mir-protocol/rescue_bench
...
Make Rescue a bit faster
2021-04-24 10:53:52 -07:00
Daniel Lubarov
d18210d6f1
Merge pull request #16 from mir-protocol/clippy
...
Address some clippy warnings
2021-04-24 10:42:01 -07:00
Daniel Lubarov
03113e85ba
Merge pull request #18 from mir-protocol/no_next_access
...
Remove access to "next" wire & constant values
2021-04-24 10:38:37 -07:00
Daniel Lubarov
4f9aa8879b
Properly use the three betas and gammas
...
... for the three different `Z`s we use. Before I was just using the first value as a temporary thing.
2021-04-23 14:25:24 -07:00
Daniel Lubarov
b18f152c43
Remove access to "next" wire & constant values
...
As discussed, it seems like the batch opening argument will be a significant cost, and we can reduce that cost by not including shifted openings (except for `Z`s which need them).
2021-04-23 13:54:35 -07:00
Daniel Lubarov
80775eadb1
Make Rescue a bit faster
...
... by switching to Rescue Prime (which has a smaller security margin), and precomputing an addition chain for the exponent used in the cubic root calculation. Also adds a benchmark.
2021-04-23 13:25:29 -07:00
Daniel Lubarov
af4c8734ce
Address some clippy warnings
2021-04-23 12:35:19 -07:00
Daniel Lubarov
c684193033
Rename a couple vars
2021-04-23 09:24:01 -07:00
wborgeaud
8b429ff0f1
Clean tests
2021-04-23 15:25:18 +02:00
wborgeaud
3dcdc8835c
Working Merkle subtree proofs
2021-04-23 11:05:31 +02:00
Daniel Lubarov
9c50e61f96
cargo fmt
2021-04-23 00:01:41 -07:00
Daniel Lubarov
a9e7ff800e
Merge pull request #13 from mir-protocol/hash_instance
...
Seed Challenger with a hash of the instance
2021-04-23 00:00:59 -07:00
Daniel Lubarov
c31ef237e4
Merge pull request #14 from mir-protocol/port_more_tests
...
A few more tests, ported (with some adaptations) from plonky1
2021-04-23 00:00:25 -07:00
Daniel Lubarov
a5206f97a2
Better generator_order per William's comment
2021-04-22 23:59:37 -07:00
Daniel Lubarov
84a71c9ca5
A few more tests, ported (with some adaptations) from plonky1
2021-04-22 21:51:40 -07:00
Daniel Lubarov
b7bc1bf313
Seed Challenger with a hash of the instance
...
I think this is the recommended way to apply Fiat-Shamir, to avoid any possible attacks like taking someone else's proof and using it to prove a slightly different statement.
2021-04-22 16:38:49 -07:00
wborgeaud
13519e66ab
Merkle subtree proofs - WIP
2021-04-22 22:33:29 +02:00
wborgeaud
4491d5ad9f
Merge pull request #12 from mir-protocol/fri
...
FRI - Added base FRI implementation.
2021-04-22 22:29:51 +02:00
wborgeaud
4b75f16efd
Merge master
2021-04-22 22:27:55 +02:00
wborgeaud
d5433ffe24
PoW fixes based on PR comments
2021-04-22 22:21:24 +02:00
wborgeaud
a1023e0ca6
Added PoW
2021-04-22 15:50:08 +02:00
wborgeaud
4d31f5e37b
Fixes from PR comments
2021-04-22 09:27:59 +02:00
Daniel Lubarov
b49e629e26
Merge pull request #11 from mir-protocol/arithmetic
...
Basic arithmetic methods
2021-04-21 14:20:02 -07:00
wborgeaud
6b3aa02b01
Merge master
2021-04-21 22:36:06 +02:00
wborgeaud
6b407e45ef
Progress on FRI
2021-04-21 22:31:45 +02:00
Daniel Lubarov
41e1b64623
Basic arithmetic methods
2021-04-21 11:48:17 -07:00
Daniel Lubarov
70f4f2aab8
Minimal num_wires
2021-04-16 21:40:51 -07:00
Daniel Lubarov
62dccedda4
Fix id() to include (generic) R param
2021-04-16 09:01:54 -07:00
Daniel Lubarov
9c2b7334c8
Merge pull request #9 from mir-protocol/merkle_proofs_2
...
Merkle proofs
2021-04-12 19:16:20 -07:00
Daniel Lubarov
30b845e6b3
Add generator to circuit
2021-04-12 10:18:16 -07:00
wborgeaud
7ff4150679
Merge with merkle_proofs_2
2021-04-12 10:38:07 +02:00
wborgeaud
5abd49bf47
Merge
2021-04-12 10:34:40 +02:00
Daniel Lubarov
7d9bb073f4
Switch to "overwrite mode" sponges
...
And fix a bug where the rate was assumed to be width - 1 (which was true in plonky 1).
2021-04-10 21:32:11 -07:00
Daniel Lubarov
a14ddc3b03
Fix constraint count
2021-04-10 14:54:46 -07:00
Daniel Lubarov
b183579886
Finish up recursive Merkle proofs
2021-04-09 12:53:33 -07:00
Daniel Lubarov
93b73fb89a
Recursive Merkle proofs
2021-04-09 12:40:43 -07:00
Daniel Lubarov
04f74446fa
Misc fixes to get tests green again
2021-04-09 11:40:51 -07:00
Daniel Lubarov
f807db388b
Add bench_field_mul_interleaved benchmark
2021-04-09 10:26:21 -07:00
wborgeaud
aa50387d36
Started implementing FRI
2021-04-09 18:24:19 +02:00
Daniel Lubarov
959aaccae6
Merkle proofs
2021-04-08 09:38:57 -07:00
Daniel Lubarov
0c07fcf0ae
Licenses
2021-04-08 09:37:08 -07:00
Daniel Lubarov
1ab12c3dfd
Merge pull request #7 from mir-protocol/merkle_proofs
...
Candidate API for Merkle proof data
2021-04-07 10:19:02 -07:00
Daniel Lubarov
0cd7339940
Fixes based on PR feedback
2021-04-07 09:10:06 -07:00
Daniel Lubarov
9a8a7b6105
Non-circuit version
2021-04-06 19:22:12 -07:00
Daniel Lubarov
e8eb658f8e
Candidate API for Merkle proof data
...
Does this make sense? I think other libraries tend to include the leaf's index (either as an integer, or a series of bits indicating left/right turns) as part of a "proof". In FRI, the leaf indices are chosen by the verifier, so I thought that approach might be sort of redundant. Let me know what you think though.
2021-04-06 19:17:38 -07:00
Daniel Lubarov
88a84d5be3
Merge pull request #6 from mir-protocol/bin_reorg
...
Split main into multiple binaries
2021-04-06 13:25:33 -07:00
Daniel Lubarov
5fe8d633b6
Split main into multiple binaries
...
... and other minor refactoring.
`bench_recursion` will be the default bin run by `cargo run`; the otheres can be selected with the `--bin` flag.
We could probably delete some of the other binaries later. E.g. `field_search` might not be useful any more. `bench_fft` should maybe be converted to a benchmark (although there are some pros and cons, e.g. the bench framework has a minimum number of runs, and isn't helpful in testing multi-core performance).
2021-04-06 13:23:47 -07:00
Daniel Lubarov
2f54cedb5d
Merge pull request #5 from mir-protocol/validate_cosets
...
Validate that the cosets involved in Plonk's permutation argument are disjoint
2021-04-05 12:23:22 -07:00
Daniel Lubarov
74ce37250e
Avoid separate exp calls
2021-04-05 11:39:16 -07:00
