use std::marker::PhantomData; use itertools::unfold; use crate::field::extension_field::target::ExtensionTarget; use crate::field::extension_field::Extendable; use crate::field::field_types::{Field, RichField}; use crate::gates::gate::Gate; use crate::iop::generator::{GeneratedValues, SimpleGenerator, WitnessGenerator}; use crate::iop::target::Target; use crate::iop::wire::Wire; use crate::iop::witness::{PartitionWitness, Witness}; use crate::plonk::circuit_builder::CircuitBuilder; use crate::plonk::vars::{EvaluationTargets, EvaluationVars, EvaluationVarsBase}; /// Number of arithmetic operations performed by an arithmetic gate. pub const NUM_U32_ARITHMETIC_OPS: usize = 3; /// A gate to perform a basic mul-add on 32-bit values (we assume they are range-checked beforehand). #[derive(Debug)] pub struct U32ArithmeticGate, const D: usize> { _phantom: PhantomData, } impl, const D: usize> U32ArithmeticGate { pub fn wire_ith_multiplicand_0(i: usize) -> usize { debug_assert!(i < NUM_U32_ARITHMETIC_OPS); 5 * i } pub fn wire_ith_multiplicand_1(i: usize) -> usize { debug_assert!(i < NUM_U32_ARITHMETIC_OPS); 5 * i + 1 } pub fn wire_ith_addend(i: usize) -> usize { debug_assert!(i < NUM_U32_ARITHMETIC_OPS); 5 * i + 2 } pub fn wire_ith_output_low_half(i: usize) -> usize { debug_assert!(i < NUM_U32_ARITHMETIC_OPS); 5 * i + 3 } pub fn wire_ith_output_high_half(i: usize) -> usize { debug_assert!(i < NUM_U32_ARITHMETIC_OPS); 5 * i + 4 } pub fn limb_bits() -> usize { 2 } pub fn num_limbs() -> usize { 64 / Self::limb_bits() } pub fn wire_ith_output_jth_limb(i: usize, j: usize) -> usize { debug_assert!(i < NUM_U32_ARITHMETIC_OPS); debug_assert!(j < Self::num_limbs()); 5 * NUM_U32_ARITHMETIC_OPS + Self::num_limbs() * i + j } } impl, const D: usize> Gate for U32ArithmeticGate { fn id(&self) -> String { format!("{:?}", self) } fn eval_unfiltered(&self, vars: EvaluationVars) -> Vec { let mut constraints = Vec::with_capacity(self.num_constraints()); for i in 0..NUM_U32_ARITHMETIC_OPS { let multiplicand_0 = vars.local_wires[Self::wire_ith_multiplicand_0(i)]; let multiplicand_1 = vars.local_wires[Self::wire_ith_multiplicand_1(i)]; let addend = vars.local_wires[Self::wire_ith_addend(i)]; let computed_output = multiplicand_0 * multiplicand_1 + addend; let output_low = vars.local_wires[Self::wire_ith_output_low_half(i)]; let output_high = vars.local_wires[Self::wire_ith_output_high_half(i)]; let base = F::Extension::from_canonical_u64(1 << 32u64); let combined_output = output_high * base + output_low; constraints.push(combined_output - computed_output); let mut combined_limbs = F::Extension::ZERO; for j in 0..Self::num_limbs() { let this_limb = vars.local_wires[Self::wire_ith_output_jth_limb(i, j)]; let max_limb = 1 << Self::limb_bits(); let product = (0..max_limb) .map(|x| this_limb - F::Extension::from_canonical_usize(x)) .product(); constraints.push(product); let base = F::Extension::from_canonical_u64(1u64 << (j * Self::limb_bits())); combined_limbs += base * this_limb; } let combined_halves = output_low + F::Extension::from_canonical_u64(1 << 32u64) * output_high; constraints.push(combined_limbs - combined_halves); } constraints } fn eval_unfiltered_base(&self, vars: EvaluationVarsBase) -> Vec { let mut constraints = Vec::with_capacity(self.num_constraints()); for i in 0..NUM_U32_ARITHMETIC_OPS { let multiplicand_0 = vars.local_wires[Self::wire_ith_multiplicand_0(i)]; let multiplicand_1 = vars.local_wires[Self::wire_ith_multiplicand_1(i)]; let addend = vars.local_wires[Self::wire_ith_addend(i)]; let computed_output = multiplicand_0 * multiplicand_1 + addend; let output_low = vars.local_wires[Self::wire_ith_output_low_half(i)]; let output_high = vars.local_wires[Self::wire_ith_output_high_half(i)]; let base = F::from_canonical_u64(1 << 32u64); let combined_output = output_high * base + output_low; constraints.push(combined_output - computed_output); let mut combined_limbs = F::ZERO; for j in 0..Self::num_limbs() { let this_limb = vars.local_wires[Self::wire_ith_output_jth_limb(i, j)]; let max_limb = 1 << Self::limb_bits(); let product = (0..max_limb) .map(|x| this_limb - F::from_canonical_usize(x)) .product(); constraints.push(product); let base = F::from_canonical_u64(1u64 << (j * Self::limb_bits())); combined_limbs += base * this_limb; } let combined_halves = output_low + F::from_canonical_u64(1 << 32u64) * output_high; constraints.push(combined_limbs - combined_halves); } constraints } fn eval_unfiltered_recursively( &self, builder: &mut CircuitBuilder, vars: EvaluationTargets, ) -> Vec> { let mut constraints = Vec::with_capacity(self.num_constraints()); for i in 0..NUM_U32_ARITHMETIC_OPS { let multiplicand_0 = vars.local_wires[Self::wire_ith_multiplicand_0(i)]; let multiplicand_1 = vars.local_wires[Self::wire_ith_multiplicand_1(i)]; let addend = vars.local_wires[Self::wire_ith_addend(i)]; let computed_output = builder.mul_add_extension(multiplicand_0, multiplicand_1, addend); let output_low = vars.local_wires[Self::wire_ith_output_low_half(i)]; let output_high = vars.local_wires[Self::wire_ith_output_high_half(i)]; let base: F::Extension = F::from_canonical_u64(1 << 32u64).into(); let base_target = builder.constant_extension(base); let combined_output = builder.mul_add_extension(output_high, base_target, output_low); constraints.push(builder.sub_extension(combined_output, computed_output)); let mut combined_limbs = builder.zero_extension(); for j in 0..Self::num_limbs() { let this_limb = vars.local_wires[Self::wire_ith_output_jth_limb(i, j)]; let max_limb = 1 << Self::limb_bits(); let mut product = builder.one_extension(); for x in 0..max_limb { let x_target = builder.constant_extension(F::Extension::from_canonical_usize(x)); let diff = builder.sub_extension(this_limb, x_target); product = builder.mul_extension(product, diff); } constraints.push(product); let base = builder.constant_extension(F::Extension::from_canonical_u64( 1u64 << (j * Self::limb_bits()), )); combined_limbs = builder.mul_add_extension(base, this_limb, combined_limbs); } let high_base = builder.constant_extension(F::Extension::from_canonical_u64(1 << 32u64)); let combined_halves = builder.mul_add_extension(output_high, high_base, output_low); constraints.push(builder.sub_extension(combined_limbs, combined_halves)); } constraints } fn generators( &self, gate_index: usize, local_constants: &[F], ) -> Vec>> { (0..NUM_U32_ARITHMETIC_OPS) .map(|i| { let g: Box> = Box::new( U32ArithmeticGenerator { gate_index, i, _phantom: PhantomData, } .adapter(), ); g }) .collect::>() } fn num_wires(&self) -> usize { NUM_U32_ARITHMETIC_OPS * (5 + Self::num_limbs()) } fn num_constants(&self) -> usize { 0 } fn degree(&self) -> usize { 1 << Self::limb_bits() } fn num_constraints(&self) -> usize { NUM_U32_ARITHMETIC_OPS * (2 + Self::num_limbs()) } } #[derive(Clone, Debug)] struct U32ArithmeticGenerator, const D: usize> { gate_index: usize, i: usize, _phantom: PhantomData, } impl, const D: usize> SimpleGenerator for U32ArithmeticGenerator { fn dependencies(&self) -> Vec { let local_target = |input| Target::wire(self.gate_index, input); let mut deps = Vec::with_capacity(3); deps.push(local_target( U32ArithmeticGate::::wire_ith_multiplicand_0(self.i), )); deps.push(local_target( U32ArithmeticGate::::wire_ith_multiplicand_1(self.i), )); deps.push(local_target(U32ArithmeticGate::::wire_ith_addend( self.i, ))); deps } fn run_once(&self, witness: &PartitionWitness, out_buffer: &mut GeneratedValues) { let local_wire = |input| Wire { gate: self.gate_index, input, }; let get_local_wire = |input| witness.get_wire(local_wire(input)); let multiplicand_0 = get_local_wire(U32ArithmeticGate::::wire_ith_multiplicand_0(self.i)); let multiplicand_1 = get_local_wire(U32ArithmeticGate::::wire_ith_multiplicand_1(self.i)); let addend = get_local_wire(U32ArithmeticGate::::wire_ith_addend(self.i)); let output = multiplicand_0 * multiplicand_1 + addend; let mut output_u64 = output.to_canonical_u64(); let output_high_u64 = output_u64 >> 32; let output_low_u64 = output_u64 & ((1 << 32) - 1); let output_high = F::from_canonical_u64(output_high_u64); let output_low = F::from_canonical_u64(output_low_u64); let output_high_wire = local_wire(U32ArithmeticGate::::wire_ith_output_high_half(self.i)); let output_low_wire = local_wire(U32ArithmeticGate::::wire_ith_output_low_half(self.i)); out_buffer.set_wire(output_high_wire, output_high); out_buffer.set_wire(output_low_wire, output_low); let limb_base = 1 << U32ArithmeticGate::::limb_bits(); let output_limbs_u64: Vec<_> = unfold((), move |_| { if output_u64 == 0 { return None; } let ret = output_u64 % limb_base; output_u64 /= limb_base; Some(ret) }) .collect(); let output_limbs_F: Vec<_> = output_limbs_u64 .iter() .cloned() .map(F::from_canonical_u64) .collect(); for j in 0..U32ArithmeticGate::::num_limbs() { let wire = local_wire(U32ArithmeticGate::::wire_ith_output_jth_limb( self.i, j, )); out_buffer.set_wire(wire, output_limbs_F[j]); } } } #[cfg(test)] mod tests { use std::marker::PhantomData; use anyhow::Result; use crate::field::crandall_field::CrandallField; use crate::gates::arithmetic_u32::U32ArithmeticGate; use crate::gates::gate_testing::{test_eval_fns, test_low_degree}; #[test] fn low_degree() { test_low_degree::(U32ArithmeticGate:: { _phantom: PhantomData, }) } #[test] fn eval_fns() -> Result<()> { test_eval_fns::(U32ArithmeticGate:: { _phantom: PhantomData, }) } }