mirror of
https://github.com/logos-storage/zk-benchmarks.git
synced 2026-03-23 12:33:07 +00:00
poseidon2 benchmark over bn256
This commit is contained in:
Manish Kumar
parent
3e7b01097e
commit
5927557f08
20
hash/jolt/bench/Cargo.lock
generated
20
hash/jolt/bench/Cargo.lock
generated
@ -485,7 +485,10 @@ checksum = "8c3c1a368f70d6cf7302d78f8f7093da241fb8e8807c05cc9e51a125895a6d5b"
|
||||
name = "bench"
|
||||
version = "0.1.0"
|
||||
dependencies = [
|
||||
"ark-bn254",
|
||||
"ark-ff 0.4.2",
|
||||
"ark-serialize 0.4.2",
|
||||
"ark-std 0.4.0",
|
||||
"guest",
|
||||
"hex",
|
||||
"jolt-sdk",
|
||||
@ -1299,10 +1302,13 @@ dependencies = [
|
||||
name = "guest"
|
||||
version = "0.1.0"
|
||||
dependencies = [
|
||||
"ark-bn254",
|
||||
"ark-ff 0.4.2",
|
||||
"ark-serialize 0.4.2",
|
||||
"blake2",
|
||||
"blake3",
|
||||
"hex",
|
||||
"jolt-sdk",
|
||||
"risc0-core 0.18.0",
|
||||
"risc0-zkp",
|
||||
"sha2",
|
||||
"sha3",
|
||||
@ -2513,16 +2519,6 @@ dependencies = [
|
||||
"windows-sys 0.52.0",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "risc0-core"
|
||||
version = "0.18.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "08605aec93ea22ed83f7f81f42e2d7287a5b0c749d8671f94de9d5994020045c"
|
||||
dependencies = [
|
||||
"bytemuck",
|
||||
"rand_core 0.6.4",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "risc0-core"
|
||||
version = "1.0.5"
|
||||
@ -2548,7 +2544,7 @@ dependencies = [
|
||||
"hex-literal",
|
||||
"paste",
|
||||
"rand_core 0.6.4",
|
||||
"risc0-core 1.0.5",
|
||||
"risc0-core",
|
||||
"risc0-zkvm-platform",
|
||||
"serde",
|
||||
"sha2",
|
||||
|
||||
@ -16,7 +16,11 @@ jolt = { package = "jolt-sdk", git = "https://github.com/a16z/jolt",rev = "4805d
|
||||
guest = { path = "./guest" }
|
||||
rand = "0.8.3"
|
||||
hex = "0.4.3"
|
||||
ark-serialize = "0.4.2"
|
||||
ark-serialize = { git = "https://github.com/a16z/arkworks-algebra", branch = "optimize/field-from-u64" }
|
||||
ark-bn254 = { version = "0.4.0" }
|
||||
ark-std = { version = "0.4.0" }
|
||||
ark-ff = { git = "https://github.com/a16z/arkworks-algebra", branch = "optimize/field-from-u64" }
|
||||
|
||||
|
||||
[patch.crates-io]
|
||||
ark-ff = { git = "https://github.com/a16z/arkworks-algebra", branch = "optimize/field-from-u64" }
|
||||
|
||||
@ -17,4 +17,8 @@ sha3 = { version = "0.10.8", default-features = false }
|
||||
blake3 = { version = "1.5.4", default-features = false }
|
||||
blake2 = { version = "0.10.6", default-features = false }
|
||||
risc0-zkp = { version = "1.0.5", default-features = false }
|
||||
risc0-core = { version = "=0.18.0", default-features = false }
|
||||
ark-ff = { git = "https://github.com/a16z/arkworks-algebra", branch = "optimize/field-from-u64" }
|
||||
hex = { version = "0.4.3", default-features = false }
|
||||
ark-bn254 = { version = "0.4.0"}
|
||||
# lazy_static = { version = "1.4", default-features = false }
|
||||
ark-serialize = { git = "https://github.com/a16z/arkworks-algebra", branch = "optimize/field-from-u64" }
|
||||
|
||||
@ -5,6 +5,7 @@ use sha2::{Sha256, Digest};
|
||||
use sha3::Keccak256;
|
||||
use blake3::hash;
|
||||
use blake2::Blake2b512;
|
||||
use ark_serialize::{CanonicalSerialize,CanonicalDeserialize};
|
||||
|
||||
use risc0_zkp::core::hash::poseidon2::Poseidon2HashSuite;
|
||||
use risc0_zkp::field::baby_bear::BabyBearElem;
|
||||
@ -12,6 +13,9 @@ use risc0_zkp::field::baby_bear::BabyBearElem;
|
||||
extern crate alloc;
|
||||
use alloc::vec::Vec;
|
||||
|
||||
pub mod poseidon2_bn256;
|
||||
use poseidon2_bn256::{Scalar, MerkleTree, Poseidon2, Poseidon2Params};
|
||||
|
||||
// sha256
|
||||
#[jolt::provable]
|
||||
fn sha2(input: &[u8]) -> [u8; 32] {
|
||||
@ -62,4 +66,27 @@ fn poseidon2_babybear(input: Vec<u32>) -> Vec<u32> {
|
||||
|
||||
result
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
//TODO: too slow!! need to do some optimizations
|
||||
// poseidon2 over BN256
|
||||
#[jolt::provable(stack_size = 1000000, memory_size = 10000000)]
|
||||
pub fn poseidon2_bn256(input: Vec<Vec<u8>>) -> Vec<u8> {
|
||||
let mut hash_data: Vec<Scalar> = Vec::new();
|
||||
for i in 0..input.len() {
|
||||
let a_uncompressed = Scalar::deserialize_uncompressed(&*input[i]).unwrap();
|
||||
hash_data.push(a_uncompressed);
|
||||
}
|
||||
|
||||
let bn256_param: Poseidon2Params<Scalar> = Poseidon2Params::<Scalar>::POSEIDON2_BN256_PARAMS();
|
||||
let permutation = Poseidon2::new(bn256_param);
|
||||
let mut merkle_tree = MerkleTree::new(permutation);
|
||||
|
||||
let hash_final = merkle_tree.accumulate(&hash_data);
|
||||
|
||||
let mut hash_bytes: Vec<u8> = Vec::new();
|
||||
hash_final.serialize_uncompressed(&mut hash_bytes).unwrap();
|
||||
|
||||
hash_bytes
|
||||
}
|
||||
|
||||
|
||||
637
hash/jolt/bench/guest/src/poseidon2_bn256.rs
Normal file
637
hash/jolt/bench/guest/src/poseidon2_bn256.rs
Normal file
@ -0,0 +1,637 @@
|
||||
// Code is taken from https://github.com/HorizenLabs/poseidon2 and modified for no-std
|
||||
|
||||
use ark_ff::PrimeField;
|
||||
use hex::FromHex;
|
||||
|
||||
extern crate alloc;
|
||||
use alloc::vec::Vec;
|
||||
|
||||
extern crate core;
|
||||
use core::marker::PhantomData;
|
||||
|
||||
pub type Scalar = ark_bn254::fr::Fr;
|
||||
|
||||
#[derive(Clone, Debug)]
|
||||
pub struct Poseidon2Params<F: PrimeField> {
|
||||
pub(crate) t: usize, // statesize
|
||||
pub(crate) d: usize, // sbox degree
|
||||
pub(crate) rounds_f_beginning: usize,
|
||||
pub(crate) rounds_p: usize,
|
||||
#[allow(dead_code)]
|
||||
pub(crate) rounds_f_end: usize,
|
||||
pub(crate) rounds: usize,
|
||||
pub(crate) mat_internal_diag_m_1: Vec<F>,
|
||||
pub(crate) _mat_internal: Vec<Vec<F>>,
|
||||
pub(crate) round_constants: Vec<Vec<F>>,
|
||||
}
|
||||
|
||||
impl<F: PrimeField> Poseidon2Params<F> {
|
||||
#[allow(clippy::too_many_arguments)]
|
||||
|
||||
pub fn new(
|
||||
t: usize,
|
||||
d: usize,
|
||||
rounds_f: usize,
|
||||
rounds_p: usize,
|
||||
mat_internal_diag_m_1: &[F],
|
||||
mat_internal: &[Vec<F>],
|
||||
round_constants: &[Vec<F>],
|
||||
) -> Self {
|
||||
assert!(d == 3 || d == 5 || d == 7 || d == 11);
|
||||
assert_eq!(rounds_f % 2, 0);
|
||||
let r = rounds_f / 2;
|
||||
let rounds = rounds_f + rounds_p;
|
||||
|
||||
Poseidon2Params {
|
||||
t,
|
||||
d,
|
||||
rounds_f_beginning: r,
|
||||
rounds_p,
|
||||
rounds_f_end: r,
|
||||
rounds,
|
||||
mat_internal_diag_m_1: mat_internal_diag_m_1.to_owned(),
|
||||
_mat_internal: mat_internal.to_owned(),
|
||||
round_constants: round_constants.to_owned(),
|
||||
}
|
||||
}
|
||||
|
||||
#[allow(non_snake_case)]
|
||||
pub fn POSEIDON2_BN256_PARAMS() -> Poseidon2Params<ark_ff::Fp<ark_ff::MontBackend<ark_bn254::FrConfig, 4>, 4>> {
|
||||
|
||||
let MAT_DIAG3_M_1: Vec<Scalar> = vec![
|
||||
Scalar::from(1u64),
|
||||
Scalar::from(1u64),
|
||||
Scalar::from(2u64),
|
||||
];
|
||||
|
||||
let MAT_INTERNAL3: Vec<Vec<Scalar>> = vec![
|
||||
vec![Scalar::from(2u64),
|
||||
Scalar::from(1u64),
|
||||
Scalar::from(1u64),
|
||||
],
|
||||
vec![Scalar::from(1u64),
|
||||
Scalar::from(2u64),
|
||||
Scalar::from(1u64),
|
||||
],
|
||||
vec![Scalar::from(1u64),
|
||||
Scalar::from(1u64),
|
||||
Scalar::from(3u64),
|
||||
],
|
||||
];
|
||||
|
||||
let RC3: Vec<Vec<Scalar>> = vec![
|
||||
vec![from_hex("0x1d066a255517b7fd8bddd3a93f7804ef7f8fcde48bb4c37a59a09a1a97052816"),
|
||||
from_hex("0x29daefb55f6f2dc6ac3f089cebcc6120b7c6fef31367b68eb7238547d32c1610"),
|
||||
from_hex("0x1f2cb1624a78ee001ecbd88ad959d7012572d76f08ec5c4f9e8b7ad7b0b4e1d1"),
|
||||
],
|
||||
vec![from_hex("0x0aad2e79f15735f2bd77c0ed3d14aa27b11f092a53bbc6e1db0672ded84f31e5"),
|
||||
from_hex("0x2252624f8617738cd6f661dd4094375f37028a98f1dece66091ccf1595b43f28"),
|
||||
from_hex("0x1a24913a928b38485a65a84a291da1ff91c20626524b2b87d49f4f2c9018d735"),
|
||||
],
|
||||
vec![from_hex("0x22fc468f1759b74d7bfc427b5f11ebb10a41515ddff497b14fd6dae1508fc47a"),
|
||||
from_hex("0x1059ca787f1f89ed9cd026e9c9ca107ae61956ff0b4121d5efd65515617f6e4d"),
|
||||
from_hex("0x02be9473358461d8f61f3536d877de982123011f0bf6f155a45cbbfae8b981ce"),
|
||||
],
|
||||
vec![from_hex("0x0ec96c8e32962d462778a749c82ed623aba9b669ac5b8736a1ff3a441a5084a4"),
|
||||
from_hex("0x292f906e073677405442d9553c45fa3f5a47a7cdb8c99f9648fb2e4d814df57e"),
|
||||
from_hex("0x274982444157b86726c11b9a0f5e39a5cc611160a394ea460c63f0b2ffe5657e"),
|
||||
],
|
||||
vec![from_hex("0x1a1d063e54b1e764b63e1855bff015b8cedd192f47308731499573f23597d4b5"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x26abc66f3fdf8e68839d10956259063708235dccc1aa3793b91b002c5b257c37"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0c7c64a9d887385381a578cfed5aed370754427aabca92a70b3c2b12ff4d7be8"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1cf5998769e9fab79e17f0b6d08b2d1eba2ebac30dc386b0edd383831354b495"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0f5e3a8566be31b7564ca60461e9e08b19828764a9669bc17aba0b97e66b0109"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x18df6a9d19ea90d895e60e4db0794a01f359a53a180b7d4b42bf3d7a531c976e"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x04f7bf2c5c0538ac6e4b782c3c6e601ad0ea1d3a3b9d25ef4e324055fa3123dc"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x29c76ce22255206e3c40058523748531e770c0584aa2328ce55d54628b89ebe6"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x198d425a45b78e85c053659ab4347f5d65b1b8e9c6108dbe00e0e945dbc5ff15"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x25ee27ab6296cd5e6af3cc79c598a1daa7ff7f6878b3c49d49d3a9a90c3fdf74"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x138ea8e0af41a1e024561001c0b6eb1505845d7d0c55b1b2c0f88687a96d1381"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x306197fb3fab671ef6e7c2cba2eefd0e42851b5b9811f2ca4013370a01d95687"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1a0c7d52dc32a4432b66f0b4894d4f1a21db7565e5b4250486419eaf00e8f620"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x2b46b418de80915f3ff86a8e5c8bdfccebfbe5f55163cd6caa52997da2c54a9f"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x12d3e0dc0085873701f8b777b9673af9613a1af5db48e05bfb46e312b5829f64"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x263390cf74dc3a8870f5002ed21d089ffb2bf768230f648dba338a5cb19b3a1f"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0a14f33a5fe668a60ac884b4ca607ad0f8abb5af40f96f1d7d543db52b003dcd"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x28ead9c586513eab1a5e86509d68b2da27be3a4f01171a1dd847df829bc683b9"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1c6ab1c328c3c6430972031f1bdb2ac9888f0ea1abe71cffea16cda6e1a7416c"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1fc7e71bc0b819792b2500239f7f8de04f6decd608cb98a932346015c5b42c94"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x03e107eb3a42b2ece380e0d860298f17c0c1e197c952650ee6dd85b93a0ddaa8"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x2d354a251f381a4669c0d52bf88b772c46452ca57c08697f454505f6941d78cd"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x094af88ab05d94baf687ef14bc566d1c522551d61606eda3d14b4606826f794b"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x19705b783bf3d2dc19bcaeabf02f8ca5e1ab5b6f2e3195a9d52b2d249d1396f7"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x09bf4acc3a8bce3f1fcc33fee54fc5b28723b16b7d740a3e60cef6852271200e"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1803f8200db6013c50f83c0c8fab62843413732f301f7058543a073f3f3b5e4e"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0f80afb5046244de30595b160b8d1f38bf6fb02d4454c0add41f7fef2faf3e5c"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x126ee1f8504f15c3d77f0088c1cfc964abcfcf643f4a6fea7dc3f98219529d78"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x23c203d10cfcc60f69bfb3d919552ca10ffb4ee63175ddf8ef86f991d7d0a591"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x2a2ae15d8b143709ec0d09705fa3a6303dec1ee4eec2cf747c5a339f7744fb94"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x07b60dee586ed6ef47e5c381ab6343ecc3d3b3006cb461bbb6b5d89081970b2b"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x27316b559be3edfd885d95c494c1ae3d8a98a320baa7d152132cfe583c9311bd"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1d5c49ba157c32b8d8937cb2d3f84311ef834cc2a743ed662f5f9af0c0342e76"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x2f8b124e78163b2f332774e0b850b5ec09c01bf6979938f67c24bd5940968488"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1e6843a5457416b6dc5b7aa09a9ce21b1d4cba6554e51d84665f75260113b3d5"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x11cdf00a35f650c55fca25c9929c8ad9a68daf9ac6a189ab1f5bc79f21641d4b"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x21632de3d3bbc5e42ef36e588158d6d4608b2815c77355b7e82b5b9b7eb560bc"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0de625758452efbd97b27025fbd245e0255ae48ef2a329e449d7b5c51c18498a"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x2ad253c053e75213e2febfd4d976cc01dd9e1e1c6f0fb6b09b09546ba0838098"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1d6b169ed63872dc6ec7681ec39b3be93dd49cdd13c813b7d35702e38d60b077"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1660b740a143664bb9127c4941b67fed0be3ea70a24d5568c3a54e706cfef7fe"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0065a92d1de81f34114f4ca2deef76e0ceacdddb12cf879096a29f10376ccbfe"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1f11f065202535987367f823da7d672c353ebe2ccbc4869bcf30d50a5871040d"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x26596f5c5dd5a5d1b437ce7b14a2c3dd3bd1d1a39b6759ba110852d17df0693e"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x16f49bc727e45a2f7bf3056efcf8b6d38539c4163a5f1e706743db15af91860f"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1abe1deb45b3e3119954175efb331bf4568feaf7ea8b3dc5e1a4e7438dd39e5f"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0e426ccab66984d1d8993a74ca548b779f5db92aaec5f102020d34aea15fba59"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0e7c30c2e2e8957f4933bd1942053f1f0071684b902d534fa841924303f6a6c6"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0812a017ca92cf0a1622708fc7edff1d6166ded6e3528ead4c76e1f31d3fc69d"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x21a5ade3df2bc1b5bba949d1db96040068afe5026edd7a9c2e276b47cf010d54"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x01f3035463816c84ad711bf1a058c6c6bd101945f50e5afe72b1a5233f8749ce"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x0b115572f038c0e2028c2aafc2d06a5e8bf2f9398dbd0fdf4dcaa82b0f0c1c8b"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1c38ec0b99b62fd4f0ef255543f50d2e27fc24db42bc910a3460613b6ef59e2f"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1c89c6d9666272e8425c3ff1f4ac737b2f5d314606a297d4b1d0b254d880c53e"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x03326e643580356bf6d44008ae4c042a21ad4880097a5eb38b71e2311bb88f8f"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x268076b0054fb73f67cee9ea0e51e3ad50f27a6434b5dceb5bdde2299910a4c9"),
|
||||
Scalar::from(0),
|
||||
Scalar::from(0),
|
||||
],
|
||||
vec![from_hex("0x1acd63c67fbc9ab1626ed93491bda32e5da18ea9d8e4f10178d04aa6f8747ad0"),
|
||||
from_hex("0x19f8a5d670e8ab66c4e3144be58ef6901bf93375e2323ec3ca8c86cd2a28b5a5"),
|
||||
from_hex("0x1c0dc443519ad7a86efa40d2df10a011068193ea51f6c92ae1cfbb5f7b9b6893"),
|
||||
],
|
||||
vec![from_hex("0x14b39e7aa4068dbe50fe7190e421dc19fbeab33cb4f6a2c4180e4c3224987d3d"),
|
||||
from_hex("0x1d449b71bd826ec58f28c63ea6c561b7b820fc519f01f021afb1e35e28b0795e"),
|
||||
from_hex("0x1ea2c9a89baaddbb60fa97fe60fe9d8e89de141689d1252276524dc0a9e987fc"),
|
||||
],
|
||||
vec![from_hex("0x0478d66d43535a8cb57e9c1c3d6a2bd7591f9a46a0e9c058134d5cefdb3c7ff1"),
|
||||
from_hex("0x19272db71eece6a6f608f3b2717f9cd2662e26ad86c400b21cde5e4a7b00bebe"),
|
||||
from_hex("0x14226537335cab33c749c746f09208abb2dd1bd66a87ef75039be846af134166"),
|
||||
],
|
||||
vec![from_hex("0x01fd6af15956294f9dfe38c0d976a088b21c21e4a1c2e823f912f44961f9a9ce"),
|
||||
from_hex("0x18e5abedd626ec307bca190b8b2cab1aaee2e62ed229ba5a5ad8518d4e5f2a57"),
|
||||
from_hex("0x0fc1bbceba0590f5abbdffa6d3b35e3297c021a3a409926d0e2d54dc1c84fda6"),
|
||||
],
|
||||
];
|
||||
|
||||
Poseidon2Params::new(3, 5, 8, 56, &MAT_DIAG3_M_1, &MAT_INTERNAL3, &RC3)
|
||||
}
|
||||
}
|
||||
|
||||
pub trait MerkleTreeHash<F: PrimeField> {
|
||||
fn compress(&self, input: &[&F]) -> F;
|
||||
}
|
||||
|
||||
|
||||
|
||||
#[derive(Clone, Debug)]
|
||||
pub struct MerkleTree<F: PrimeField, P: MerkleTreeHash<F>> {
|
||||
perm: P,
|
||||
field: PhantomData<F>,
|
||||
}
|
||||
|
||||
impl<F: PrimeField, P: MerkleTreeHash<F>> MerkleTree<F, P> {
|
||||
pub fn new(perm: P) -> Self {
|
||||
MerkleTree {
|
||||
perm,
|
||||
field: PhantomData,
|
||||
}
|
||||
}
|
||||
|
||||
fn round_up_pow_n(input: usize, n: usize) -> usize {
|
||||
debug_assert!(n >= 1);
|
||||
let mut res = 1;
|
||||
// try powers, starting from n
|
||||
loop {
|
||||
res *= n;
|
||||
if res >= input {
|
||||
break;
|
||||
}
|
||||
}
|
||||
res
|
||||
}
|
||||
|
||||
pub fn accumulate(&mut self, set: &[F]) -> F {
|
||||
let set_size = set.len();
|
||||
let mut bound = Self::round_up_pow_n(set_size, 2);
|
||||
loop {
|
||||
if bound >= 2 {
|
||||
break;
|
||||
}
|
||||
bound *= 2;
|
||||
}
|
||||
let mut nodes: Vec<F> = Vec::with_capacity(bound);
|
||||
for s in set {
|
||||
nodes.push(s.to_owned());
|
||||
}
|
||||
// pad
|
||||
for _ in nodes.len()..bound {
|
||||
nodes.push(nodes[set_size - 1].to_owned());
|
||||
}
|
||||
|
||||
while nodes.len() > 1 {
|
||||
let new_len = nodes.len() / 2;
|
||||
let mut new_nodes: Vec<F> = Vec::with_capacity(new_len);
|
||||
for i in (0..nodes.len()).step_by(2) {
|
||||
let inp = [&nodes[i], &nodes[i + 1]];
|
||||
let dig = self.perm.compress(&inp);
|
||||
new_nodes.push(dig);
|
||||
}
|
||||
nodes = new_nodes;
|
||||
}
|
||||
nodes[0].to_owned()
|
||||
}
|
||||
}
|
||||
|
||||
#[derive(Clone, Debug)]
|
||||
pub struct Poseidon2<F: PrimeField> {
|
||||
pub params: Poseidon2Params<F>,
|
||||
}
|
||||
|
||||
impl<F: PrimeField> Poseidon2<F> {
|
||||
pub fn new(params: Poseidon2Params<F>) -> Self {
|
||||
Poseidon2 {
|
||||
params: params,
|
||||
}
|
||||
}
|
||||
|
||||
pub fn get_t(&self) -> usize {
|
||||
self.params.t
|
||||
}
|
||||
|
||||
pub fn permutation(&self, input: &[F]) -> Vec<F> {
|
||||
let t = self.params.t;
|
||||
assert_eq!(input.len(), t);
|
||||
|
||||
let mut current_state = input.to_owned();
|
||||
|
||||
// Linear layer at beginning
|
||||
self.matmul_external(&mut current_state);
|
||||
|
||||
for r in 0..self.params.rounds_f_beginning {
|
||||
current_state = self.add_rc(¤t_state, &self.params.round_constants[r]);
|
||||
current_state = self.sbox(¤t_state);
|
||||
self.matmul_external(&mut current_state);
|
||||
}
|
||||
|
||||
let p_end = self.params.rounds_f_beginning + self.params.rounds_p;
|
||||
for r in self.params.rounds_f_beginning..p_end {
|
||||
current_state[0].add_assign(&self.params.round_constants[r][0]);
|
||||
current_state[0] = self.sbox_p(¤t_state[0]);
|
||||
self.matmul_internal(&mut current_state, &self.params.mat_internal_diag_m_1);
|
||||
}
|
||||
|
||||
for r in p_end..self.params.rounds {
|
||||
current_state = self.add_rc(¤t_state, &self.params.round_constants[r]);
|
||||
current_state = self.sbox(¤t_state);
|
||||
self.matmul_external(&mut current_state);
|
||||
}
|
||||
current_state
|
||||
}
|
||||
|
||||
fn sbox(&self, input: &[F]) -> Vec<F> {
|
||||
input.iter().map(|el| self.sbox_p(el)).collect()
|
||||
}
|
||||
|
||||
fn sbox_p(&self, input: &F) -> F {
|
||||
let mut input2 = *input;
|
||||
input2.square_in_place();
|
||||
|
||||
match self.params.d {
|
||||
3 => {
|
||||
let mut out = input2;
|
||||
out.mul_assign(input);
|
||||
out
|
||||
}
|
||||
5 => {
|
||||
let mut out = input2;
|
||||
out.square_in_place();
|
||||
out.mul_assign(input);
|
||||
out
|
||||
}
|
||||
7 => {
|
||||
let mut out = input2;
|
||||
out.square_in_place();
|
||||
out.mul_assign(&input2);
|
||||
out.mul_assign(input);
|
||||
out
|
||||
}
|
||||
_ => {
|
||||
panic!()
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
fn matmul_m4(&self, input: &mut[F]) {
|
||||
let t = self.params.t;
|
||||
let t4 = t / 4;
|
||||
for i in 0..t4 {
|
||||
let start_index = i * 4;
|
||||
let mut t_0 = input[start_index];
|
||||
t_0.add_assign(&input[start_index + 1]);
|
||||
let mut t_1 = input[start_index + 2];
|
||||
t_1.add_assign(&input[start_index + 3]);
|
||||
let mut t_2 = input[start_index + 1];
|
||||
t_2.double_in_place();
|
||||
t_2.add_assign(&t_1);
|
||||
let mut t_3 = input[start_index + 3];
|
||||
t_3.double_in_place();
|
||||
t_3.add_assign(&t_0);
|
||||
let mut t_4 = t_1;
|
||||
t_4.double_in_place();
|
||||
t_4.double_in_place();
|
||||
t_4.add_assign(&t_3);
|
||||
let mut t_5 = t_0;
|
||||
t_5.double_in_place();
|
||||
t_5.double_in_place();
|
||||
t_5.add_assign(&t_2);
|
||||
let mut t_6 = t_3;
|
||||
t_6.add_assign(&t_5);
|
||||
let mut t_7 = t_2;
|
||||
t_7.add_assign(&t_4);
|
||||
input[start_index] = t_6;
|
||||
input[start_index + 1] = t_5;
|
||||
input[start_index + 2] = t_7;
|
||||
input[start_index + 3] = t_4;
|
||||
}
|
||||
}
|
||||
|
||||
fn matmul_external(&self, input: &mut[F]) {
|
||||
let t = self.params.t;
|
||||
match t {
|
||||
2 => {
|
||||
// Matrix circ(2, 1)
|
||||
let mut sum = input[0];
|
||||
sum.add_assign(&input[1]);
|
||||
input[0].add_assign(&sum);
|
||||
input[1].add_assign(&sum);
|
||||
}
|
||||
3 => {
|
||||
// Matrix circ(2, 1, 1)
|
||||
let mut sum = input[0];
|
||||
sum.add_assign(&input[1]);
|
||||
sum.add_assign(&input[2]);
|
||||
input[0].add_assign(&sum);
|
||||
input[1].add_assign(&sum);
|
||||
input[2].add_assign(&sum);
|
||||
}
|
||||
4 => {
|
||||
// Applying cheap 4x4 MDS matrix to each 4-element part of the state
|
||||
self.matmul_m4(input);
|
||||
}
|
||||
8 | 12 | 16 | 20 | 24 => {
|
||||
// Applying cheap 4x4 MDS matrix to each 4-element part of the state
|
||||
self.matmul_m4(input);
|
||||
|
||||
// Applying second cheap matrix for t > 4
|
||||
let t4 = t / 4;
|
||||
let mut stored = [F::zero(); 4];
|
||||
for l in 0..4 {
|
||||
stored[l] = input[l];
|
||||
for j in 1..t4 {
|
||||
stored[l].add_assign(&input[4 * j + l]);
|
||||
}
|
||||
}
|
||||
for i in 0..input.len() {
|
||||
input[i].add_assign(&stored[i % 4]);
|
||||
}
|
||||
}
|
||||
_ => {
|
||||
panic!()
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
fn matmul_internal(&self, input: &mut[F], mat_internal_diag_m_1: &[F]) {
|
||||
let t = self.params.t;
|
||||
|
||||
match t {
|
||||
2 => {
|
||||
// [2, 1]
|
||||
// [1, 3]
|
||||
let mut sum = input[0];
|
||||
sum.add_assign(&input[1]);
|
||||
input[0].add_assign(&sum);
|
||||
input[1].double_in_place();
|
||||
input[1].add_assign(&sum);
|
||||
}
|
||||
3 => {
|
||||
// [2, 1, 1]
|
||||
// [1, 2, 1]
|
||||
// [1, 1, 3]
|
||||
let mut sum = input[0];
|
||||
sum.add_assign(&input[1]);
|
||||
sum.add_assign(&input[2]);
|
||||
input[0].add_assign(&sum);
|
||||
input[1].add_assign(&sum);
|
||||
input[2].double_in_place();
|
||||
input[2].add_assign(&sum);
|
||||
}
|
||||
4 | 8 | 12 | 16 | 20 | 24 => {
|
||||
// Compute input sum
|
||||
let mut sum = input[0];
|
||||
input
|
||||
.iter()
|
||||
.skip(1)
|
||||
.take(t-1)
|
||||
.for_each(|el| sum.add_assign(el));
|
||||
// Add sum + diag entry * element to each element
|
||||
for i in 0..input.len() {
|
||||
input[i].mul_assign(&mat_internal_diag_m_1[i]);
|
||||
input[i].add_assign(&sum);
|
||||
}
|
||||
}
|
||||
_ => {
|
||||
panic!()
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
fn add_rc(&self, input: &[F], rc: &[F]) -> Vec<F> {
|
||||
input
|
||||
.iter()
|
||||
.zip(rc.iter())
|
||||
.map(|(a, b)| {
|
||||
let mut r = *a;
|
||||
r.add_assign(b);
|
||||
r
|
||||
})
|
||||
.collect()
|
||||
}
|
||||
}
|
||||
|
||||
impl<F: PrimeField> MerkleTreeHash<F> for Poseidon2<F> {
|
||||
fn compress(&self, input: &[&F]) -> F {
|
||||
self.permutation(&[input[0].to_owned(), input[1].to_owned(), F::zero()])[0]
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
pub fn from_hex<F: PrimeField>(s: &str) -> F {
|
||||
let a = Vec::from_hex(&s[2..]).expect("Invalid Hex String");
|
||||
F::from_be_bytes_mod_order(&a as &[u8])
|
||||
}
|
||||
@ -2,4 +2,5 @@ pub mod sha2;
|
||||
pub mod sha3;
|
||||
pub mod blake3;
|
||||
pub mod blake2;
|
||||
pub mod poseidon2_babybear;
|
||||
pub mod poseidon2_babybear;
|
||||
pub mod poseidon2_bn256;
|
||||
62
hash/jolt/bench/src/benches/poseidon2_bn256.rs
Normal file
62
hash/jolt/bench/src/benches/poseidon2_bn256.rs
Normal file
@ -0,0 +1,62 @@
|
||||
use std::time::Instant;
|
||||
use ark_serialize::CanonicalSerialize;
|
||||
use ark_ff::PrimeField;
|
||||
|
||||
extern crate alloc;
|
||||
use alloc::vec::Vec;
|
||||
|
||||
fn random_scalar<F: PrimeField>() -> F {
|
||||
let mut rng = ark_std::rand::thread_rng();
|
||||
F::rand(&mut rng)
|
||||
}
|
||||
|
||||
pub fn poseidon2_bn256_bench(mt_depth: usize) {
|
||||
|
||||
pub type Scalar = ark_bn254::fr::Fr;
|
||||
|
||||
let mut input_scalar: Vec<Vec<u8>> = Vec::new();
|
||||
let number_of_leaves: u32 = 1 << mt_depth;
|
||||
for _ in 0..number_of_leaves {
|
||||
let mut uncompressed_bytes = Vec::new();
|
||||
let a: Scalar = random_scalar();
|
||||
a.serialize_uncompressed(&mut uncompressed_bytes).unwrap();
|
||||
input_scalar.push(uncompressed_bytes);
|
||||
}
|
||||
|
||||
let (prove_poseidon2_bn256, verify_poseidon2_bn256, guest_build_time) = {
|
||||
|
||||
let start = Instant::now();
|
||||
let (prove, verify) = guest::build_poseidon2_bn256();
|
||||
let elapsed = start.elapsed();
|
||||
|
||||
(prove, verify, elapsed)
|
||||
};
|
||||
|
||||
let (output, proof, proving_time) = {
|
||||
|
||||
let start = Instant::now();
|
||||
let (output, proof) = prove_poseidon2_bn256(input_scalar);
|
||||
let elapsed = start.elapsed();
|
||||
|
||||
(output, proof, elapsed)
|
||||
};
|
||||
|
||||
let mut proof_bytes = Vec::new();
|
||||
proof.serialize_compressed(&mut proof_bytes).unwrap();
|
||||
|
||||
let (is_valid, verification_time) = {
|
||||
|
||||
let start = Instant::now();
|
||||
let is_valid = verify_poseidon2_bn256(proof);
|
||||
let elapsed = start.elapsed();
|
||||
|
||||
(is_valid, elapsed)
|
||||
};
|
||||
|
||||
assert!(is_valid);
|
||||
println!("output: {:?}", hex::encode(&output));
|
||||
println!("guest build time: {:?}", guest_build_time);
|
||||
println!("proving time: {:?}", proving_time);
|
||||
println!("verification time: {:?}", verification_time);
|
||||
println!("proof size: {:?} bytes", proof_bytes.len());
|
||||
}
|
||||
@ -8,6 +8,7 @@ use benches::{
|
||||
blake3::blake3_bench,
|
||||
blake2::blake2_bench,
|
||||
poseidon2_babybear::poseidon2_babybear_bench,
|
||||
poseidon2_bn256::poseidon2_bn256_bench,
|
||||
};
|
||||
|
||||
fn generate_bytes(size: usize) -> Vec<u8> {
|
||||
@ -64,6 +65,14 @@ pub fn main() {
|
||||
|
||||
poseidon2_babybear_bench(size);
|
||||
}
|
||||
|
||||
"poseidon2_bn256" => {
|
||||
println!("poseidon2_bn256 Benchmarking: ");
|
||||
eprintln!("Tree Depth: {:?}", size);
|
||||
eprintln!("number of inputs {:?}", (1 << size));
|
||||
|
||||
poseidon2_bn256_bench(size);
|
||||
}
|
||||
|
||||
_ => {
|
||||
println!("Wrong Benchmark Name!");
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user