Safe Haskell	None
Language	Haskell2010

Bulletproofs.ArithmeticCircuit

Synopsis

generateProof :: forall m. MonadRandom m => ArithCircuit Fr -> ArithWitness Fr PA -> m (ArithCircuitProof Fr PA)
verifyProof :: [PA] -> ArithCircuitProof Fr PA -> ArithCircuit Fr -> Bool
data ArithCircuitProof f p = ArithCircuitProof {
- tBlinding :: f
- mu :: f
- t :: f
- aiCommit :: p
- aoCommit :: p
- sCommit :: p
- tCommits :: [p]
- productProof :: InnerProductProof f p
}
data ArithCircuit f = ArithCircuit {
- weights :: GateWeights f
- commitmentWeights :: [[f]]
- cs :: [f]
}
data ArithWitness f p = ArithWitness {
- assignment :: Assignment f
- commitments :: [p]
- commitBlinders :: [f]
}
data GateWeights f = GateWeights {
- wL :: [[f]]
- wR :: [[f]]
- wO :: [[f]]
}
data Assignment f = Assignment {
- aL :: [f]
- aR :: [f]
- aO :: [f]
}

Documentation

generateProof :: forall m. MonadRandom m => ArithCircuit Fr -> ArithWitness Fr PA -> m (ArithCircuitProof Fr PA) Source #

Generate a zero-knowledge proof of computation for an arithmetic circuit with a valid witness

verifyProof :: [PA] -> ArithCircuitProof Fr PA -> ArithCircuit Fr -> Bool Source #

Verify that a zero-knowledge proof holds for an arithmetic circuit given committed input values

data ArithCircuitProof f p Source #

Constructors

ArithCircuitProof

Fields

tBlinding :: f
Blinding factor of the T1 and T2 commitments, combined into the form required to make the committed version of the x-polynomial add up
mu :: f
Blinding factor required for the Verifier to verify commitments A, S
t :: f
Dot product of vectors l and r that prove knowledge of the value in range t = t(x) = l(x) · r(x)
aiCommit :: p
Commitment to vectors aL and aR
aoCommit :: p
Commitment to vectors aO
sCommit :: p
Commitment to new vectors sL, sR, created at random by the Prover
tCommits :: [p]
Commitments to t1, t3, t4, t5, t6
productProof :: InnerProductProof f p

Instances

(Eq f, Eq p) => Eq (ArithCircuitProof f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods (==) :: ArithCircuitProof f p -> ArithCircuitProof f p -> Bool # (/=) :: ArithCircuitProof f p -> ArithCircuitProof f p -> Bool #
(Show f, Show p) => Show (ArithCircuitProof f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods showsPrec :: Int -> ArithCircuitProof f p -> ShowS # show :: ArithCircuitProof f p -> String # showList :: [ArithCircuitProof f p] -> ShowS #
Generic (ArithCircuitProof f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Associated Types type Rep (ArithCircuitProof f p) :: Type -> Type # Methods from :: ArithCircuitProof f p -> Rep (ArithCircuitProof f p) x # to :: Rep (ArithCircuitProof f p) x -> ArithCircuitProof f p #
(NFData f, NFData p) => NFData (ArithCircuitProof f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods rnf :: ArithCircuitProof f p -> () #
type Rep (ArithCircuitProof f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal type Rep (ArithCircuitProof f p) = D1 (MetaData "ArithCircuitProof" "Bulletproofs.ArithmeticCircuit.Internal" "bulletproofs-1.1.0-FP4S76deUzfBfGRiiGUv0Q" False) (C1 (MetaCons "ArithCircuitProof" PrefixI True) (((S1 (MetaSel (Just "tBlinding") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 f) :: S1 (MetaSel (Just "mu") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 f)) :: (S1 (MetaSel (Just "t") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 f) :: S1 (MetaSel (Just "aiCommit") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 p))) :: ((S1 (MetaSel (Just "aoCommit") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 p) :: S1 (MetaSel (Just "sCommit") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 p)) :: (S1 (MetaSel (Just "tCommits") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [p]) :*: S1 (MetaSel (Just "productProof") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 (InnerProductProof f p))))))

data ArithCircuit f Source #

Constructors

ArithCircuit
Fields weights :: GateWeights f Weights for vectors of left and right inputs and for vector of outputs commitmentWeights :: [[f]] Weigths for a commitments V of rank m cs :: [f] Vector of constants of size Q

Instances

Eq f => Eq (ArithCircuit f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods (==) :: ArithCircuit f -> ArithCircuit f -> Bool # (/=) :: ArithCircuit f -> ArithCircuit f -> Bool #
Show f => Show (ArithCircuit f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods showsPrec :: Int -> ArithCircuit f -> ShowS # show :: ArithCircuit f -> String # showList :: [ArithCircuit f] -> ShowS #
Generic (ArithCircuit f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Associated Types type Rep (ArithCircuit f) :: Type -> Type # Methods from :: ArithCircuit f -> Rep (ArithCircuit f) x # to :: Rep (ArithCircuit f) x -> ArithCircuit f #
Arbitrary (ArithCircuit Fr) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods arbitrary :: Gen (ArithCircuit Fr) # shrink :: ArithCircuit Fr -> [ArithCircuit Fr] #
NFData f => NFData (ArithCircuit f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods rnf :: ArithCircuit f -> () #
type Rep (ArithCircuit f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal type Rep (ArithCircuit f) = D1 (MetaData "ArithCircuit" "Bulletproofs.ArithmeticCircuit.Internal" "bulletproofs-1.1.0-FP4S76deUzfBfGRiiGUv0Q" False) (C1 (MetaCons "ArithCircuit" PrefixI True) (S1 (MetaSel (Just "weights") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 (GateWeights f)) :: (S1 (MetaSel (Just "commitmentWeights") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [[f]]) :: S1 (MetaSel (Just "cs") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [f]))))

data ArithWitness f p Source #

Constructors

ArithWitness
Fields assignment :: Assignment f Vectors of left and right inputs and vector of outputs commitments :: [p] Vector of commited input values ∈ F^m commitBlinders :: [f] Vector of blinding factors for input values ∈ F^m

Instances

(Eq p, Eq f) => Eq (ArithWitness f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods (==) :: ArithWitness f p -> ArithWitness f p -> Bool # (/=) :: ArithWitness f p -> ArithWitness f p -> Bool #
(Show p, Show f) => Show (ArithWitness f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods showsPrec :: Int -> ArithWitness f p -> ShowS # show :: ArithWitness f p -> String # showList :: [ArithWitness f p] -> ShowS #
Generic (ArithWitness f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Associated Types type Rep (ArithWitness f p) :: Type -> Type # Methods from :: ArithWitness f p -> Rep (ArithWitness f p) x # to :: Rep (ArithWitness f p) x -> ArithWitness f p #
Arbitrary (ArithWitness Fr PA) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods arbitrary :: Gen (ArithWitness Fr PA) # shrink :: ArithWitness Fr PA -> [ArithWitness Fr PA] #
(NFData p, NFData f) => NFData (ArithWitness f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods rnf :: ArithWitness f p -> () #
type Rep (ArithWitness f p) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal type Rep (ArithWitness f p) = D1 (MetaData "ArithWitness" "Bulletproofs.ArithmeticCircuit.Internal" "bulletproofs-1.1.0-FP4S76deUzfBfGRiiGUv0Q" False) (C1 (MetaCons "ArithWitness" PrefixI True) (S1 (MetaSel (Just "assignment") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 (Assignment f)) :: (S1 (MetaSel (Just "commitments") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [p]) :: S1 (MetaSel (Just "commitBlinders") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [f]))))

data GateWeights f Source #

Constructors

GateWeights
Fields wL :: [[f]] WL ∈ F^(Q x n) wR :: [[f]] WR ∈ F^(Q x n) wO :: [[f]] WO ∈ F^(Q x n)

Instances

Eq f => Eq (GateWeights f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods (==) :: GateWeights f -> GateWeights f -> Bool # (/=) :: GateWeights f -> GateWeights f -> Bool #
Show f => Show (GateWeights f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods showsPrec :: Int -> GateWeights f -> ShowS # show :: GateWeights f -> String # showList :: [GateWeights f] -> ShowS #
Generic (GateWeights f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Associated Types type Rep (GateWeights f) :: Type -> Type # Methods from :: GateWeights f -> Rep (GateWeights f) x # to :: Rep (GateWeights f) x -> GateWeights f #
NFData f => NFData (GateWeights f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods rnf :: GateWeights f -> () #
type Rep (GateWeights f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal type Rep (GateWeights f) = D1 (MetaData "GateWeights" "Bulletproofs.ArithmeticCircuit.Internal" "bulletproofs-1.1.0-FP4S76deUzfBfGRiiGUv0Q" False) (C1 (MetaCons "GateWeights" PrefixI True) (S1 (MetaSel (Just "wL") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [[f]]) :: (S1 (MetaSel (Just "wR") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [[f]]) :: S1 (MetaSel (Just "wO") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [[f]]))))

data Assignment f Source #

Constructors

Assignment
Fields aL :: [f] aL ∈ F^n. Vector of left inputs of each multiplication gate aR :: [f] aR ∈ F^n. Vector of right inputs of each multiplication gate aO :: [f] aO ∈ F^n. Vector of outputs of each multiplication gate

Instances

Eq f => Eq (Assignment f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods (==) :: Assignment f -> Assignment f -> Bool # (/=) :: Assignment f -> Assignment f -> Bool #
Show f => Show (Assignment f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods showsPrec :: Int -> Assignment f -> ShowS # show :: Assignment f -> String # showList :: [Assignment f] -> ShowS #
Generic (Assignment f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Associated Types type Rep (Assignment f) :: Type -> Type # Methods from :: Assignment f -> Rep (Assignment f) x # to :: Rep (Assignment f) x -> Assignment f #
Arbitrary (Assignment Fr) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods arbitrary :: Gen (Assignment Fr) # shrink :: Assignment Fr -> [Assignment Fr] #
NFData f => NFData (Assignment f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal Methods rnf :: Assignment f -> () #
type Rep (Assignment f) Source #
Instance details Defined in Bulletproofs.ArithmeticCircuit.Internal type Rep (Assignment f) = D1 (MetaData "Assignment" "Bulletproofs.ArithmeticCircuit.Internal" "bulletproofs-1.1.0-FP4S76deUzfBfGRiiGUv0Q" False) (C1 (MetaCons "Assignment" PrefixI True) (S1 (MetaSel (Just "aL") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [f]) :: (S1 (MetaSel (Just "aR") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [f]) :: S1 (MetaSel (Just "aO") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [f]))))