Barretenberg
The ZK-SNARK library at the core of Aztec
Loading...
Searching...
No Matches
arithmetic_constraints.test.cpp
Go to the documentation of this file.
2#include "acir_format.hpp"
4
8
9#include <cstdint>
10#include <gtest/gtest.h>
11#include <vector>
12
13using namespace acir_format;
14
15template <typename Builder_,
16 typename AcirConstraint_,
17 size_t num_multiplication_terms,
18 size_t num_linear_terms,
19 bool overlap_mul_and_linear,
20 bool overlap_linear>
22 public:
23 using Builder = Builder_;
24 using AcirConstraint = AcirConstraint_;
25 static constexpr size_t NUM_MULTIPLICATION_TERMS = num_multiplication_terms;
26 static constexpr size_t NUM_LINEAR_TERMS = num_linear_terms;
27 static constexpr bool OVERLAP_MUL_AND_LINEAR = overlap_mul_and_linear;
28 static constexpr bool OVERLAP_LINEAR = overlap_linear;
29};
30
31template <typename Builder_,
32 typename AcirConstraint_,
33 size_t num_multiplication_terms,
34 size_t num_linear_terms,
35 bool overlap_mul_and_linear,
36 bool overlap_linear>
38 public:
39 using Builder = Builder_;
40 using AcirConstraint = AcirConstraint_;
41
43
47 static constexpr size_t num_overlap_mul_and_linear()
48 {
49 size_t result = 0;
50
51 if constexpr (overlap_mul_and_linear) {
52 result++;
53 }
54
55 if constexpr (overlap_mul_and_linear && num_multiplication_terms > 1) {
56 result++;
57 }
58
59 if constexpr (overlap_mul_and_linear && num_multiplication_terms > 2) {
60 result++;
61 }
62
63 return result;
64 }
65
67 static constexpr size_t NUM_OVERLAP_LINEAR = 1;
68 static constexpr size_t LINEAR_OFFSET = overlap_mul_and_linear ? NUM_OVERLAP_MUL_AND_LINEAR : 0U;
69
70 static size_t expected_num_gates()
71 {
72 size_t num_gates = 0;
73
74 size_t num_multiplication_gates = num_multiplication_terms;
75 num_gates += num_multiplication_gates;
76
77 // Compute the number of witnesses that have to be put into wires on top of the multiplication terms
78 size_t num_witnesses_into_wires = num_linear_terms;
79 num_witnesses_into_wires -= overlap_mul_and_linear ? NUM_OVERLAP_MUL_AND_LINEAR : 0U;
80 num_witnesses_into_wires -= overlap_linear ? NUM_OVERLAP_LINEAR : 0U;
81
82 // Update the number of required gates
83
84 // The first gate uses all wires, so we fit two new witnesses when there are multiplication terms, 4 otherwise
85 size_t num_witnesses_first_wire = num_multiplication_gates != 0 ? 2U : 4U;
86 if (num_witnesses_into_wires <= num_witnesses_first_wire) {
87 return num_multiplication_gates != 0 ? num_multiplication_gates : 1U;
88 }
89 num_witnesses_into_wires -= num_witnesses_first_wire;
90 num_gates += num_multiplication_gates != 0 ? 0U : 1U;
91
92 // All other gates don't use the last wire, so we fit one new witness per gate
93 if (num_witnesses_into_wires + 1 <= num_gates) {
94 return num_gates;
95 }
96 num_witnesses_into_wires -= (num_multiplication_gates - 1);
97
98 // Now we add the remaining witnesses
99 size_t num_additional_gates = num_witnesses_into_wires / (Builder::NUM_WIRES - 1);
100 size_t diff = num_witnesses_into_wires - num_additional_gates * (Builder::NUM_WIRES - 1);
101 num_additional_gates += diff == 0 ? 0U : 1U;
102
103 return num_gates + num_additional_gates;
104 }
105
107 public:
113 static std::vector<std::string> get_labels() { return { "None", "InvalidateConstant", "InvalidateWitness" }; }
114 };
115
117 const std::vector<std::tuple<bb::fr, std::pair<uint32_t, bb::fr>, std::pair<uint32_t, bb::fr>>>& mul_terms,
118 const std::vector<std::pair<bb::fr, std::pair<uint32_t, bb::fr>>>& linear_terms,
119 const std::vector<bb::fr>& witness_values)
120 {
121 bb::fr result = 0;
122
123 for (const auto& mul_term : mul_terms) {
124 bb::fr scalar = std::get<0>(mul_term);
125 bb::fr lhs_value = witness_values[std::get<1>(mul_term).first];
126 bb::fr rhs_value = witness_values[std::get<2>(mul_term).first];
127 result += scalar * lhs_value * rhs_value;
128 }
129
130 for (const auto& linear_term : linear_terms) {
131 bb::fr scalar = linear_term.first;
132 bb::fr value = witness_values[linear_term.second.first];
133 result += scalar * value;
134 }
135
136 return result;
137 }
138
139 void generate_constraints(AcirConstraint& arithmetic_constraint, WitnessVector& witness_values)
140 {
141 // (scalar, (lhs_index, lhs_value), (rhs_index, rhs_value))
143 // (scalar, (index, value)
145
146 mul_terms.reserve(num_multiplication_terms);
147 for (size_t idx = 0; idx < num_multiplication_terms; ++idx) {
148 bb::fr lhs_value = bb::fr::random_element();
149 bb::fr rhs_value = bb::fr::random_element();
151
152 uint32_t lhs_index = add_to_witness_and_track_indices(witness_values, lhs_value);
153 uint32_t rhs_index = add_to_witness_and_track_indices(witness_values, rhs_value);
154 mul_terms.push_back(
155 std::make_tuple(scalar, std::make_pair(lhs_index, lhs_value), std::make_pair(rhs_index, rhs_value)));
156 }
157
158 linear_terms.reserve(num_linear_terms);
159 for (size_t idx = 0; idx < num_linear_terms; ++idx) {
162
163 uint32_t index = add_to_witness_and_track_indices(witness_values, value);
164 linear_terms.push_back(std::make_pair(scalar, std::make_pair(index, value)));
165 }
166
167 // Expressions that would lead to these cases are:
168 // 1. w1 * w2 + w1
169 // 2. w1 * w2 + w3 * w4 + w1 + w4
170 // 3. w1 * w1 + w3 * w4 + w5 * w5 + w1 + w4 + w5
171 if constexpr (overlap_mul_and_linear) {
172 BB_ASSERT_GTE(num_linear_terms, 1U, "We need at least 1 linear terms when overlapping is turned on.");
174 num_multiplication_terms, 1U, "We need at least 1 multiplication terms when overlapping is turned on.");
175
176 // Overlap lhs of multiplication term with linear term
177 std::get<1>(mul_terms[0]).first = linear_terms[0].second.first;
178
179 if constexpr (num_multiplication_terms > 1 && num_linear_terms > 1) {
180 // Overlap rhs of multiplication term with linear term
181 std::get<2>(mul_terms[1]).first = linear_terms[1].second.first;
182 }
183
184 if constexpr (num_multiplication_terms > 2 && num_linear_terms > 2) {
185 // Overlap both terms in the multiplication term with linear term
186 std::get<1>(mul_terms[2]).first = linear_terms[2].second.first;
187 std::get<2>(mul_terms[2]).first = linear_terms[2].second.first;
188 }
189 }
190
191 // Expression that would lead to this case is:
192 // w1 + w1
193 if constexpr (overlap_linear) {
194 BB_ASSERT_GT(num_linear_terms,
196 "We need at least " << NUM_OVERLAP_LINEAR + LINEAR_OFFSET + 1
197 << " linear term when overlapping is turned on.");
198
199 // Overlap two linear terms
200 linear_terms[LINEAR_OFFSET].second.first = linear_terms[LINEAR_OFFSET + 1].second.first;
201 }
202
203 bb::fr result = -evaluate_expression_result(mul_terms, linear_terms, witness_values);
204
205 // Build the Acir::Expression
206 Acir::Expression expression;
207 for (const auto& mul_term : mul_terms) {
208 expression.mul_terms.push_back(std::make_tuple(std::get<0>(mul_term).to_buffer(),
209 Acir::Witness(std::get<1>(mul_term).first),
210 Acir::Witness(std::get<2>(mul_term).first)));
211 }
212 for (const auto& linear_term : linear_terms) {
213 expression.linear_combinations.push_back(
214 std::make_tuple(linear_term.first.to_buffer(), Acir::Witness(linear_term.second.first)));
215 }
216 expression.q_c = result.to_buffer();
217
218 // Construct the big quad constraint
219 Acir::Opcode::AssertZero acir_assert_zero{ .value = expression };
220 AcirFormat dummy_acir_format;
221 assert_zero_to_quad_constraints(acir_assert_zero, dummy_acir_format, 0);
222
223 // Check that the construction worked as expected
224 size_t EXPECTED_NUM_GATES = expected_num_gates();
225 if (EXPECTED_NUM_GATES > 1) {
226 BB_ASSERT(dummy_acir_format.quad_constraints.empty());
227 BB_ASSERT_EQ(dummy_acir_format.big_quad_constraints.size(), 1U);
228 BB_ASSERT_EQ(dummy_acir_format.big_quad_constraints[0].size(), EXPECTED_NUM_GATES);
229 } else {
230 BB_ASSERT(dummy_acir_format.big_quad_constraints.empty());
231 BB_ASSERT_EQ(dummy_acir_format.quad_constraints.size(), 1U);
232 }
233
234 if constexpr (IS_BIG_QUAD) {
235 arithmetic_constraint = dummy_acir_format.big_quad_constraints[0];
236 } else {
237 arithmetic_constraint = dummy_acir_format.quad_constraints[0];
238 }
239 }
240
242 WitnessVector& witness_values,
243 const typename InvalidWitness::Target& invalid_witness_target)
244 {
245 switch (invalid_witness_target) {
247 break;
249 // Invalidate the equation by changing the constant term
250 if constexpr (IS_BIG_QUAD) {
251 constraint[0].const_scaling += bb::fr::one();
252 } else {
253 constraint.const_scaling += bb::fr::one();
254 }
255 break;
256 }
258 // Invalidate the equation by changing one of the witness values
259 if constexpr (IS_BIG_QUAD) {
260 witness_values[constraint[0].a] += bb::fr::one();
261 } else {
262 witness_values[constraint.a] += bb::fr::one();
263 }
264 break;
265 }
266 };
267 };
268};
269
270template <typename ArithmeticConstraintParams_>
272 : public ::testing::Test,
273 public TestClass<ArithmeticConstraintsTestingFunctions<typename ArithmeticConstraintParams_::Builder,
274 typename ArithmeticConstraintParams_::AcirConstraint,
275 ArithmeticConstraintParams_::NUM_MULTIPLICATION_TERMS,
276 ArithmeticConstraintParams_::NUM_LINEAR_TERMS,
277 ArithmeticConstraintParams_::OVERLAP_MUL_AND_LINEAR,
278 ArithmeticConstraintParams_::OVERLAP_LINEAR>> {
279 protected:
281};
282
284using BigQuadConstraintConfigs = testing::Types<
286 // requiring 2 gates
291 // requiring 2 gates
294 // requiring 2 gates
296 // requiring 2 gates
301 // requiring 2 gates
304 // requiring 2 gates
305
307
308TYPED_TEST(BigQuadConstraintTest, GenerateVKFromConstraints)
309{
310 using Flavor =
312 TestFixture::template test_vk_independence<Flavor>();
313}
314
316{
317 TestFixture::test_tampering();
318}
319
320template <typename ArithmeticConstraintParams_>
322 : public ::testing::Test,
323 public TestClass<ArithmeticConstraintsTestingFunctions<typename ArithmeticConstraintParams_::Builder,
324 typename ArithmeticConstraintParams_::AcirConstraint,
325 ArithmeticConstraintParams_::NUM_MULTIPLICATION_TERMS,
326 ArithmeticConstraintParams_::NUM_LINEAR_TERMS,
327 ArithmeticConstraintParams_::OVERLAP_MUL_AND_LINEAR,
328 ArithmeticConstraintParams_::OVERLAP_LINEAR>> {
329 protected:
331};
332
334using QuadConstraintConfigs = testing::Types<
349
351
352TYPED_TEST(QuadConstraintTest, GenerateVKFromConstraints)
353{
354 using Flavor =
356 TestFixture::template test_vk_independence<Flavor>();
357}
358
360{
361 TestFixture::test_tampering();
362}
testing::Types< ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 1, 0, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 1, 1, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 1, 2, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 1, 3, false, true >, ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 1, 4, true, true >, ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 0, 4, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, QuadConstraint, 0, 4, false, true >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 1, 0, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 1, 1, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 1, 2, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 1, 3, false, true >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 1, 4, true, true >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 0, 4, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, QuadConstraint, 0, 5, false, true > > QuadConstraintConfigs
testing::Types< ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 1, 3, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 0, 5, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 2, 0, false, false >, ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 3, 3, true, false >, ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 1, 4, false, true >, ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 5, 5, true, true >, ArithmeticConstraintParams< UltraCircuitBuilder, BigQuadConstraint, 0, 6, false, true >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 1, 3, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 0, 5, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 2, 0, false, false >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 3, 3, true, false >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 1, 4, false, true >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 5, 5, true, true >, ArithmeticConstraintParams< MegaCircuitBuilder, BigQuadConstraint, 0, 6, false, true > > BigQuadConstraintConfigs
std::vector< mul_quad_< bb::fr > > BigQuadConstraint
#define BB_ASSERT(expression,...)
Definition assert.hpp:67
#define BB_ASSERT_GTE(left, right,...)
Definition assert.hpp:122
#define BB_ASSERT_GT(left, right,...)
Definition assert.hpp:107
#define BB_ASSERT_EQ(actual, expected,...)
Definition assert.hpp:77
static constexpr size_t NUM_MULTIPLICATION_TERMS
static bb::fr evaluate_expression_result(const std::vector< std::tuple< bb::fr, std::pair< uint32_t, bb::fr >, std::pair< uint32_t, bb::fr > > > &mul_terms, const std::vector< std::pair< bb::fr, std::pair< uint32_t, bb::fr > > > &linear_terms, const std::vector< bb::fr > &witness_values)
static constexpr size_t num_overlap_mul_and_linear()
Compute the number of elements to overlap between multiplication and linear terms.
void generate_constraints(AcirConstraint &arithmetic_constraint, WitnessVector &witness_values)
void invalidate_witness(AcirConstraint &constraint, WitnessVector &witness_values, const typename InvalidWitness::Target &invalid_witness_target)
std::vector< bb::fr > WitnessVector
std::vector< uint32_t > add_to_witness_and_track_indices(WitnessVector &witness, const T &input)
Append values to a witness vector and track their indices.
Definition utils.hpp:70
void assert_zero_to_quad_constraints(Acir::Opcode::AssertZero const &arg, AcirFormat &af, size_t opcode_index)
Single entrypoint for processing arithmetic (AssertZero) opcodes.
std::filesystem::path bb_crs_path()
void init_file_crs_factory(const std::filesystem::path &path)
TYPED_TEST_SUITE(BoomerangRecursiveVerifierTest, Flavors)
TYPED_TEST(ShpleminiTest, CorrectnessOfMultivariateClaimBatching)
constexpr decltype(auto) get(::tuplet::tuple< T... > &&t) noexcept
Definition tuple.hpp:13
std::vector< uint8_t > to_buffer(T const &value)
std::vector< std::tuple< std::vector< uint8_t >, Acir::Witness > > linear_combinations
Definition acir.hpp:4006
std::vector< uint8_t > q_c
Definition acir.hpp:4007
std::vector< std::tuple< std::vector< uint8_t >, Acir::Witness, Acir::Witness > > mul_terms
Definition acir.hpp:4005
Acir::Expression value
Definition acir.hpp:4365
std::vector< QuadConstraints > quad_constraints
std::vector< std::vector< QuadConstraints > > big_quad_constraints
static constexpr field one()
static field random_element(numeric::RNG *engine=nullptr) noexcept
BB_INLINE std::vector< uint8_t > to_buffer() const