mnt_miller_loop.hpp

Go to the documentation of this file.

 
#ifndef LIBSNARK_GADGETLIB1_GADGETS_PAIRING_MNT_MNT_MILLER_LOOP_HPP_
#define LIBSNARK_GADGETLIB1_GADGETS_PAIRING_MNT_MNT_MILLER_LOOP_HPP_
 
#include "libsnark/gadgetlib1/gadgets/pairing/mnt/mnt_pairing_params.hpp"
#include "libsnark/gadgetlib1/gadgets/pairing/mnt/mnt_precomputation.hpp"
 
#include <memory>
 
namespace libsnark
{
 
template<typename ppT>
class mnt_miller_loop_dbl_line_eval : public gadget<libff::Fr<ppT>>
{
public:
    typedef libff::Fr<ppT> FieldT;
    typedef libff::Fqe<other_curve<ppT>> FqeT;
    typedef libff::Fqk<other_curve<ppT>> FqkT;
 
    mnt_G1_precomputation<ppT> prec_P;
    mnt_precompute_G2_gadget_coeffs<ppT> c;
    std::shared_ptr<Fqk_variable<ppT>> &g_RR_at_P; // reference from outside
 
    std::shared_ptr<Fqe_variable<ppT>> gamma_twist;
    std::shared_ptr<Fqe_variable<ppT>> g_RR_at_P_c1;
    std::shared_ptr<Fqe_mul_by_lc_gadget<ppT>> compute_g_RR_at_P_c1;
 
    mnt_miller_loop_dbl_line_eval(
        protoboard<FieldT> &pb,
        const mnt_G1_precomputation<ppT> &prec_P,
        const mnt_precompute_G2_gadget_coeffs<ppT> &c,
        std::shared_ptr<Fqk_variable<ppT>> &g_RR_at_P,
        const std::string &annotation_prefix);
    void generate_r1cs_constraints();
    void generate_r1cs_witness();
};
 
template<typename ppT>
class mnt_miller_loop_add_line_eval : public gadget<libff::Fr<ppT>>
{
public:
    typedef libff::Fr<ppT> FieldT;
    typedef libff::Fqe<other_curve<ppT>> FqeT;
    typedef libff::Fqk<other_curve<ppT>> FqkT;
 
    bool invert_Q;
    mnt_G1_precomputation<ppT> prec_P;
    mnt_precompute_G2_gadget_coeffs<ppT> c;
    G2_variable<ppT> Q;
    std::shared_ptr<Fqk_variable<ppT>> &g_RQ_at_P; // reference from outside
 
    std::shared_ptr<Fqe_variable<ppT>> gamma_twist;
    std::shared_ptr<Fqe_variable<ppT>> g_RQ_at_P_c1;
    std::shared_ptr<Fqe_mul_by_lc_gadget<ppT>> compute_g_RQ_at_P_c1;
 
    mnt_miller_loop_add_line_eval(
        protoboard<FieldT> &pb,
        const bool invert_Q,
        const mnt_G1_precomputation<ppT> &prec_P,
        const mnt_precompute_G2_gadget_coeffs<ppT> &c,
        const G2_variable<ppT> &Q,
        std::shared_ptr<Fqk_variable<ppT>> &g_RQ_at_P,
        const std::string &annotation_prefix);
    void generate_r1cs_constraints();
    void generate_r1cs_witness();
};
 
template<typename ppT>
class mnt_miller_loop_gadget : public gadget<libff::Fr<ppT>>
{
public:
    typedef libff::Fr<ppT> FieldT;
    typedef libff::Fqe<other_curve<ppT>> FqeT;
    typedef libff::Fqk<other_curve<ppT>> FqkT;
    typedef typename mnt_pairing_params<ppT>::Fqk_special_mul_gadget_type
        Fqk_special_mul_gadget;
 
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_Ps;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_Ps;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> fs;
 
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps;
 
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls;
    std::vector<std::shared_ptr<Fqk_sqr_gadget<ppT>>> dbl_sqrs;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls;
 
    size_t f_count;
    size_t add_count;
    size_t dbl_count;
 
    mnt_G1_precomputation<ppT> prec_P;
    mnt_G2_precomputation<ppT> prec_Q;
    Fqk_variable<ppT> result;
 
    mnt_miller_loop_gadget(
        protoboard<FieldT> &pb,
        const mnt_G1_precomputation<ppT> &prec_P,
        const mnt_G2_precomputation<ppT> &prec_Q,
        const Fqk_variable<ppT> &result,
        const std::string &annotation_prefix);
    void generate_r1cs_constraints();
    void generate_r1cs_witness();
};
 
template<typename ppT>
class mnt_e_over_e_miller_loop_gadget : public gadget<libff::Fr<ppT>>
{
public:
    typedef libff::Fr<ppT> FieldT;
    typedef libff::Fqe<other_curve<ppT>> FqeT;
    typedef libff::Fqk<other_curve<ppT>> FqkT;
    typedef typename mnt_pairing_params<ppT>::Fqk_special_mul_gadget_type
        Fqk_special_mul_gadget;
 
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P1s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P1s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P2s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P2s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> fs;
 
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps1;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps1;
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps2;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps2;
 
    std::vector<std::shared_ptr<Fqk_sqr_gadget<ppT>>> dbl_sqrs;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls1;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls1;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls2;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls2;
 
    size_t f_count;
    size_t add_count;
    size_t dbl_count;
 
    mnt_G1_precomputation<ppT> prec_P1;
    mnt_G2_precomputation<ppT> prec_Q1;
    mnt_G1_precomputation<ppT> prec_P2;
    mnt_G2_precomputation<ppT> prec_Q2;
    Fqk_variable<ppT> result;
 
    mnt_e_over_e_miller_loop_gadget(
        protoboard<FieldT> &pb,
        const mnt_G1_precomputation<ppT> &prec_P1,
        const mnt_G2_precomputation<ppT> &prec_Q1,
        const mnt_G1_precomputation<ppT> &prec_P2,
        const mnt_G2_precomputation<ppT> &prec_Q2,
        const Fqk_variable<ppT> &result,
        const std::string &annotation_prefix);
    void generate_r1cs_constraints();
    void generate_r1cs_witness();
};
 
template<typename ppT>
class mnt_e_times_e_over_e_miller_loop_gadget : public gadget<libff::Fr<ppT>>
{
public:
    typedef libff::Fr<ppT> FieldT;
    typedef libff::Fqe<other_curve<ppT>> FqeT;
    typedef libff::Fqk<other_curve<ppT>> FqkT;
    typedef typename mnt_pairing_params<ppT>::Fqk_special_mul_gadget_type
        Fqk_special_mul_gadget;
 
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P1s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P1s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P2s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P2s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P3s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P3s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> fs;
 
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps1;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps1;
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps2;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps2;
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps3;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps3;
 
    std::vector<std::shared_ptr<Fqk_sqr_gadget<ppT>>> dbl_sqrs;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls1;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls1;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls2;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls2;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls3;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls3;
 
    size_t f_count;
    size_t add_count;
    size_t dbl_count;
 
    mnt_G1_precomputation<ppT> prec_P1;
    mnt_G2_precomputation<ppT> prec_Q1;
    mnt_G1_precomputation<ppT> prec_P2;
    mnt_G2_precomputation<ppT> prec_Q2;
    mnt_G1_precomputation<ppT> prec_P3;
    mnt_G2_precomputation<ppT> prec_Q3;
    Fqk_variable<ppT> result;
 
    mnt_e_times_e_over_e_miller_loop_gadget(
        protoboard<FieldT> &pb,
        const mnt_G1_precomputation<ppT> &prec_P1,
        const mnt_G2_precomputation<ppT> &prec_Q1,
        const mnt_G1_precomputation<ppT> &prec_P2,
        const mnt_G2_precomputation<ppT> &prec_Q2,
        const mnt_G1_precomputation<ppT> &prec_P3,
        const mnt_G2_precomputation<ppT> &prec_Q3,
        const Fqk_variable<ppT> &result,
        const std::string &annotation_prefix);
    void generate_r1cs_constraints();
    void generate_r1cs_witness();
};
 
template<typename ppT>
class mnt_e_times_e_times_e_over_e_miller_loop_gadget
    : public gadget<libff::Fr<ppT>>
{
public:
    typedef libff::Fr<ppT> FieldT;
    typedef libff::Fqe<other_curve<ppT>> FqeT;
    typedef libff::Fqk<other_curve<ppT>> FqkT;
    typedef typename mnt_pairing_params<ppT>::Fqk_special_mul_gadget_type
        Fqk_special_mul_gadget;
 
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P1s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P1s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P2s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P2s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P3s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P3s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RR_at_P4s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> g_RQ_at_P4s;
    std::vector<std::shared_ptr<Fqk_variable<ppT>>> fs;
 
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps1;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps1;
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps2;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps2;
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps3;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps3;
    std::vector<std::shared_ptr<mnt_miller_loop_add_line_eval<ppT>>>
        addition_steps4;
    std::vector<std::shared_ptr<mnt_miller_loop_dbl_line_eval<ppT>>>
        doubling_steps4;
 
    std::vector<std::shared_ptr<Fqk_sqr_gadget<ppT>>> dbl_sqrs;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls1;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls1;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls2;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls2;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls3;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls3;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> dbl_muls4;
    std::vector<std::shared_ptr<Fqk_special_mul_gadget>> add_muls4;
 
    size_t f_count;
    size_t add_count;
    size_t dbl_count;
 
    G1_precomputation<ppT> prec_P1;
    G2_precomputation<ppT> prec_Q1;
    G1_precomputation<ppT> prec_P2;
    G2_precomputation<ppT> prec_Q2;
    G1_precomputation<ppT> prec_P3;
    G2_precomputation<ppT> prec_Q3;
    G1_precomputation<ppT> prec_P4;
    G2_precomputation<ppT> prec_Q4;
    Fqk_variable<ppT> result;
 
    mnt_e_times_e_times_e_over_e_miller_loop_gadget(
        protoboard<FieldT> &pb,
        const G1_precomputation<ppT> &prec_P1,
        const G2_precomputation<ppT> &prec_Q1,
        const G1_precomputation<ppT> &prec_P2,
        const G2_precomputation<ppT> &prec_Q2,
        const G1_precomputation<ppT> &prec_P3,
        const G2_precomputation<ppT> &prec_Q3,
        const G1_precomputation<ppT> &prec_P4,
        const G2_precomputation<ppT> &prec_Q4,
        const Fqk_variable<ppT> &result,
        const std::string &annotation_prefix);
    void generate_r1cs_constraints();
    void generate_r1cs_witness();
};
 
} // namespace libsnark
 
#include "libsnark/gadgetlib1/gadgets/pairing/mnt/mnt_miller_loop.tcc"
 
#endif // LIBSNARK_GADGETLIB1_GADGETS_PAIRING_MNT_MNT_MILLER_LOOP_HPP_