Manages ECC operations for the Goblin proving system. More...

#include <ecc_op_queue.hpp>

Public Member Functions
	ECCOpQueue ()
	Instantiate an initial ECC op subtable.

void	initialize_new_subtable ()
	Initialize a new subtable for eccvm and ultra ops with the given merge settings.

size_t	get_current_subtable_size () const

void	merge (MergeSettings settings=MergeSettings::PREPEND, std::optional< size_t > ultra_fixed_offset=std::nullopt)

std::array< Polynomial< Fr >, ULTRA_TABLE_WIDTH >	construct_ultra_ops_table_columns () const

std::array< Polynomial< Fr >, ULTRA_TABLE_WIDTH >	construct_previous_ultra_ops_table_columns () const

std::array< Polynomial< Fr >, ULTRA_TABLE_WIDTH >	construct_current_ultra_ops_subtable_columns () const

void	construct_full_eccvm_ops_table ()

void	construct_full_ultra_ops_table ()

size_t	get_ultra_ops_table_num_rows () const

size_t	get_ultra_ops_count () const

size_t	get_current_ultra_ops_subtable_num_rows () const

size_t	get_previous_ultra_ops_table_num_rows () const

std::vector< ECCVMOperation > &	get_eccvm_ops ()

std::vector< UltraOp > &	get_ultra_ops ()

size_t	get_num_msm_rows () const
	Get the number of rows in the 'msm' column section, for all msms in the circuit.

size_t	get_num_rows () const
	Get the number of rows for the current ECCVM circuit.

uint32_t	get_number_of_muls () const
	Get number of muls for the current ECCVM circuit.

void	set_eccvm_ops_for_fuzzing (std::vector< ECCVMOperation > &eccvm_ops_in)
	A fuzzing only method for setting eccvm ops directly.

void	add_erroneous_equality_op_for_testing ()
	A testing only method that adds an erroneous equality op to the eccvm ops.

void	empty_row_for_testing ()
	Write empty row to queue.

Point	get_accumulator ()

UltraOp	add_accumulate (const Point &to_add)
	Write point addition op to queue and natively perform addition.

UltraOp	mul_accumulate (const Point &to_mul, const Fr &scalar)
	Write multiply and add op to queue and natively perform operation.

UltraOp	no_op_ultra_only ()
	Writes a no op (i.e. two zero rows) to the ultra ops table but adds no eccvm operations.

UltraOp	random_op_ultra_only ()
	Writes randomness to the ultra ops table but adds no eccvm operations.

UltraOp	eq_and_reset ()
	Write equality op using internal accumulator point.

UltraOp	append_hiding_op (const Fq &Px, const Fq &Py)
	Add a hiding op with random Px, Py values to both ECCVM and Ultra ops tables.

Static Public Attributes
static const size_t	OP_QUEUE_SIZE = 1 << CONST_OP_QUEUE_LOG_SIZE

Private Types
using	Curve = curve::BN254

using	Point = Curve::AffineElement

using	Fr = Curve::ScalarField

using	Fq = Curve::BaseField

Private Member Functions
void	append_eccvm_op (const ECCVMOperation &op)
	Append an eccvm operation to the eccvm ops table; update the eccvm row tracker.

UltraOp	construct_and_populate_ultra_ops (EccOpCode op_code, const Point &point, const Fr &scalar=Fr::zero())
	Given an ecc operation and its inputs, decompose into ultra format and populate ultra_ops.

Private Attributes
Point	point_at_infinity = Curve::Group::affine_point_at_infinity

Point	accumulator = point_at_infinity

EccvmOpsTable	eccvm_ops_table

UltraEccOpsTable	ultra_ops_table

std::vector< ECCVMOperation >	eccvm_ops_reconstructed

std::vector< UltraOp >	ultra_ops_reconstructed

EccvmRowTracker	eccvm_row_tracker

ECCVMOperation	hiding_op_for_eccvm

bool	has_hiding_op = false

Static Private Attributes
static constexpr size_t	ULTRA_TABLE_WIDTH = UltraEccOpsTable::TABLE_WIDTH

Detailed Description

Manages ECC operations for the Goblin proving system.

This class maintains two parallel representations of ECC operations:

ECCVM format (eccvm_ops_table): Native operations for the ECCVM circuit. Each op is one row: {opcode, base_point, z1, z2, mul_scalar_full}
Ultra format (ultra_ops_table): Width-4 representation for Mega circuits and Translator. Each op spans 2 rows: Row 0: OP | X_lo | X_hi | Y_lo Row 1: 0 | Y_hi | z1 | z2

Operations are added via add_accumulate(), mul_accumulate(), and eq_and_reset(). Each operation:

Updates the native accumulator (shadow computation for verification)
Appends to both ECCVM and Ultra tables

Tables grow via prepending subtables (one per circuit in an IVC). The deque-based storage avoids expensive memory reallocation. See ecc_ops_table.hpp for details.

TODO(https://github.com/AztecProtocol/barretenberg/issues/1267): consider possible efficiency improvements

Definition at line 38 of file ecc_op_queue.hpp.

Member Typedef Documentation

◆ Curve

using bb::ECCOpQueue::Curve = curve::BN254

private

Definition at line 39 of file ecc_op_queue.hpp.

◆ Fq

using bb::ECCOpQueue::Fq = Curve::BaseField

private

Definition at line 42 of file ecc_op_queue.hpp.

◆ Fr

using bb::ECCOpQueue::Fr = Curve::ScalarField

private

Definition at line 41 of file ecc_op_queue.hpp.

◆ Point

using bb::ECCOpQueue::Point = Curve::AffineElement

private

Definition at line 40 of file ecc_op_queue.hpp.

Constructor & Destructor Documentation

◆ ECCOpQueue()

bb::ECCOpQueue::ECCOpQueue ( )

inline

Instantiate an initial ECC op subtable.

Definition at line 68 of file ecc_op_queue.hpp.

Member Function Documentation

◆ add_accumulate()

UltraOp bb::ECCOpQueue::add_accumulate ( const Point & to_add )

inline

Write point addition op to queue and natively perform addition.

Parameters

to_add

Definition at line 198 of file ecc_op_queue.hpp.

◆ add_erroneous_equality_op_for_testing()

void bb::ECCOpQueue::add_erroneous_equality_op_for_testing ( )

inline

A testing only method that adds an erroneous equality op to the eccvm ops.

May be used to ensure that ECCVM responds as expected when encountering a bad op

Definition at line 174 of file ecc_op_queue.hpp.

◆ append_eccvm_op()

void bb::ECCOpQueue::append_eccvm_op ( const ECCVMOperation & op )

inlineprivate

Append an eccvm operation to the eccvm ops table; update the eccvm row tracker.

Definition at line 370 of file ecc_op_queue.hpp.

◆ append_hiding_op()

UltraOp bb::ECCOpQueue::append_hiding_op	(	const Fq &	Px,
		const Fq &	Py
	)

inline

Add a hiding op with random Px, Py values to both ECCVM and Ultra ops tables.

The hiding op contributes random Px, Py field elements to both ECCVM transcript polynomials and Translator's accumulated_result, providing statistical hiding.

In ECCVM: stored separately and prepended to eccvm_ops_reconstructed at index 0 during get_eccvm_ops(). This places it at row 1 in the ECCVM transcript table (row 0 is the zero row for shifts), where lagrange_second = 1. The eq and on-curve constraints are gated by (1 - lagrange_second) so they don't apply to this row. The transcript relation enforces q_eq = 1 and q_reset = 1 at this row, ensuring the accumulator is reset so that is_accumulator_empty = 1 at row 2 (the first real op row).

In Ultra/Translator: appended to current subtable through normal flow, landing in the accumulation range.

The hiding op uses opcode q_eq = 1, q_reset = 1 (value = 3) to preserve the Px, Py values in the transcript. The eq constraint is gated by (1 - lagrange_second) so it doesn't actually check equality. The on-curve check is similarly gated. q_reset = 1 is required for Translator compatibility (only opcodes {0,3,4,8} are allowed).

This method should be called ONCE per IVC in the tail kernel, after the random non-ops.

Parameters

Px	Random field element (not necessarily a valid x-coordinate on BN254)
Py	Random field element (not necessarily a valid y-coordinate on BN254)

Returns: The UltraOp that was pushed to the table (for use by circuit builder to add gates)

Definition at line 314 of file ecc_op_queue.hpp.

◆ construct_and_populate_ultra_ops()

UltraOp bb::ECCOpQueue::construct_and_populate_ultra_ops	(	EccOpCode	op_code,
		const Point &	point,
		const Fr &	scalar = `Fr::zero()`
	)

inlineprivate

Given an ecc operation and its inputs, decompose into ultra format and populate ultra_ops.

Parameters

op_code
point
scalar

Returns: UltraOp

Definition at line 383 of file ecc_op_queue.hpp.

◆ construct_current_ultra_ops_subtable_columns()

std::array< Polynomial< Fr >, ULTRA_TABLE_WIDTH > bb::ECCOpQueue::construct_current_ultra_ops_subtable_columns ( ) const

inline

Definition at line 102 of file ecc_op_queue.hpp.

◆ construct_full_eccvm_ops_table()

void bb::ECCOpQueue::construct_full_eccvm_ops_table ( )

inline

Definition at line 108 of file ecc_op_queue.hpp.

◆ construct_full_ultra_ops_table()

void bb::ECCOpQueue::construct_full_ultra_ops_table ( )

inline

Definition at line 111 of file ecc_op_queue.hpp.

◆ construct_previous_ultra_ops_table_columns()

std::array< Polynomial< Fr >, ULTRA_TABLE_WIDTH > bb::ECCOpQueue::construct_previous_ultra_ops_table_columns ( ) const

inline

Definition at line 96 of file ecc_op_queue.hpp.

◆ construct_ultra_ops_table_columns()

std::array< Polynomial< Fr >, ULTRA_TABLE_WIDTH > bb::ECCOpQueue::construct_ultra_ops_table_columns ( ) const

inline

Definition at line 89 of file ecc_op_queue.hpp.

◆ empty_row_for_testing()

void bb::ECCOpQueue::empty_row_for_testing ( )

inline

Write empty row to queue.

Warning: This is for testing purposes only. Currently no valid use case.

Definition at line 185 of file ecc_op_queue.hpp.

◆ eq_and_reset()

UltraOp bb::ECCOpQueue::eq_and_reset ( )

inline

Write equality op using internal accumulator point.

Returns: current internal accumulator point (prior to reset to 0)

Definition at line 277 of file ecc_op_queue.hpp.

◆ get_accumulator()

Point bb::ECCOpQueue::get_accumulator ( )

inline

Definition at line 191 of file ecc_op_queue.hpp.

◆ get_current_subtable_size()

size_t bb::ECCOpQueue::get_current_subtable_size ( ) const

inline

Definition at line 80 of file ecc_op_queue.hpp.

◆ get_current_ultra_ops_subtable_num_rows()

size_t bb::ECCOpQueue::get_current_ultra_ops_subtable_num_rows ( ) const

inline

Definition at line 115 of file ecc_op_queue.hpp.

◆ get_eccvm_ops()

std::vector< ECCVMOperation > & bb::ECCOpQueue::get_eccvm_ops ( )

inline

Definition at line 123 of file ecc_op_queue.hpp.

◆ get_num_msm_rows()

size_t bb::ECCOpQueue::get_num_msm_rows ( ) const

inline

Get the number of rows in the 'msm' column section, for all msms in the circuit.

Definition at line 147 of file ecc_op_queue.hpp.

◆ get_num_rows()

size_t bb::ECCOpQueue::get_num_rows ( ) const

inline

Get the number of rows for the current ECCVM circuit.

Note: This count does not include the hiding op.

Definition at line 153 of file ecc_op_queue.hpp.

◆ get_number_of_muls()

uint32_t bb::ECCOpQueue::get_number_of_muls ( ) const

inline

Get number of muls for the current ECCVM circuit.

Definition at line 158 of file ecc_op_queue.hpp.

◆ get_previous_ultra_ops_table_num_rows()

size_t bb::ECCOpQueue::get_previous_ultra_ops_table_num_rows ( ) const

inline

Definition at line 116 of file ecc_op_queue.hpp.

◆ get_ultra_ops()

std::vector< UltraOp > & bb::ECCOpQueue::get_ultra_ops ( )

inline

Definition at line 136 of file ecc_op_queue.hpp.

◆ get_ultra_ops_count()

size_t bb::ECCOpQueue::get_ultra_ops_count ( ) const

inline

Definition at line 114 of file ecc_op_queue.hpp.

◆ get_ultra_ops_table_num_rows()

size_t bb::ECCOpQueue::get_ultra_ops_table_num_rows ( ) const

inline

Definition at line 113 of file ecc_op_queue.hpp.

◆ initialize_new_subtable()

void bb::ECCOpQueue::initialize_new_subtable ( )

inline

Initialize a new subtable for eccvm and ultra ops with the given merge settings.

Definition at line 74 of file ecc_op_queue.hpp.

◆ merge()

void bb::ECCOpQueue::merge	(	MergeSettings	settings = `MergeSettings::PREPEND`,
		std::optional< size_t >	ultra_fixed_offset = `std::nullopt`
	)

inline

Definition at line 82 of file ecc_op_queue.hpp.

◆ mul_accumulate()

UltraOp bb::ECCOpQueue::mul_accumulate	(	const Point &	to_mul,
		const Fr &	scalar
	)

inline

Write multiply and add op to queue and natively perform operation.

Parameters

to_add

Definition at line 215 of file ecc_op_queue.hpp.

◆ no_op_ultra_only()

UltraOp bb::ECCOpQueue::no_op_ultra_only ( )

inline

Writes a no op (i.e. two zero rows) to the ultra ops table but adds no eccvm operations.

We want to be able to add zero rows to the ultra ops table without affecting the operations in the ECCVM.

Definition at line 242 of file ecc_op_queue.hpp.

◆ random_op_ultra_only()

UltraOp bb::ECCOpQueue::random_op_ultra_only ( )

inline

Writes randomness to the ultra ops table but adds no eccvm operations.

This method is used to add randomness to the ultra ops table with the aim of randomising the commitment and evaluations of its corresponding columns

Returns: UltraOp

Definition at line 256 of file ecc_op_queue.hpp.

◆ set_eccvm_ops_for_fuzzing()

void bb::ECCOpQueue::set_eccvm_ops_for_fuzzing ( std::vector< ECCVMOperation > & eccvm_ops_in )

inline

A fuzzing only method for setting eccvm ops directly.

Definition at line 164 of file ecc_op_queue.hpp.

Member Data Documentation

◆ accumulator

Point bb::ECCOpQueue::accumulator = point_at_infinity

private

Definition at line 47 of file ecc_op_queue.hpp.

◆ eccvm_ops_reconstructed

std::vector<ECCVMOperation> bb::ECCOpQueue::eccvm_ops_reconstructed

private

Definition at line 54 of file ecc_op_queue.hpp.

◆ eccvm_ops_table

EccvmOpsTable bb::ECCOpQueue::eccvm_ops_table

private

Definition at line 49 of file ecc_op_queue.hpp.

◆ eccvm_row_tracker

EccvmRowTracker bb::ECCOpQueue::eccvm_row_tracker

private

Definition at line 61 of file ecc_op_queue.hpp.

◆ has_hiding_op

bool bb::ECCOpQueue::has_hiding_op = false

private

Definition at line 364 of file ecc_op_queue.hpp.

◆ hiding_op_for_eccvm

ECCVMOperation bb::ECCOpQueue::hiding_op_for_eccvm

private

Definition at line 363 of file ecc_op_queue.hpp.

◆ OP_QUEUE_SIZE

const size_t bb::ECCOpQueue::OP_QUEUE_SIZE = 1 << CONST_OP_QUEUE_LOG_SIZE

static

Definition at line 64 of file ecc_op_queue.hpp.

◆ point_at_infinity

Point bb::ECCOpQueue::point_at_infinity = Curve::Group::affine_point_at_infinity

private

Definition at line 44 of file ecc_op_queue.hpp.

◆ ultra_ops_reconstructed

std::vector<UltraOp> bb::ECCOpQueue::ultra_ops_reconstructed

private

Definition at line 58 of file ecc_op_queue.hpp.

◆ ultra_ops_table

UltraEccOpsTable bb::ECCOpQueue::ultra_ops_table

private

Definition at line 50 of file ecc_op_queue.hpp.

◆ ULTRA_TABLE_WIDTH

constexpr size_t bb::ECCOpQueue::ULTRA_TABLE_WIDTH = UltraEccOpsTable::TABLE_WIDTH

staticconstexprprivate

Definition at line 43 of file ecc_op_queue.hpp.

The documentation for this class was generated from the following file:

src/barretenberg/op_queue/ecc_op_queue.hpp

Public Member Functions

Static Public Attributes

Private Types

Private Member Functions

Private Attributes

Static Private Attributes

Detailed Description

Member Typedef Documentation

◆ Curve

◆ Fq

◆ Fr

◆ Point

Constructor & Destructor Documentation

◆ ECCOpQueue()

Member Function Documentation

◆ add_accumulate()

◆ add_erroneous_equality_op_for_testing()

◆ append_eccvm_op()

◆ append_hiding_op()

◆ construct_and_populate_ultra_ops()

◆ construct_current_ultra_ops_subtable_columns()

◆ construct_full_eccvm_ops_table()

◆ construct_full_ultra_ops_table()

◆ construct_previous_ultra_ops_table_columns()

◆ construct_ultra_ops_table_columns()

◆ empty_row_for_testing()

◆ eq_and_reset()

◆ get_accumulator()

◆ get_current_subtable_size()

◆ get_current_ultra_ops_subtable_num_rows()

◆ get_eccvm_ops()

◆ get_num_msm_rows()

◆ get_num_rows()

◆ get_number_of_muls()

◆ get_previous_ultra_ops_table_num_rows()

◆ get_ultra_ops()

◆ get_ultra_ops_count()

◆ get_ultra_ops_table_num_rows()

◆ initialize_new_subtable()

◆ merge()

◆ mul_accumulate()

◆ no_op_ultra_only()

◆ random_op_ultra_only()

◆ set_eccvm_ops_for_fuzzing()

Member Data Documentation

◆ accumulator

◆ eccvm_ops_reconstructed

◆ eccvm_ops_table

◆ eccvm_row_tracker

◆ has_hiding_op

◆ hiding_op_for_eccvm

◆ OP_QUEUE_SIZE

◆ point_at_infinity

◆ ultra_ops_reconstructed

◆ ultra_ops_table

◆ ULTRA_TABLE_WIDTH