Barretenberg
The ZK-SNARK library at the core of Aztec
Loading...
Searching...
No Matches
sumcheck_test_flavor.hpp
Go to the documentation of this file.
1
44#pragma once
45
54
55namespace bb {
56
67template <typename FF_> class DependentTestRelationImpl {
68 public:
69 using FF = FF_;
70
71 static constexpr std::array<size_t, 1> SUBRELATION_PARTIAL_LENGTHS{
72 2 // degree 1: q_test * w_test_1
73 };
74
75 static constexpr std::array<bool, 1> SUBRELATION_LINEARLY_INDEPENDENT{
76 false // This subrelation is NOT linearly independent (should NOT be scaled)
77 };
78
79 template <typename AllEntities> static bool skip(const AllEntities& in) { return in.q_test.is_zero(); }
80
81 template <typename ContainerOverSubrelations, typename AllEntities, typename Parameters>
82 static void accumulate(ContainerOverSubrelations& evals,
83 const AllEntities& in,
84 const Parameters& /*unused*/,
85 const FF& /*scaling_factor*/)
86 {
88 // Note: NO scaling_factor used here - this is linearly dependent!
89 auto tmp = in.w_test_1 * in.q_test;
90 std::get<0>(evals) += Accumulator(tmp);
91 }
92};
93
95
96} // namespace bb
97
98namespace bb {
99
136template <typename CurveType = curve::BN254, bool HasZK_ = false, bool UseShortMonomials_ = true>
138 public:
141 using FF = typename Curve::ScalarField;
142 using GroupElement = typename Curve::Element;
149
150 // Configuration constants from template parameters
151 static constexpr bool HasZK = HasZK_;
152 static constexpr bool USE_SHORT_MONOMIALS = UseShortMonomials_;
153 static constexpr bool USE_PADDING = false;
154 static constexpr size_t NUM_WIRES = 4;
155
156 // Entity counts:
157 // Precomputed: q_m, q_l, q_r, q_o, q_4, q_c, q_arith + q_test = 8
158 // Witness: w_l, w_r, w_o, w_4 + w_test_1, w_test_2 = 6
159 // Shifted: w_l_shift, w_4_shift = 2
160 // Note: No gemini_masking_poly - that's a PCS concept, not sumcheck
161 static constexpr size_t NUM_PRECOMPUTED_ENTITIES = 8;
162 static constexpr size_t NUM_WITNESS_ENTITIES = 6;
163 static constexpr size_t NUM_SHIFTED_ENTITIES = 2;
165
166 // Two relations: Arithmetic (linearly independent) + DependentTest (linearly dependent)
167 // Tests can activate either or both via selectors:
168 // - q_arith = 1 : activate arithmetic relation (linearly independent, WILL be scaled)
169 // - q_test = 1 : activate dependent test relation (linearly dependent, will NOT be scaled)
172
173 static constexpr size_t MAX_PARTIAL_RELATION_LENGTH = compute_max_partial_relation_length<Relations>();
174 // For ZK flavors, BATCHED_RELATION_PARTIAL_LENGTH is incremented by 1 for the libra masking univariates
175 // For BN254 with ZK, this must match Curve::LIBRA_UNIVARIATES_LENGTH (9)
176 // Note: MAX_PARTIAL_RELATION_LENGTH = 6 (from ArithmeticRelation's [6,5])
177 // Non-ZK: 6 + 1 = 7
178 // ZK: 6 + 3 = 9 (matches BN254::LIBRA_UNIVARIATES_LENGTH)
180 static constexpr size_t NUM_SUBRELATIONS = compute_number_of_subrelations<Relations>();
183
184 static constexpr bool has_zero_row = false;
185
190 template <typename DataType> class PrecomputedEntities {
191 public:
192 DEFINE_FLAVOR_MEMBERS(DataType,
193 q_m, // Multiplication selector (arithmetic)
194 q_l, // Left wire selector (arithmetic)
195 q_r, // Right wire selector (arithmetic)
196 q_o, // Output wire selector (arithmetic)
197 q_4, // Fourth wire selector (arithmetic)
198 q_c, // Constant selector (arithmetic)
199 q_arith, // Arithmetic gate enable (linearly independent, WILL be scaled)
200 q_test) // Test relation enable (linearly dependent, will NOT be scaled)
201 };
202
207 template <typename DataType> class WitnessEntities {
208 public:
209 DEFINE_FLAVOR_MEMBERS(DataType,
210 w_l, // Left wire (arithmetic)
211 w_r, // Right wire (arithmetic)
212 w_o, // Output wire (arithmetic)
213 w_4, // Fourth wire (arithmetic)
214 w_test_1, // Test wire 1 (dependent test relation)
215 w_test_2) // Test wire 2 (dependent test relation, currently unused)
216 };
217
221 template <typename DataType> class ShiftedEntities {
222 public:
223 DEFINE_FLAVOR_MEMBERS(DataType,
224 w_l_shift, // w_l shifted by 1
225 w_4_shift) // w_4 shifted by 1
226 };
227
234 template <typename DataType>
246
250 class ProverPolynomials : public AllEntities<Polynomial> {
251 public:
252 ProverPolynomials() = default;
253 ProverPolynomials(size_t circuit_size)
254 {
255 for (auto& poly : this->get_precomputed()) {
256 poly = Polynomial(circuit_size);
257 }
258 for (auto& poly : this->get_witness()) {
259 poly = Polynomial(circuit_size);
260 }
261 for (auto& poly : this->get_shifted()) {
262 poly = Polynomial(circuit_size);
263 }
264 }
265
266 [[nodiscard]] size_t get_polynomial_size() const { return this->w_l.size(); }
267
272 auto get_to_be_shifted() { return RefArray{ this->w_l, this->w_4 }; }
273
279 {
280 for (auto [shifted, to_be_shifted] : zip_view(this->get_shifted(), this->get_to_be_shifted())) {
281 shifted = to_be_shifted.shifted();
282 }
283 }
284 };
285
290
295
299 class AllValues : public AllEntities<FF> {
300 public:
302 using Base::Base;
303 };
304
308 class PartiallyEvaluatedMultivariates : public AllEntities<Polynomial> {
309 public:
311 PartiallyEvaluatedMultivariates(const ProverPolynomials& full_polynomials, size_t circuit_size)
312 {
313 for (auto [poly, full_poly] : zip_view(this->get_all(), full_polynomials.get_all())) {
314 size_t desired_size = (full_poly.end_index() / 2) + (full_poly.end_index() % 2);
315 poly = Polynomial(desired_size, circuit_size / 2);
316 }
317 }
318 };
319};
320
321// ================================================================================================
322// Convenient type aliases for common test configurations
323// ================================================================================================
324// Note: All flavors include both relations (arithmetic + test).
325// Tests can choose which to activate via selectors (q_arith = 1 or q_test = 1).
326
332
338
344
351
357
358} // namespace bb
Common transcript class for both parties. Stores the data for the current round, as well as the manif...
CommitmentKey object over a pairing group 𝔾₁.
A linearly dependent test relation for sumcheck testing.
static bool skip(const AllEntities &in)
static constexpr std::array< bool, 1 > SUBRELATION_LINEARLY_INDEPENDENT
static void accumulate(ContainerOverSubrelations &evals, const AllEntities &in, const Parameters &, const FF &)
static constexpr std::array< size_t, 1 > SUBRELATION_PARTIAL_LENGTHS
A template class for a reference array. Behaves as if std::array<T&, N> was possible.
Definition ref_array.hpp:22
A wrapper for Relations to expose methods used by the Sumcheck prover or verifier to add the contribu...
Partially evaluated multivariates for folded sumcheck.
PartiallyEvaluatedMultivariates(const ProverPolynomials &full_polynomials, size_t circuit_size)
auto get_to_be_shifted()
Get the polynomials that will be shifted.
void set_shifted()
Set all shifted polynomials based on their to-be-shifted counterpart.
A flexible, minimal test flavor for sumcheck testing.
typename Curve::ScalarField FF
static constexpr size_t NUM_SUBRELATIONS
std::tuple< ArithmeticRelation< FF_ >, DependentTestRelation< FF_ > > Relations_
static constexpr bool USE_SHORT_MONOMIALS
static constexpr size_t NUM_ALL_ENTITIES
typename Curve::AffineElement Commitment
static constexpr bool has_zero_row
static constexpr bool USE_PADDING
bb::Polynomial< FF > Polynomial
static constexpr size_t MAX_PARTIAL_RELATION_LENGTH
static constexpr size_t NUM_SHIFTED_ENTITIES
static constexpr size_t NUM_PRECOMPUTED_ENTITIES
static constexpr size_t NUM_WITNESS_ENTITIES
static constexpr size_t BATCHED_RELATION_PARTIAL_LENGTH
static constexpr size_t NUM_WIRES
typename Curve::Element GroupElement
static constexpr size_t NUM_RELATIONS
Representation of the Grumpkin Verifier Commitment Key inside a bn254 circuit.
typename Group::element Element
Definition grumpkin.hpp:62
typename Group::affine_element AffineElement
Definition grumpkin.hpp:63
Base class templates for structures that contain data parameterized by the fundamental polynomials of...
#define DEFINE_FLAVOR_MEMBERS(DataType,...)
Define the body of a flavor class, included each member and a pointer view with which to iterate the ...
#define DEFINE_COMPOUND_GET_ALL(...)
Entry point for Barretenberg command-line interface.
Definition api.hpp:5
UltraCircuitBuilder_< UltraExecutionTraceBlocks > UltraCircuitBuilder
BaseTranscript< FrCodec, bb::crypto::Poseidon2< bb::crypto::Poseidon2Bn254ScalarFieldParams > > NativeTranscript
CurveType
Definition types.hpp:10
constexpr decltype(auto) get(::tuplet::tuple< T... > &&t) noexcept
Definition tuple.hpp:13