[BASE] Anemoi hash r1cs - #65

Open

vesselinux wants to merge 120 commits into

anemoi-hash-r1cs

Commits on Oct 31, 2022

Updated libff to point to last commit
Vesselin Velichkov
committed
922ba99
added TAGS to .gitignore
Vesselin Velichkov
committed
2ba1b0d
added BLS12-381 curve to CMakeLists.txt
Vesselin Velichkov
committed
43a9884
added test for plonk in CMakeLists.txt
Vesselin Velichkov
committed
3d34c06
anemoi: added initial directory and files for the implementation of the Anemoi hash function in the R1CS contraint system
Vesselin Velichkov
committed
2d86e31
anemoi: added initial test for Anemoi hash
Vesselin Velichkov
committed
819304c
anmeoi: implemented r1cs gadget for the component y = alpha * x^3 + beta
Vesselin Velichkov
committed
cfec176
anemoi: implemented r1cs gadget for the component y = alpha * x^2 + beta
Vesselin Velichkov
committed
d011427
anemoi: major reimplementation of r1cs gadgets for anemoi power 2 and power 3 components addressing latest comments from PR#65
Vesselin Velichkov
committed
076cee8
anemoi: constructors definition moved from .hpp to .tcc file
Vesselin Velichkov
committed
f7aa383
anemoi: replaced constants names alpha, beta resp. by const_a, const_b; added macros for Anemoi constants values alpha, beta, gamma, delta, some of which are curve-dependent; moved initialization o…
Vesselin Velichkov
committed
96ba7bb
anemoi: simplified the addition of r1cs constraints in the power 2 and 3 gadgets
Vesselin Velichkov
committed
87fb680
anemoi: set constant private members const_a, const_b explicitly as constants
Vesselin Velichkov
committed
b9a0e1b
anemoi: renamed anemoi_power_* gadgets to flystel_power_* which is technically more correct
Vesselin Velichkov
committed
eebe993
anemoi: added flystel power 5 gadget for opertion y=x^5
Vesselin Velichkov
committed
165a7e2
anemoi: added gadgets for the Qi and Qf components of the Flystel s-box for prime and binary fields; inherit the power 2 and power 3 gadget classes
Vesselin Velichkov
committed
a92d59d
anemoi: added gadget for the flystel component for prime fields; changed the names of several classes to better reflect their purpouse.
Vesselin Velichkov
committed
0492bff
anemoi: started implementation of anemoi permutation gadget for prime fields
Vesselin Velichkov
committed
d038da1
anemoi: started specialization of the components (Q_gamma, Q_delta, Flystel) in terms of the round constants beta, gamma, delta (WIP).
Vesselin Velichkov
committed
9206d9b
anemoi: improved specialization of anemoi components; updated anemoi round permutation gadget.
Vesselin Velichkov
committed
289d873
anemoi: updated anemoi permutation class; added function to return the correct mds matrix from the number of columns
Vesselin Velichkov
committed
456831c
anemoi: added header file containing all round constants (initial)
Vesselin Velichkov
committed
2c1048f
anemoi: replaced inputs to Q_gamma, Q_delta, E from pb_variable to pb_lienar_combination; added gadget for Q_delta for binary field.
Vesselin Velichkov
committed
7508a5b
anemoi: updated E_power_five gadget
Vesselin Velichkov
committed
75a8cc5
anemoi: added a cnstructor of pb_linear_combination initializing an object from a linear_combination oject. needed for r1cs gadget for anemoi flystel sbox.
Vesselin Velichkov
committed
18e08dc
anemoi: updated gadget for flystel sbox using the new constructor of pb_linear_combination from linear_combination object.
Vesselin Velichkov
committed
4daa5ac
WIP: draft chages to anemoi circuit

dtebbs
authored and
Vesselin Velichkov
committed
7cc1c11
anemoi: implemented Flystel E five root transformation
Vesselin Velichkov
committed
4ef1d96
anemoi: implemented new functionality to Flystel gadget for prime fields (WIP)
Vesselin Velichkov
committed
64a2c69
anemoi: debgging info for flystel gadget
Vesselin Velichkov
committed
e1fe2c3
anemoi: added temporary debug info in protoboard and pb_variable for purpouses of flystel gadget testing
Vesselin Velichkov
committed
429b178
anemoi: added more debug code for Flystel gadget
Vesselin Velichkov
committed
9d0e3ba
anemoi: updated unit tests for the Flystel gadget
Vesselin Velichkov
committed
e32c518
anemoi: merged bug fix plus more debug tests
Vesselin Velichkov
committed
5073dba
anemoi: replaced inputs to all gadgets from pb_linear_combination to linear_combination
Vesselin Velichkov
committed
d8151e3
anemoi: added gadget for the flystel sbox plus unit test
Vesselin Velichkov
committed
88b4024
anemoi: removed debug comments from protoboard.tcc
Vesselin Velichkov
committed
b7dcb35
anemoi: completed unit test for flystel sbox; code cleanup
Vesselin Velichkov
committed
377ea06
anemoi: transposed matrix M4 fixing a bug in the paper
Vesselin Velichkov
committed
f247bfe
anemoi: removed test for plonk in CMakeLists.txt
Vesselin Velichkov
committed
58ff44a
anemoi: added latest revision of depends/libff
Vesselin Velichkov
committed
e3af3c2
anemoi: removed default initialization of input var annotation_prefix in anemoi_permutation_round_prime_field_gadget to fix CI error
Vesselin Velichkov
committed
20340d2
anemoi: removed printing of columns value in std::logic_error to fix CI complaint
Vesselin Velichkov
committed
a43ace3
anemoi: made the declaration of the anemoi_permutation_round_prime_field_gadget constructor consistent with its definition in order to fix CI error
Vesselin Velichkov
committed
4ab01e1
anemoi: removed unused parameter pb in anemoi_permutation_round_prime_field_gadget to fix CI complaint
Vesselin Velichkov
committed
82032ee
anemoi: removed unused parameter annotation_prefix from anemoi_permutation_round_prime_field_gadget to fix CI complaint
Vesselin Velichkov
committed
e75dc3e
anemoi: removed default value "" for annotation_prefix (cf. PR #65 https://github.com/clearmatics/libsnark/pull/65#discussion_r992421871)
Vesselin Velichkov
committed
cf73f03
anemoi: set member variables representing intermediate values to be of type const in several classes. resp. added their initialization in the initialization list of the constructor (cf. https://git…
Vesselin Velichkov
committed
3124b60
anemoi: updated copyright notice in all files
Vesselin Velichkov
committed
c18735b
anemoi: added formal reference to the eprint version of the Anemoi paper (cf. https://github.com/clearmatics/libsnark/pull/65#discussion_r992439955)
Vesselin Velichkov
committed
579c1a3
anemoi: removed redundant comment (https://github.com/clearmatics/libsnark/pull/65#discussion_r992445155)
Vesselin Velichkov
committed
e18fcc3
anemoi: added editorial changes in comments
Vesselin Velichkov
committed
f249b73
anemoi: changed comments in allocate() to match variable names (https://github.com/clearmatics/libsnark/pull/65#discussion_r992458348)
Vesselin Velichkov
committed
99bfaa3
anemoi: uncommented test_pb_verify_circuit which was temporarily commented for debug.
Vesselin Velichkov
committed
853afc2
anemoi: removed redundant asserts in pb_variable added earlier for debug (https://github.com/clearmatics/libsnark/pull/65#discussion_r992475721, https://github.com/clearmatics/libsnark/pull/65#disc…
Vesselin Velichkov
committed
ff23014
anemoi: removed redundant "== true" in if-statement (https://github.com/clearmatics/libsnark/pull/65#discussion_r992476857).
Vesselin Velichkov
committed
0a609c9

Commits on Nov 2, 2022

anemoi: removed all printf-s (https://github.com/clearmatics/libsnark/pull/65#discussion_r992448853, https://github.com/clearmatics/libsnark/issues/77)
Vesselin Velichkov
committed
e719051
anemoi: clarified comment (https://github.com/clearmatics/libsnark/pull/65#discussion_r992455606)
Vesselin Velichkov
committed
ab8832a
anemoi: added missing calls to test_pb_verify_circuit
Vesselin Velichkov
committed
61b6f28
anemoi: added missing const identifier (https://github.com/clearmatics/libsnark/pull/65#discussion_r1010576258)
Vesselin Velichkov
committed
e970f79
anemoi: removed redundant comments
Vesselin Velichkov
committed
28d960e
anemoi: removed redundant include (https://github.com/clearmatics/libsnark/pull/65#discussion_r1010607147)
Vesselin Velichkov
committed
42f79e8
anemoi: switched to gtest framework (https://github.com/clearmatics/libsnark/pull/65#discussion_r992473776, https://github.com/clearmatics/libsnark/issues/77#issue-1431671566)
Vesselin Velichkov
committed
39f1eef
anemoi: added script for generating Anemoi parameters for different curves
Vesselin Velichkov
committed
e567f8a
anemoi: added directory __pycache__ from anemoi sage scripts to .gitignore
Vesselin Velichkov
committed
fc915a5
anemoi: updated sage scripts with latest fixes from the official anemoi-hash repo (matrix transpose bug fix, instances for several new curves)
Vesselin Velichkov
committed
047f39d
anemoi: added initial implementation of a parametrization class and its instantiation for the curve bls12-381
Vesselin Velichkov
committed
6269627
anemoi: created class with all anemoi parameters specialised by a given curve in a separate hpp file. removed all debug macros. added a separate class with anemoi parameters used for debug that is …
Vesselin Velichkov
committed
2c25f01

Commits on Nov 4, 2022

anemoi: removed x,y from all comments since the input and output/result variables have names that are self-explanatory (https://github.com/clearmatics/libsnark/pull/76#discussion_r1010462072)
Vesselin Velichkov
committed
567dfb6
anemoi: removed redundant comment
Vesselin Velichkov
committed
777b44a
anemoi: introduced BignumT type in anemoi_parameters class; removed unnecessary ppT type (https://github.com/clearmatics/libsnark/pull/76#discussion_r1010621453).
Vesselin Velichkov
committed
503c47f
anemoi: moved the initialization of the members of the anemoi_parameters class to a .tcc file (https://github.com/clearmatics/libsnark/pull/76#discussion_r1010621945)
Vesselin Velichkov
committed
079bcf6
anemoi: removed specialization of debug_parameters class (https://github.com/clearmatics/libsnark/pull/76#discussion_r1010624908)
Vesselin Velichkov
committed
04e08d8
anemoi: replaced types of members of class anemoi_parameters that have small values from const BignumT to constexpr size_t (https://github.com/clearmatics/libsnark/pull/76#discussion_r1010626635)
Vesselin Velichkov
committed
912d156

Commits on Nov 8, 2022

anemoi: changed types of debug_parameters_bls12_381 parameters class from bignum to size_t to match the anemoi_parameters class
Vesselin Velichkov
committed
7df5c34
anemoi: added static_assert in flystel_prime_field_gadget to make sure that alpha is equal to 5
Vesselin Velichkov
committed
1b6ca9a
anemoi: added ppT to be used as a template parameter everywhere instead of FieldT
Vesselin Velichkov
committed
fe54373
anemoi: added definition of ppT in the paremeters and debug_parameters classes (https://github.com/clearmatics/libsnark/pull/76#discussion_r1015545665)
Vesselin Velichkov
committed
785f2e0
anemoi: updated license text (https://github.com/clearmatics/libsnark/pull/76#discussion_r1015546429)
Vesselin Velichkov
committed
05faa47
anemoi: removed the copy of the official Anemoi SAGE implementation from the libsnark repo; added a readme file explaining how to download this implementation from the Anemoi repo
Vesselin Velichkov
committed
645cfc2

Commits on Nov 9, 2022

Commits on Nov 10, 2022

Merge pull request #85 from clearmatics/anemoi-hash-r1cs-duplicate-gadgets
dtebbs
authored
6e68d79
anemoi: added static_assert on the allowed dimensions of the mds matrix (https://github.com/clearmatics/libsnark/issues/77, https://github.com/clearmatics/libsnark/pull/65#discussion_r992467709)

Vesselin Velichkov
authored and
dtebbs
committed
8a6e635
Merge pull request #80 from clearmatics/anemoi-hash-r1cs-mds-matrix
dtebbs
authored
a008b47

Commits on Jan 12, 2023

anemoi: added r1cs gadget for the round transformation of the anemoi permutation
Vesselin Velichkov
committed
d0f143f
anemoi: removed redundant debug code
Vesselin Velichkov
committed
fe1fb91
anemoi: added proper fomatting of annotation prefix string (https://github.com/clearmatics/libsnark/pull/98#discussion_r1055583864)
Vesselin Velichkov
committed
502ef71
anemoi: replaced method push_back with emplace_back (https://github.com/clearmatics/libsnark/pull/98#discussion_r1055584081)
Vesselin Velichkov
committed
7584a1a
anemoi: removed unnecessary guards from cpp file (https://github.com/clearmatics/libsnark/pull/98#discussion_r1055586736)
Vesselin Velichkov
committed
c9fab73
anemoi: updated sage script for generating anemoi parameters to handle 1,2,3,4 columns and to store the results in a file
Vesselin Velichkov
committed
759cfea
anemoi: added file with all parameters for different instances of anemoi for fast reference. it is automatically generated in sage with the script parameters.sage.
Vesselin Velichkov
committed
fab27a7
anemoi: updated parameters script
Vesselin Velichkov
committed
cd8616d
anemoi: removed parameters.txt file; its content is generated by the parameters.sage script
Vesselin Velichkov
committed
2bc1e60
anemoi: added the original round constants instead of just adding zero constants (https://github.com/clearmatics/libsnark/pull/98#discussion_r1055590350)
Vesselin Velichkov
committed
928ba7b
anemoi: fixed the use of emplace_back to directly call the constructor of the added element in place (https://github.com/clearmatics/libsnark/pull/98#discussion_r1067515826)
Vesselin Velichkov
committed
b8c82f6

Commits on Jan 13, 2023

anemoi: fixed improper use of types in anemoi_parameters class (https://github.com/clearmatics/libsnark/pull/101#discussion_r1069493909)
Vesselin Velichkov
committed
f744943

Commits on Jan 16, 2023

Commits on Jan 17, 2023

anemoi: removed duplicate gadgets for the flystel Q-functions for prime and binary fields (https://github.com/clearmatics/libsnark/issues/77, https://github.com/clearmatics/libsnark/pull/65#discuss…
Vesselin Velichkov
committed
5ac46aa
anemoi: implemented function for generating the mds matrix for different number of columns using class specialization (https://github.com/clearmatics/libsnark/pull/102#discussion_r1069518363)
Vesselin Velichkov
committed
3592255
anemoi: added a TODO note regarding the removal of the input g parameter from all anemoi_permutation_mds::permutation_mds functions (https://github.com/clearmatics/libsnark/pull/102#discussion_r107…
Vesselin Velichkov
committed
c84efa4
anemoi: defined the types of the mds matrices (https://github.com/clearmatics/libsnark/pull/102#discussion_r1071214317)
Vesselin Velichkov
committed
85bb953
anemoi: fixed compilation errors related to method anemoi_permutation_mds::permutation_mds after rebase onto anemoi-hash-r1cs
Vesselin Velichkov
committed
2c62e4d

Commits on Jan 23, 2023

Merge pull request #102 from clearmatics/anemoi-hash-r1cs-numstatecolumns
dtebbs
authored
eefd98d

Commits on Jan 25, 2023

Merge branch 'develop' into anemoi-hash-r1cs
Vesselin Velichkov
committed
0fdd0c3

Commits on Jan 26, 2023

anemoi: added support for generating anemoi parameters for all curves of interest, namely Mnt4, Mnt6, BW6_761, BN128, ALT_BN128, BLS12_377, BLS12_381 (https://github.com/clearmatics/libsnark/issues…
Vesselin Velichkov
committed
8a77138
anemoi: added description of the C,D round constants in comments
Vesselin Velichkov
committed
5bb5dec
WIP: anemoi test tweaks

dtebbs
authored and
Vesselin Velichkov
committed
3e3fb66
anemoi: added tests for gadget instatiations for all curves (https://github.com/clearmatics/libsnark/pull/106#discussion_r1085118089)
Vesselin Velichkov
committed
bb7fee5

Commits on Feb 3, 2023

Commits on Feb 8, 2023

anemoi: added the number of rounds for each instance and for each curve inside the parameters class; modified the SAGE script accordingly
Vesselin Velichkov
committed
644dde8
anemoi: implemented gadget for the full anemoi permutation (https://github.com/clearmatics/libsnark/issues/104)
Vesselin Velichkov
committed
f2e9f87
anemoi: renamed NumStateColumns_L to NumStateColumns
Vesselin Velichkov
committed
5ebc5b3
anemoi: renamed test_anemoi_permutation_round_prime_field_gadget to test_anemoi_round_prime_field_gadget
Vesselin Velichkov
committed
2099655
anemoi: added the round index as a member of the anemoi_round_prime_field_gadget class. it is used to extract the round constants C,D, which arenow removed from the class. removed two unused functi…
Vesselin Velichkov
committed
e7630b2

Commits on Feb 22, 2023

anemoi: added output test values for anemoi with 128-bit security; output number of r1cs constraints and variables
Vesselin Velichkov
committed
bb2eff3

Commits on Mar 6, 2023

anemoi: added minor variable renaming Round -> Rounds (https://github.com/clearmatics/libsnark/pull/110#discussion_r1104828966)
Vesselin Velichkov
committed
af1afbb
Merge pull request #110 from clearmatics/104-anemoi-permutation-all-rounds
dtebbs
authored
42aeac3