Code

[BASE] Anemoi hash r1cs#65

Code

Open

vesselinux wants to merge 120 commits intodevelopclearmatics/libsnark:developfrom anemoi-hash-r1csclearmatics/libsnark:anemoi-hash-r1csCopy head branch name to clipboard

+11,054-2

Commits

Commits on Oct 31, 2022

• Updated libff to point to last commit

  

  Vesselin Velichkov

  committed
  922ba99

  Copy full SHA for 922ba99

• added TAGS to .gitignore

  

  Vesselin Velichkov

  committed
  2ba1b0d

  Copy full SHA for 2ba1b0d

• added BLS12-381 curve to CMakeLists.txt

  

  Vesselin Velichkov

  committed
  43a9884

  Copy full SHA for 43a9884

• added test for plonk in CMakeLists.txt

  

  Vesselin Velichkov

  committed
  3d34c06

  Copy full SHA for 3d34c06

• anemoi: added initial directory and files for the implementation of the Anemoi hash function in the R1CS contraint system

  

  Vesselin Velichkov

  committed
  2d86e31

  Copy full SHA for 2d86e31

• anemoi: added initial test for Anemoi hash

  

  Vesselin Velichkov

  committed
  819304c

  Copy full SHA for 819304c

• anmeoi: implemented r1cs gadget for the component y = alpha * x^3 + beta

  

  Vesselin Velichkov

  committed
  cfec176

  Copy full SHA for cfec176

• anemoi: implemented r1cs gadget for the component y = alpha * x^2 + beta

  

  Vesselin Velichkov

  committed
  d011427

  Copy full SHA for d011427

• anemoi: major reimplementation of r1cs gadgets for anemoi power 2 and power 3 components addressing latest comments from PR#65

  

  Vesselin Velichkov

  committed
  076cee8

  Copy full SHA for 076cee8

• anemoi: constructors definition moved from .hpp to .tcc file

  

  Vesselin Velichkov

  committed
  f7aa383

  Copy full SHA for f7aa383

• anemoi: replaced constants names alpha, beta resp. by const_a, const_b; added macros for Anemoi constants values alpha, beta, gamma, delta, some of which are curve-dependent; moved initialization o…

  Show description for 96ba7bb
  

  Vesselin Velichkov

  committed
  96ba7bb

  Copy full SHA for 96ba7bb

• anemoi: simplified the addition of r1cs constraints in the power 2 and 3 gadgets

  

  Vesselin Velichkov

  committed
  87fb680

  Copy full SHA for 87fb680

• anemoi: set constant private members const_a, const_b explicitly as constants

  

  Vesselin Velichkov

  committed
  b9a0e1b

  Copy full SHA for b9a0e1b

• anemoi: renamed anemoi_power_* gadgets to flystel_power_* which is technically more correct

  

  Vesselin Velichkov

  committed
  eebe993

  Copy full SHA for eebe993

• anemoi: added flystel power 5 gadget for opertion y=x^5

  

  Vesselin Velichkov

  committed
  165a7e2

  Copy full SHA for 165a7e2

• anemoi: added gadgets for the Qi and Qf components of the Flystel s-box for prime and binary fields; inherit the power 2 and power 3 gadget classes

  

  Vesselin Velichkov

  committed
  a92d59d

  Copy full SHA for a92d59d

• anemoi: added gadget for the flystel component for prime fields; changed the names of several classes to better reflect their purpouse.

  

  Vesselin Velichkov

  committed
  0492bff

  Copy full SHA for 0492bff

• anemoi: started implementation of anemoi permutation gadget for prime fields

  

  Vesselin Velichkov

  committed
  d038da1

  Copy full SHA for d038da1

• anemoi: started specialization of the components (Q_gamma, Q_delta, Flystel) in terms of the round constants beta, gamma, delta (WIP).

  

  Vesselin Velichkov

  committed
  9206d9b

  Copy full SHA for 9206d9b

• anemoi: improved specialization of anemoi components; updated anemoi round permutation gadget.

  

  Vesselin Velichkov

  committed
  289d873

  Copy full SHA for 289d873

• anemoi: updated anemoi permutation class; added function to return the correct mds matrix from the number of columns

  

  Vesselin Velichkov

  committed
  456831c

  Copy full SHA for 456831c

• anemoi: added header file containing all round constants (initial)

  

  Vesselin Velichkov

  committed
  2c1048f

  Copy full SHA for 2c1048f

• anemoi: replaced inputs to Q_gamma, Q_delta, E from pb_variable to pb_lienar_combination; added gadget for Q_delta for binary field.

  

  Vesselin Velichkov

  committed
  7508a5b

  Copy full SHA for 7508a5b

• anemoi: updated E_power_five gadget

  

  Vesselin Velichkov

  committed
  75a8cc5

  Copy full SHA for 75a8cc5

• anemoi: added a cnstructor of pb_linear_combination initializing an object from a linear_combination oject. needed for r1cs gadget for anemoi flystel sbox.

  

  Vesselin Velichkov

  committed
  18e08dc

  Copy full SHA for 18e08dc

• anemoi: updated gadget for flystel sbox using the new constructor of pb_linear_combination from linear_combination object.

  

  Vesselin Velichkov

  committed
  4daa5ac

  Copy full SHA for 4daa5ac

• WIP: draft chages to anemoi circuit

  

  dtebbs

  authored and

  Vesselin Velichkov

  committed
  7cc1c11

  Copy full SHA for 7cc1c11

• anemoi: implemented Flystel E five root transformation

  

  Vesselin Velichkov

  committed
  4ef1d96

  Copy full SHA for 4ef1d96

• anemoi: implemented new functionality to Flystel gadget for prime fields (WIP)

  

  Vesselin Velichkov

  committed
  64a2c69

  Copy full SHA for 64a2c69

• anemoi: debgging info for flystel gadget

  

  Vesselin Velichkov

  committed
  e1fe2c3

  Copy full SHA for e1fe2c3

• anemoi: added temporary debug info in protoboard and pb_variable for purpouses of flystel gadget testing

  

  Vesselin Velichkov

  committed
  429b178

  Copy full SHA for 429b178

• anemoi: added more debug code for Flystel gadget

  

  Vesselin Velichkov

  committed
  9d0e3ba

  Copy full SHA for 9d0e3ba

• anemoi: updated unit tests for the Flystel gadget

  

  Vesselin Velichkov

  committed
  e32c518

  Copy full SHA for e32c518

• anemoi: merged bug fix plus more debug tests

  

  Vesselin Velichkov

  committed
  5073dba

  Copy full SHA for 5073dba

• anemoi: replaced inputs to all gadgets from pb_linear_combination to linear_combination

  

  Vesselin Velichkov

  committed
  d8151e3

  Copy full SHA for d8151e3

• anemoi: added gadget for the flystel sbox plus unit test

  

  Vesselin Velichkov

  committed
  88b4024

  Copy full SHA for 88b4024

• anemoi: removed debug comments from protoboard.tcc

  

  Vesselin Velichkov

  committed
  b7dcb35

  Copy full SHA for b7dcb35

• anemoi: completed unit test for flystel sbox; code cleanup

  

  Vesselin Velichkov

  committed
  377ea06

  Copy full SHA for 377ea06

• anemoi: transposed matrix M4 fixing a bug in the paper

  

  Vesselin Velichkov

  committed
  f247bfe

  Copy full SHA for f247bfe

• anemoi: removed test for plonk in CMakeLists.txt

  

  Vesselin Velichkov

  committed
  58ff44a

  Copy full SHA for 58ff44a

• anemoi: added latest revision of depends/libff

  

  Vesselin Velichkov

  committed
  e3af3c2

  Copy full SHA for e3af3c2

• anemoi: removed default initialization of input var annotation_prefix in anemoi_permutation_round_prime_field_gadget to fix CI error

  

  Vesselin Velichkov

  committed
  20340d2

  Copy full SHA for 20340d2

• anemoi: removed printing of columns value in std::logic_error to fix CI complaint

  

  Vesselin Velichkov

  committed
  a43ace3

  Copy full SHA for a43ace3

• anemoi: made the declaration of the anemoi_permutation_round_prime_field_gadget constructor consistent with its definition in order to fix CI error

  

  Vesselin Velichkov

  committed
  4ab01e1

  Copy full SHA for 4ab01e1

• anemoi: removed unused parameter pb in anemoi_permutation_round_prime_field_gadget to fix CI complaint

  

  Vesselin Velichkov

  committed
  82032ee

  Copy full SHA for 82032ee

• anemoi: removed unused parameter annotation_prefix from anemoi_permutation_round_prime_field_gadget to fix CI complaint

  

  Vesselin Velichkov

  committed
  e75dc3e

  Copy full SHA for e75dc3e

• anemoi: removed default value "" for annotation_prefix (cf. PR #65 #65 (comment))

  

  Vesselin Velichkov

  committed
  cf73f03

  Copy full SHA for cf73f03

• anemoi: set member variables representing intermediate values to be of type const in several classes. resp. added their initialization in the initialization list of the constructor (cf. #65 (comment))

  

  Vesselin Velichkov

  committed
  3124b60

  Copy full SHA for 3124b60

• anemoi: updated copyright notice in all files

  

  Vesselin Velichkov

  committed
  c18735b

  Copy full SHA for c18735b

• anemoi: added formal reference to the eprint version of the Anemoi paper (cf. #65 (comment))

  

  Vesselin Velichkov

  committed
  579c1a3

  Copy full SHA for 579c1a3

• anemoi: removed redundant comment (#65 (comment))

  

  Vesselin Velichkov

  committed
  e18fcc3

  Copy full SHA for e18fcc3

• anemoi: added editorial changes in comments

  

  Vesselin Velichkov

  committed
  f249b73

  Copy full SHA for f249b73

• anemoi: changed comments in allocate() to match variable names (#65 (comment))

  

  Vesselin Velichkov

  committed
  99bfaa3

  Copy full SHA for 99bfaa3

• anemoi: uncommented test_pb_verify_circuit which was temporarily commented for debug.

  

  Vesselin Velichkov

  committed
  853afc2

  Copy full SHA for 853afc2

• anemoi: removed redundant asserts in pb_variable added earlier for debug (#65 (comment), #65 (comment))

  

  Vesselin Velichkov

  committed
  ff23014

  Copy full SHA for ff23014

• anemoi: removed redundant "== true" in if-statement (#65 (comment)).

  

  Vesselin Velichkov

  committed
  0a609c9

  Copy full SHA for 0a609c9

Commits on Nov 2, 2022

• anemoi: removed all printf-s (#65 (comment), #77)

  

  Vesselin Velichkov

  committed
  e719051

  Copy full SHA for e719051

• anemoi: clarified comment (#65 (comment))

  

  Vesselin Velichkov

  committed
  ab8832a

  Copy full SHA for ab8832a

• anemoi: added missing calls to test_pb_verify_circuit

  

  Vesselin Velichkov

  committed
  61b6f28

  Copy full SHA for 61b6f28

• anemoi: added missing const identifier (#65 (comment))

  

  Vesselin Velichkov

  committed
  e970f79

  Copy full SHA for e970f79

• anemoi: removed redundant comments

  

  Vesselin Velichkov

  committed
  28d960e

  Copy full SHA for 28d960e

• anemoi: removed redundant include (#65 (comment))

  

  Vesselin Velichkov

  committed
  42f79e8

  Copy full SHA for 42f79e8

• anemoi: switched to gtest framework (#65 (comment), #77 (comment))

  

  Vesselin Velichkov

  committed
  39f1eef

  Copy full SHA for 39f1eef

• anemoi: added script for generating Anemoi parameters for different curves

  

  Vesselin Velichkov

  committed
  e567f8a

  Copy full SHA for e567f8a

• anemoi: added directory __pycache__ from anemoi sage scripts to .gitignore

  

  Vesselin Velichkov

  committed
  fc915a5

  Copy full SHA for fc915a5

• anemoi: updated sage scripts with latest fixes from the official anemoi-hash repo (matrix transpose bug fix, instances for several new curves)

  

  Vesselin Velichkov

  committed
  047f39d

  Copy full SHA for 047f39d

• anemoi: added initial implementation of a parametrization class and its instantiation for the curve bls12-381

  

  Vesselin Velichkov

  committed
  6269627

  Copy full SHA for 6269627

• anemoi: created class with all anemoi parameters specialised by a given curve in a separate hpp file. removed all debug macros. added a separate class with anemoi parameters used for debug that is …

  Show description for 2c25f01
  

  Vesselin Velichkov

  committed
  2c25f01

  Copy full SHA for 2c25f01

Commits on Nov 4, 2022

• anemoi: removed x,y from all comments since the input and output/result variables have names that are self-explanatory (#76 (comment))

  

  Vesselin Velichkov

  committed
  567dfb6

  Copy full SHA for 567dfb6

• anemoi: removed redundant comment

  

  Vesselin Velichkov

  committed
  777b44a

  Copy full SHA for 777b44a

• anemoi: introduced BignumT type in anemoi_parameters class; removed unnecessary ppT type (#76 (comment)).

  

  Vesselin Velichkov

  committed
  503c47f

  Copy full SHA for 503c47f

• anemoi: moved the initialization of the members of the anemoi_parameters class to a .tcc file (#76 (comment))

  

  Vesselin Velichkov

  committed
  079bcf6

  Copy full SHA for 079bcf6

• anemoi: removed specialization of debug_parameters class (#76 (comment))

  

  Vesselin Velichkov

  committed
  04e08d8

  Copy full SHA for 04e08d8

• anemoi: replaced types of members of class anemoi_parameters that have small values from const BignumT to constexpr size_t (#76 (comment))

  

  Vesselin Velichkov

  committed
  912d156

  Copy full SHA for 912d156

Commits on Nov 8, 2022

• anemoi: changed types of debug_parameters_bls12_381 parameters class from bignum to size_t to match the anemoi_parameters class

  

  Vesselin Velichkov

  committed
  7df5c34

  Copy full SHA for 7df5c34

• anemoi: added static_assert in flystel_prime_field_gadget to make sure that alpha is equal to 5

  

  Vesselin Velichkov

  committed
  1b6ca9a

  Copy full SHA for 1b6ca9a

• anemoi: added ppT to be used as a template parameter everywhere instead of FieldT

  

  Vesselin Velichkov

  committed
  fe54373

  Copy full SHA for fe54373

• anemoi: added definition of ppT in the paremeters and debug_parameters classes (#76 (comment))

  

  Vesselin Velichkov

  committed
  785f2e0

  Copy full SHA for 785f2e0

• anemoi: updated license text (#76 (comment))

  

  Vesselin Velichkov

  committed
  05faa47

  Copy full SHA for 05faa47

• anemoi: removed the copy of the official Anemoi SAGE implementation from the libsnark repo; added a readme file explaining how to download this implementation from the Anemoi repo

  

  Vesselin Velichkov

  committed
  645cfc2

  Copy full SHA for 645cfc2

Commits on Nov 9, 2022

• Merge pull request #76 from clearmatics/anemoi-hash-r1cs-parametrization

  Show description for 8dedaa2
  dtebbs

  authored
  8dedaa2

  Copy full SHA for 8dedaa2

• anemoi: removed duplicate gadgets for the flystel Q-functions for prime and binary fields (#77, #65 (comment), #65 (comment))

  

  Vesselin Velichkov

  committed
  cac4bb1

  Copy full SHA for cac4bb1

Commits on Nov 10, 2022

• Merge pull request #85 from clearmatics/anemoi-hash-r1cs-duplicate-gadgets

  Show description for 6e68d79
  dtebbs

  authored
  6e68d79

  Copy full SHA for 6e68d79

• anemoi: added static_assert on the allowed dimensions of the mds matrix (#77, #65 (comment))

  

  Vesselin Velichkov

  authored and

  dtebbs

  committed
  8a6e635

  Copy full SHA for 8a6e635

• Merge pull request #80 from clearmatics/anemoi-hash-r1cs-mds-matrix

  Show description for a008b47
  dtebbs

  authored
  a008b47

  Copy full SHA for a008b47

Commits on Jan 12, 2023

• anemoi: added r1cs gadget for the round transformation of the anemoi permutation

  

  Vesselin Velichkov

  committed
  d0f143f

  Copy full SHA for d0f143f

• anemoi: removed redundant debug code

  

  Vesselin Velichkov

  committed
  fe1fb91

  Copy full SHA for fe1fb91

• anemoi: added proper fomatting of annotation prefix string (#98 (comment))

  

  Vesselin Velichkov

  committed
  502ef71

  Copy full SHA for 502ef71

• anemoi: replaced method push_back with emplace_back (#98 (comment))

  

  Vesselin Velichkov

  committed
  7584a1a

  Copy full SHA for 7584a1a

• anemoi: removed unnecessary guards from cpp file (#98 (comment))

  

  Vesselin Velichkov

  committed
  c9fab73

  Copy full SHA for c9fab73

• anemoi: updated sage script for generating anemoi parameters to handle 1,2,3,4 columns and to store the results in a file

  

  Vesselin Velichkov

  committed
  759cfea

  Copy full SHA for 759cfea

• anemoi: added file with all parameters for different instances of anemoi for fast reference. it is automatically generated in sage with the script parameters.sage.

  

  Vesselin Velichkov

  committed
  fab27a7

  Copy full SHA for fab27a7

• anemoi: updated parameters script

  

  Vesselin Velichkov

  committed
  cd8616d

  Copy full SHA for cd8616d

• anemoi: removed parameters.txt file; its content is generated by the parameters.sage script

  

  Vesselin Velichkov

  committed
  2bc1e60

  Copy full SHA for 2bc1e60

• anemoi: added the original round constants instead of just adding zero constants (#98 (comment))

  

  Vesselin Velichkov

  committed
  928ba7b

  Copy full SHA for 928ba7b

• anemoi: fixed the use of emplace_back to directly call the constructor of the added element in place (#98 (comment))

  

  Vesselin Velichkov

  committed
  b8c82f6

  Copy full SHA for b8c82f6

Commits on Jan 13, 2023

• anemoi: fixed improper use of types in anemoi_parameters class (#101 (comment))

  

  Vesselin Velichkov

  committed
  f744943

  Copy full SHA for f744943

Commits on Jan 16, 2023

• anemoi: replaced libff::bigint<libff::Fr<libff::bls12_381_pp>::num_limbs> with anemoi_parameters<libff::bls12_381_pp>::BignumT for improved readability (#101 (comment))

  

  Vesselin Velichkov

  committed
  ceb06f4

  Copy full SHA for ceb06f4

• Merge pull request #101 from clearmatics/anemoi-hash-r1cs-permutation-round

  Show description for 8a455ea
  dtebbs

  authored
  8a455ea

  Copy full SHA for 8a455ea

Commits on Jan 17, 2023

• anemoi: removed duplicate gadgets for the flystel Q-functions for prime and binary fields (#77, #65 (comment), #65 (comment)) - resolved conflicts after rebase onto anemoi-hash-r1cs

  

  Vesselin Velichkov

  committed
  5ac46aa

  Copy full SHA for 5ac46aa

• anemoi: implemented function for generating the mds matrix for different number of columns using class specialization (#102 (comment))

  

  Vesselin Velichkov

  committed
  3592255

  Copy full SHA for 3592255

• anemoi: added a TODO note regarding the removal of the input g parameter from all anemoi_permutation_mds::permutation_mds functions (#102 (comment))

  

  Vesselin Velichkov

  committed
  c84efa4

  Copy full SHA for c84efa4

• anemoi: defined the types of the mds matrices (#102 (comment))

  

  Vesselin Velichkov

  committed
  85bb953

  Copy full SHA for 85bb953

• anemoi: fixed compilation errors related to method anemoi_permutation_mds::permutation_mds after rebase onto anemoi-hash-r1cs

  

  Vesselin Velichkov

  committed
  2c62e4d

  Copy full SHA for 2c62e4d

Commits on Jan 23, 2023

• Merge pull request #102 from clearmatics/anemoi-hash-r1cs-numstatecolumns

  Show description for eefd98d
  dtebbs

  authored
  eefd98d

  Copy full SHA for eefd98d

Commits on Jan 25, 2023

• Merge branch 'develop' into anemoi-hash-r1cs

  

  Vesselin Velichkov

  committed
  0fdd0c3

  Copy full SHA for 0fdd0c3

Commits on Jan 26, 2023

• anemoi: added support for generating anemoi parameters for all curves of interest, namely Mnt4, Mnt6, BW6_761, BN128, ALT_BN128, BLS12_377, BLS12_381 (#82)

  

  Vesselin Velichkov

  committed
  8a77138

  Copy full SHA for 8a77138

• anemoi: added description of the C,D round constants in comments

  

  Vesselin Velichkov

  committed
  5bb5dec

  Copy full SHA for 5bb5dec

• WIP: anemoi test tweaks

  

  dtebbs

  authored and

  Vesselin Velichkov

  committed
  3e3fb66

  Copy full SHA for 3e3fb66

• anemoi: added tests for gadget instatiations for all curves (#106 (comment))

  

  Vesselin Velichkov

  committed
  bb7fee5

  Copy full SHA for bb7fee5

Commits on Feb 3, 2023

• anemoi: removed test_curve_parameters as obsolete now that we have test_for_curve (#106 (comment)); removed template specialization for test_intermediate_gadgets_bls12_381 (#106 (comment)).

  

  Vesselin Velichkov

  committed
  bbafbdd

  Copy full SHA for bbafbdd

• Merge pull request #106 from clearmatics/82-anemoi-parameters-all-curves

  Show description for 9e56d98
  dtebbs

  authored
  9e56d98

  Copy full SHA for 9e56d98

Commits on Feb 8, 2023

• anemoi: added the number of rounds for each instance and for each curve inside the parameters class; modified the SAGE script accordingly

  

  Vesselin Velichkov

  committed
  644dde8

  Copy full SHA for 644dde8

• anemoi: implemented gadget for the full anemoi permutation (#104)

  

  Vesselin Velichkov

  committed
  f2e9f87

  Copy full SHA for f2e9f87

• anemoi: renamed NumStateColumns_L to NumStateColumns

  

  Vesselin Velichkov

  committed
  5ebc5b3

  Copy full SHA for 5ebc5b3

• anemoi: renamed test_anemoi_permutation_round_prime_field_gadget to test_anemoi_round_prime_field_gadget

  

  Vesselin Velichkov

  committed
  2099655

  Copy full SHA for 2099655

• anemoi: added the round index as a member of the anemoi_round_prime_field_gadget class. it is used to extract the round constants C,D, which arenow removed from the class. removed two unused functi…

  Show description for e7630b2
  

  Vesselin Velichkov

  committed
  e7630b2

  Copy full SHA for e7630b2

Commits on Feb 22, 2023

• anemoi: added output test values for anemoi with 128-bit security; output number of r1cs constraints and variables

  

  Vesselin Velichkov

  committed
  bb2eff3

  Copy full SHA for bb2eff3

Commits on Mar 6, 2023

• anemoi: added minor variable renaming Round -> Rounds (#110 (comment))

  

  Vesselin Velichkov

  committed
  af1afbb

  Copy full SHA for af1afbb

• Merge pull request #110 from clearmatics/104-anemoi-permutation-all-rounds

  Show description for 42aeac3
  dtebbs

  authored
  42aeac3

  Copy full SHA for 42aeac3