Struct RescueTranscript

pub struct RescueTranscript<F>
where
    F: RescueParameter,
{ /* private fields */ }

Transcript with rescue hash function.

It is currently implemented simply as

• an append only vector of field elements
• a state that is initialized with 0

We keep appending new elements to the transcript vector, and when a challenge is to be generated, we reset the state with the fresh challenge.

1. state: [F: STATE_SIZE] = hash(state|transcript)
2. challenge = state[0]
3. transcript = vec![]

Trait Implementations

impl<F> PlonkTranscript<F> for RescueTranscript<F>

where F: RescueParameter + SWToTEConParam,

fn new(_label: &'static [u8]) -> Self

Create a new plonk transcript. _label is omitted for efficiency.

fn append_message( &mut self, _label: &'static [u8], msg: &[u8], ) -> Result<(), PlonkError>

Append the message to the transcript. _label is omitted for efficiency.

fn append_commitment<E, P>( &mut self, _label: &'static [u8], comm: &Commitment<E>, ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F, G1Affine = Affine<P>>, P: SWParam<BaseField = F>,

Append a single commitment to the transcript. _label is omitted for efficiency.

fn get_challenge<E>( &mut self, _label: &'static [u8], ) -> Result<E::ScalarField, PlonkError>

where E: Pairing<BaseField = F>,

Generate the challenge for the current transcript, _label is omitted for efficiency.

fn append_vk_and_pub_input<E, P>( &mut self, vk: &VerifyingKey<E>, pub_input: &[E::ScalarField], ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F, G1Affine = Affine<P>>, P: SWParam<BaseField = F>,

Append the verification key and the public input to the transcript.

fn append_field_elem<E>( &mut self, _label: &'static [u8], challenge: &E::ScalarField, ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F>,

Append a field element to the transcript.

fn append_proof_evaluations<E: Pairing>( &mut self, evals: &ProofEvaluations<E::ScalarField>, ) -> Result<(), PlonkError>

Append a proof evaluation to the transcript.

fn append_plookup_evaluations<E: Pairing>( &mut self, evals: &PlookupEvaluations<E::ScalarField>, ) -> Result<(), PlonkError>

Append the plookup evaluation to the transcript.

fn append_commitments<E, P>( &mut self, label: &'static [u8], comms: &[Commitment<E>], ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F, G1Affine = Affine<P>>, P: SWParam<BaseField = F>,

Append a slice of commitments to the transcript.

fn append_field_elems<E>( &mut self, label: &'static [u8], fields: &[E::ScalarField], ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F>,

Append a list of field elements to the transcript

fn get_n_challenges<E>( &mut self, labels: &[&'static [u8]], ) -> Result<Vec<E::ScalarField>, PlonkError>

where E: Pairing<BaseField = F>,

Generate multiple challenges for the current round Implementers should be careful about domain separation for each challenge The default implementation assume self.get_challenge() already implements proper domain separation for each challenge generation, thus simply call it multiple times.