Struct SolidityTranscript

pub struct SolidityTranscript { /* private fields */ }

Transcript with keccak256 hash function.

We append new elements to the transcript vector, and when a challenge is generated, the state is updated and transcript is emptied.

1. state = hash(state | transcript)
2. transcript = Vec::new()
3. challenge = bytes_to_field(state)

Trait Implementations

impl<F: PrimeField> PlonkTranscript<F> for SolidityTranscript

fn new(_label: &'static [u8]) -> Self

Create a new plonk transcript. label is omitted for efficiency.

fn append_message( &mut self, _label: &'static [u8], msg: &[u8], ) -> Result<(), PlonkError>

Append the message to the transcript. _label is omitted for efficiency.

fn append_commitment<E, P>( &mut self, label: &'static [u8], comm: &Commitment<E>, ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F, G1Affine = Affine<P>>, P: SWCurveConfig<BaseField = F>,

Append a single commitment to the transcript.

fn append_field_elem<E>( &mut self, label: &'static [u8], challenge: &E::ScalarField, ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F>,

Append a field element to the transcript.

fn append_vk_and_pub_input<E, P>( &mut self, vk: &VerifyingKey<E>, pub_input: &[E::ScalarField], ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F, G1Affine = Affine<P>>, E::ScalarField: PrimeField, P: SWCurveConfig<BaseField = F>,

Append the verification key and the public input to the transcript.

fn get_challenge<E>( &mut self, _label: &'static [u8], ) -> Result<E::ScalarField, PlonkError>

where E: Pairing<BaseField = F>, E::ScalarField: PrimeField,

Generate a single challenge for the current round

fn append_commitments<E, P>( &mut self, label: &'static [u8], comms: &[Commitment<E>], ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F, G1Affine = Affine<P>>, P: SWParam<BaseField = F>,

Append a slice of commitments to the transcript.

fn append_field_elems<E>( &mut self, label: &'static [u8], fields: &[E::ScalarField], ) -> Result<(), PlonkError>

where E: Pairing<BaseField = F>,

Append a list of field elements to the transcript

fn append_proof_evaluations<E: Pairing<BaseField = F>>( &mut self, evals: &ProofEvaluations<E::ScalarField>, ) -> Result<(), PlonkError>

Append a proof evaluation to the transcript.

fn append_plookup_evaluations<E: Pairing<BaseField = F>>( &mut self, evals: &PlookupEvaluations<E::ScalarField>, ) -> Result<(), PlonkError>

Append the plookup evaluation to the transcript.

fn get_n_challenges<E>( &mut self, labels: &[&'static [u8]], ) -> Result<Vec<E::ScalarField>, PlonkError>

where E: Pairing<BaseField = F>,

Generate multiple challenges for the current round Implementers should be careful about domain separation for each challenge The default implementation assume self.get_challenge() already implements proper domain separation for each challenge generation, thus simply call it multiple times.