z-tech/stir

.github/workflows/ci.yml

@@ -79,6 +79,11 @@ jobs:
   check_no_std:
     name: Check no_std
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        rust:
+          - stable
+          - nightly
     steps:
       - name: Checkout
         uses: actions/checkout@v2

.gitignore

@@ -9,4 +9,9 @@ Cargo.lock
 # These are backup files generated by rustfmt
 **/*.rs.bk
 
-.idea
+# Editors
+.idea
+.vscode/**
+
+# Mac OSX
+.DS_Store

Cargo.toml

@@ -1,60 +1,53 @@
 [package]
 name = "ark-ldt"
-version = "0.1.0"
+version = "1.1.0"
 authors = ["arkworks contributors"]
-edition = "2018"
-
-# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+edition = "2021"
 
 [dependencies]
-ark-ff = { version = "^0.3.0", default-features = false }
-ark-std = { version = "^0.3.0", default-features = false }
-ark-r1cs-std = { version = "^0.3.0", default-features = false}
-ark-sponge = { version = "^0.3.0", default-features = false }
-ark-poly = { version = "0.3.0", default-features = false }
-ark-relations = { version = "^0.3.0", default-features = false, optional = true}
-tracing = { version = "0.1", default-features = false, features = [ "attributes" ], optional = true}
-
-[dev-dependencies]
-ark-test-curves = { version = "^0.3.0", default-features = false, features = ["bls12_381_scalar_field", "mnt4_753_scalar_field"] }
+ark-crypto-primitives = { version = "^0.4.0", default-features = false, features = ["merkle_tree", "sponge"] }
+ark-ff = { version = "0.4", default-features = false }
+ark-poly = { version = "0.4.2", default-features = false }
+ark-std = { version = "^0.4.0", default-features = false }
+ark-serialize = { version = "0.4", default-features = false }
+ark-test-curves = { version = "0.4", default-features = false, features = ["bls12_381_curve"] }
+itertools = { version = "0.13.0", default-features = false }
+spin = { version = "0.9.8", default-features = false, features = ["once", "mutex", "spin_mutex"] }
+hashbrown = { version = "0.14.5" }
 
 [patch.crates-io]
-ark-sponge = {git = "https://github.com/arkworks-rs/sponge"}
-ark-r1cs-std = { git = "https://github.com/arkworks-rs/r1cs-std" }
+ark-crypto-primitives = { git = "https://github.com/arkworks-rs/crypto-primitives" }
 ark-ec = { git = "https://github.com/arkworks-rs/algebra" }
 ark-ff = { git = "https://github.com/arkworks-rs/algebra" }
-ark-poly = { git = "https://github.com/arkworks-rs/algebra" }
 ark-serialize = { git = "https://github.com/arkworks-rs/algebra" }
 ark-std = { git = "https://github.com/arkworks-rs/std" }
 ark-test-curves = { git = "https://github.com/arkworks-rs/algebra" }
 
-[profile.release]
-opt-level = 3
-lto = "thin"
-incremental = true
-panic = 'abort'
-
-[profile.bench]
-opt-level = 3
-debug = false
-rpath = false
-lto = "thin"
-incremental = true
-debug-assertions = false
-
-[profile.dev]
-opt-level = 0
-panic = 'abort'
-
-[profile.test]
-opt-level = 3
-lto = "thin"
-incremental = true
-debug-assertions = true
-debug = true
-
 [features]
 default = ["std"]
-std = ["ark-ff/std", "ark-std/std", "ark-relations/std", "ark-r1cs-std/std", "ark-sponge/std", "ark-poly/std"]
-r1cs = ["ark-sponge/r1cs", "tracing", "ark-relations"]
+std = [ "ark-crypto-primitives/std", "ark-ff/std", "ark-poly/std", "ark-serialize/std" ]
 
+[profile.release]
+ opt-level = 3
+ lto = "thin"
+ incremental = true
+ panic = 'abort'
+
+ [profile.bench]
+ opt-level = 3
+ debug = false
+ rpath = false
+ lto = "thin"
+ incremental = true
+ debug-assertions = false
+
+ [profile.dev]
+ opt-level = 0
+ panic = 'abort'
+
+ [profile.test]
+ opt-level = 3
+ lto = "thin"
+ incremental = true
+ debug-assertions = true
+ debug = true

README.md

@@ -15,7 +15,7 @@ This implementation is NOT ready for production use.
 
 ## Overview
 
-A (univariate) low-degree test is an IOP that checks that a given function is close to a (univariate) polynomial of low degree. This library provides two LDTs: the **direct low-degree test** and the **FRI Protocol**. The library also comes with R1CS constraints for the LDT verifiers. Enable `r1cs` feature to use those constraints. 
+A (univariate) low-degree test is an IOP that checks that a given function is close to a (univariate) polynomial of low degree. This library provides three LDTs: **Direct**, **FRI**, and **STIR**.
 
 ## Build Guide
 
@@ -44,8 +44,11 @@ To use this library, you need to add the following to your `Cargo.toml`. Note th
 ark-ldt = {git = "https://github.com/arkworks-rs/ldt", branch="main", default-features = false}
 
 [patch.crates-io]
-ark-sponge = {git = "https://github.com/arkworks-rs/sponge"}
-ark-r1cs-std = {git = "https://github.com/arkworks-rs/r1cs-std", branch = "master"}
+ark-crypto-primitives = { git = "https://github.com/arkworks-rs/crypto-primitives" }
+ark-ec = { git = "https://github.com/arkworks-rs/algebra/" }
+ark-ff = { git = "https://github.com/arkworks-rs/algebra" }
+ark-serialize = { git = "https://github.com/arkworks-rs/algebra" }
+ark-test-curves = { git = "https://github.com/arkworks-rs/algebra" }
 ```
 
 ## License
@@ -62,10 +65,14 @@ conditions.
 ## Reference papers
 
 [Fractal: Post-Quantum and Transparent Recursive Proofs from Holography][cos20]<br>
-Alessandro Chiesa, Dev Ojha, Nicholas Spooner     
+Alessandro Chiesa, Dev Ojha, Nicholas Spooner
 
-[Fast Reed-Solomon Interactive Oracle Proofs of Proximity][bbhr17]<br>
+[FRI: Fast Reed-Solomon Interactive Oracle Proofs of Proximity][bbhr17]<br>
 Eli Ben-Sasson, Iddo Bentov, Ynon Horesh, Michael Riabzev
 
+[STIR: Reed–Solomon Proximity Testing with Fewer Queries][acfy24]<br>
+Gal Arnon, Alessandro Chiesa, Giacomo Fenzi, Eylon Yogev
+
 [cos20]: https://eprint.iacr.org/2019/1076
 [bbhr17]: https://eccc.weizmann.ac.il/report/2017/134/
+[acfy24]: https://eprint.iacr.org/2024/390

src/direct/config.rs

@@ -0,0 +1,31 @@
+use ark_crypto_primitives::{
+    merkle_tree::{Config as MerkleConfig, LeafParam, TwoToOneParam},
+    sponge::CryptographicSponge,
+};
+
+#[derive(Clone)]
+pub struct DirectConfig<M: MerkleConfig, S: CryptographicSponge> {
+    pub degree: usize,
+    pub num_challenges: usize,
+    pub merkle_leaf_hash_param: LeafParam<M>,
+    pub merkle_two_to_one_param: TwoToOneParam<M>,
+    pub sponge_config: S::Config,
+}
+
+impl<M: MerkleConfig, S: CryptographicSponge> DirectConfig<M, S> {
+    pub fn new(
+        degree: usize,
+        num_challenges: usize,
+        merkle_leaf_hash_param: LeafParam<M>,
+        merkle_two_to_one_param: TwoToOneParam<M>,
+        sponge_config: S::Config,
+    ) -> Self {
+        DirectConfig {
+            degree,
+            num_challenges,
+            merkle_leaf_hash_param,
+            merkle_two_to_one_param,
+            sponge_config,
+        }
+    }
+}

src/direct/ldt.rs

@@ -0,0 +1,50 @@
+use ark_crypto_primitives::{
+    merkle_tree::{Config as MerkleConfig, MultiPath},
+    sponge::{Absorb, CryptographicSponge},
+};
+use ark_ff::FftField;
+use ark_std::{marker::PhantomData, vec::Vec};
+
+use crate::{
+    direct::{config::DirectConfig, prover::DirectProver, verifier::DirectVerifier},
+    ldt::{LowDegreeTest, Prover, Verifier},
+    witness::Witness,
+};
+
+use super::proof::DirectProof;
+
+pub struct DirectLDT<F: FftField, M: MerkleConfig, S: CryptographicSponge, W: Witness<F, M>> {
+    _field: PhantomData<F>,
+    _merkle_config: PhantomData<M>,
+    _sponge: PhantomData<S>,
+    _witness: PhantomData<W>,
+}
+impl<F, M, S, W> LowDegreeTest<F> for DirectLDT<F, M, S, W>
+where
+    F: FftField,
+    M: MerkleConfig<Leaf = Vec<F>> + Clone,
+    M::InnerDigest: Absorb,
+    S: CryptographicSponge,
+    S::Config: Clone,
+    W: Witness<
+            F,
+            M,
+            MerkleConfig = M,
+            ChallengeAnswers = MultiPath<M>,
+            CommittedValues = Vec<Vec<F>>,
+            Challenges = Vec<usize>,
+        > + Clone,
+    W::ChallengeAnswers: Clone,
+{
+    type LDTConfig = DirectConfig<M, S>;
+    type Proof = DirectProof<F, M, S>;
+    type Prover = DirectProver<F, M, S, W>;
+    type Verifier = DirectVerifier<F, M, S, W>;
+
+    fn new(config: Self::LDTConfig) -> (Self::Prover, Self::Verifier) {
+        (
+            Self::Prover::new(config.clone()),
+            Self::Verifier::new(config),
+        )
+    }
+}