groth16

Documentation

Overview

Package groth16 implements Groth16 Zero Knowledge Proof system (aka zkSNARK).

See also

https://eprint.iacr.org/2016/260.pdf

Index

• func NewCS(curveID ecc.ID) constraint.ConstraintSystem
• func Setup(r1cs constraint.ConstraintSystem) (ProvingKey, VerifyingKey, error)
• func Verify(proof Proof, vk VerifyingKey, publicWitness witness.Witness, ...) error
• func VerifyFolded(proof FoldedProof, foldingParameters []FoldingParameters, vk VerifyingKey, ...) error
• type FoldedProof
  • func FoldProofs(proofs []Proof, vk VerifyingKey, opts ...backend.ProverOption) (FoldedProof, error)
• type FoldingParameters
  • func GetFoldingParameters(proofs []Proof, vk VerifyingKey, publicWitness []witness.Witness, ...) ([]FoldingParameters, error)
• type Proof
  • func NewProof(curveID ecc.ID) Proof
  • func Prove(r1cs constraint.ConstraintSystem, pk ProvingKey, fullWitness witness.Witness, ...) (Proof, error)
• type ProvingKey
  • func DummySetup(r1cs constraint.ConstraintSystem) (ProvingKey, error)
  • func NewProvingKey(curveID ecc.ID) ProvingKey
• type VerifyingKey
  • func NewVerifyingKey(curveID ecc.ID) VerifyingKey

Functions

func NewCS

func NewCS(curveID ecc.ID) constraint.ConstraintSystem

NewCS instantiate a concrete curved-typed R1CS and return a R1CS interface This method exists for (de)serialization purposes

func Setup

func Setup(r1cs constraint.ConstraintSystem) (ProvingKey, VerifyingKey, error)

Setup runs groth16.Setup with provided R1CS and outputs a key pair associated with the circuit.

Note that careful consideration must be given to this step in a production environment. groth16.Setup uses some randomness to precompute the Proving and Verifying keys. If the process or machine leaks this randomness, an attacker could break the ZKP protocol.

Two main solutions to this deployment issues are: running the Setup through a MPC (multi party computation) or using a ZKP backend like PLONK where the per-circuit Setup is deterministic.

func Verify

func Verify(proof Proof, vk VerifyingKey, publicWitness witness.Witness, opts ...backend.VerifierOption) error

Verify runs the groth16.Verify algorithm on provided proof with given witness

func VerifyFolded

func VerifyFolded(proof FoldedProof, foldingParameters []FoldingParameters, vk VerifyingKey, publicWitness []witness.Witness, proofs []Proof) error

FIX FOLDING PARAMETERS FOR MORE THAN 2 PROOFS FOLDED

Types

type FoldedProof

type FoldedProof interface {
}

func FoldProofs

func FoldProofs(proofs []Proof, vk VerifyingKey, opts ...backend.ProverOption) (FoldedProof, error)

type FoldingParameters

type FoldingParameters interface {
}

func GetFoldingParameters

func GetFoldingParameters(proofs []Proof, vk VerifyingKey, publicWitness []witness.Witness, opts ...backend.ProverOption) ([]FoldingParameters, error)

type Proof

type Proof interface {
	// contains filtered or unexported methods
}

Proof represents a Groth16 proof generated by groth16.Prove

it's underlying implementation is curve specific (see gnark/internal/backend)

func NewProof

func NewProof(curveID ecc.ID) Proof

NewProof instantiates a curve-typed Proof and returns an interface This function exists for serialization purposes

func Prove

func Prove(r1cs constraint.ConstraintSystem, pk ProvingKey, fullWitness witness.Witness, opts ...backend.ProverOption) (Proof, error)

Prove runs the groth16.Prove algorithm.

if the force flag is set:

	will execute all the prover computations, even if the witness is invalid
 will produce an invalid proof
	internally, the solution vector to the R1CS will be filled with random values which may impact benchmarking

type ProvingKey

type ProvingKey interface {
	gnarkio.UnsafeReaderFrom

	// NbG1 returns the number of G1 elements in the ProvingKey
	NbG1() int

	// NbG2 returns the number of G2 elements in the ProvingKey
	NbG2() int

	IsDifferent(interface{}) bool
	// contains filtered or unexported methods
}

ProvingKey represents a Groth16 ProvingKey

it's underlying implementation is strongly typed with the curve (see gnark/internal/backend)

func DummySetup

func DummySetup(r1cs constraint.ConstraintSystem) (ProvingKey, error)

DummySetup create a random ProvingKey with provided R1CS it doesn't return a VerifyingKey and is use for benchmarking or test purposes only.

func NewProvingKey

func NewProvingKey(curveID ecc.ID) ProvingKey

NewProvingKey instantiates a curve-typed ProvingKey and returns an interface object This function exists for serialization purposes

type VerifyingKey

type VerifyingKey interface {
	gnarkio.UnsafeReaderFrom

	// NbPublicWitness returns number of elements expected in the public witness
	NbPublicWitness() int

	// NbG1 returns the number of G1 elements in the VerifyingKey
	NbG1() int

	// NbG2 returns the number of G2 elements in the VerifyingKey
	NbG2() int

	// ExportSolidity writes a solidity Verifier contract from the VerifyingKey
	// this will return an error if not supported on the CurveID()
	ExportSolidity(w io.Writer) error

	IsDifferent(interface{}) bool
	// contains filtered or unexported methods
}

VerifyingKey represents a Groth16 VerifyingKey

it's underlying implementation is strongly typed with the curve (see gnark/internal/backend)

ExportSolidity is implemented for BN254 and will return an error with other curves

func NewVerifyingKey

func NewVerifyingKey(curveID ecc.ID) VerifyingKey

NewVerifyingKey instantiates a curve-typed VerifyingKey and returns an interface This function exists for serialization purposes