#include <cstddef>
#include <cstdint>
#include <gtest/gtest.h>
#include <vector>
#include "barretenberg/commitment_schemes/ipa/ipa.hpp"
#include "barretenberg/commitment_schemes/verification_key.hpp"
#include "barretenberg/eccvm/eccvm_circuit_builder.hpp"
#include "barretenberg/eccvm/eccvm_prover.hpp"
#include "barretenberg/eccvm/eccvm_test_utils.hpp"
#include "barretenberg/eccvm/eccvm_verifier.hpp"
#include "barretenberg/flavor/test_utils/proof_structures.hpp"
#include "barretenberg/honk/library/grand_product_delta.hpp"
#include "barretenberg/numeric/uint256/uint256.hpp"
#include "barretenberg/relations/permutation_relation.hpp"
#include "barretenberg/relations/relation_parameters.hpp"
#include "barretenberg/srs/global_crs.hpp"
#include "barretenberg/sumcheck/sumcheck.hpp"
#include "barretenberg/sumcheck/sumcheck_round.hpp"

Classes
class	ECCVMTests

Typedefs
using	FF = ECCVMFlavor::FF

using	PK = ECCVMFlavor::ProvingKey

using	Transcript = ECCVMFlavor::Transcript

using	ECCVMVerifier = ECCVMVerifier_< ECCVMFlavor >

using	PCS = IPA< ECCVMFlavor::Curve, CONST_ECCVM_LOG_N >

Functions
ECCVMFlavor::VerificationKey	create_vk_from_proving_key (const std::shared_ptr< PK > &proving_key)

ECCVMFlavor::BF	compute_eccvm_vk_hash ()

ECCVMCircuitBuilder	generate_circuit (numeric::RNG *engine=nullptr)
	Adds operations in BN254 to the op_queue and then constructs and ECCVM circuit from the op_queue.

ECCVMCircuitBuilder	generate_zero_circuit (numeric::RNG *engine=nullptr, bool zero_scalars=1)

void	complete_proving_key_for_test (bb::RelationParameters< FF > &relation_parameters, std::shared_ptr< PK > &pk, std::vector< FF > &gate_challenges)

	TEST_F (ECCVMTests, ZeroesCoefficients)

	TEST_F (ECCVMTests, MissingHidingOpThrows)

	TEST_F (ECCVMTests, NullOpQUeue)

	TEST_F (ECCVMTests, PointAtInfinity)

	TEST_F (ECCVMTests, ScalarEdgeCase)

	TEST_F (ECCVMTests, ProofLengthCheck)
	Check that size of a ECCVM proof matches the corresponding constant.

	TEST_F (ECCVMTests, BaseCaseFixedSize)

	TEST_F (ECCVMTests, EqFailsFixedSize)

	TEST_F (ECCVMTests, CommittedSumcheck)

	TEST_F (ECCVMTests, BaseInfinityForgedCoordinatesRejected)
	Regression test: transcript_base_infinity soundness vulnerability.

	TEST_F (ECCVMTests, FixedVK)
	Test that the fixed VK from the default constructor agrees with the one computed for an arbitrary circuit.

	TEST_F (ECCVMTests, WitnessPolynomialsMasked)
	Verify that every ECCVM witness polynomial has masking values in the reserved head region.

	TEST_F (ECCVMTests, RepeatedCommitmentsIndicesCorrect)
	Verify that REPEATED_COMMITMENTS indices correctly pair to-be-shifted and shifted commitments.

Typedef Documentation

◆ ECCVMVerifier

using ECCVMVerifier = ECCVMVerifier_<ECCVMFlavor>

Definition at line 25 of file eccvm.test.cpp.

◆ FF

using FF = ECCVMFlavor::FF

Definition at line 22 of file eccvm.test.cpp.

◆ PCS

using PCS = IPA<ECCVMFlavor::Curve, CONST_ECCVM_LOG_N>

Definition at line 26 of file eccvm.test.cpp.

◆ PK

using PK = ECCVMFlavor::ProvingKey

Definition at line 23 of file eccvm.test.cpp.

◆ Transcript

using Transcript = ECCVMFlavor::Transcript

Definition at line 24 of file eccvm.test.cpp.

Function Documentation

◆ complete_proving_key_for_test()

void complete_proving_key_for_test	(	bb::RelationParameters< FF > &	relation_parameters,
		std::shared_ptr< PK > &	pk,
		std::vector< FF > &	gate_challenges
	)

Definition at line 129 of file eccvm.test.cpp.

◆ compute_eccvm_vk_hash()

ECCVMFlavor::BF compute_eccvm_vk_hash ( )

Definition at line 41 of file eccvm.test.cpp.

◆ create_vk_from_proving_key()

ECCVMFlavor::VerificationKey create_vk_from_proving_key ( const std::shared_ptr< PK > & proving_key )

Definition at line 30 of file eccvm.test.cpp.

◆ generate_circuit()

ECCVMCircuitBuilder generate_circuit ( numeric::RNG * engine = nullptr )

Adds operations in BN254 to the op_queue and then constructs and ECCVM circuit from the op_queue.

Parameters

engine

Returns: ECCVMCircuitBuilder

Definition at line 68 of file eccvm.test.cpp.

◆ generate_zero_circuit()

ECCVMCircuitBuilder generate_zero_circuit	(	numeric::RNG *	engine = `nullptr`,
		bool	zero_scalars = `1`
	)

Definition at line 103 of file eccvm.test.cpp.

◆ TEST_F() [1/13]

TEST_F	(	ECCVMTests	,
		BaseCaseFixedSize
	)

Definition at line 289 of file eccvm.test.cpp.

◆ TEST_F() [2/13]

TEST_F	(	ECCVMTests	,
		BaseInfinityForgedCoordinatesRejected
	)

Regression test: transcript_base_infinity soundness vulnerability.

Constructs 2 MULs: mul(a, x) and mul(infinity, y). The honest computation yields a*x (since infinity*y contributes nothing). After building the prover, we replace transcript_Px/Py at the infinity-mul row with a valid on-curve point b. This makes the committed transcript look like: mul(a, x), mul(b, y), eq(a*x) where the honest result should be a*x + b*y, not a*x.

We then generate a full ECCVM proof and verify it (IPA included). Before the fix (constraining Px/Py = 0 when base_infinity = 1), this proof would VERIFY, demonstrating a soundness break. After the fix, the proof must FAIL verification.

Definition at line 414 of file eccvm.test.cpp.

◆ TEST_F() [3/13]

TEST_F	(	ECCVMTests	,
		CommittedSumcheck
	)

Definition at line 339 of file eccvm.test.cpp.

◆ TEST_F() [4/13]

TEST_F	(	ECCVMTests	,
		EqFailsFixedSize
	)

Definition at line 313 of file eccvm.test.cpp.

◆ TEST_F() [5/13]

TEST_F	(	ECCVMTests	,
		FixedVK
	)

Test that the fixed VK from the default constructor agrees with the one computed for an arbitrary circuit.

Note: If this test fails, it may be because the constant ECCVM_FIXED_SIZE has changed and the fixed VK commitments in ECCVMHardcodedVKAndHash must be updated accordingly. Their values can be taken right from the output of this test.

Definition at line 495 of file eccvm.test.cpp.

◆ TEST_F() [6/13]

TEST_F	(	ECCVMTests	,
		MissingHidingOpThrows
	)

Definition at line 185 of file eccvm.test.cpp.

◆ TEST_F() [7/13]

TEST_F	(	ECCVMTests	,
		NullOpQUeue
	)

Definition at line 194 of file eccvm.test.cpp.

◆ TEST_F() [8/13]

TEST_F	(	ECCVMTests	,
		PointAtInfinity
	)

Definition at line 219 of file eccvm.test.cpp.

◆ TEST_F() [9/13]

TEST_F	(	ECCVMTests	,
		ProofLengthCheck
	)

Check that size of a ECCVM proof matches the corresponding constant.

If this test FAILS, then the following (non-exhaustive) list should probably be updated as well:

Proof length formula in eccvm_flavor.hpp, etc...
eccvm_transcript.test.cpp
constants in yarn-project in: constants.nr, constants.gen.ts, ConstantsGen.sol

Definition at line 279 of file eccvm.test.cpp.

◆ TEST_F() [10/13]

TEST_F	(	ECCVMTests	,
		RepeatedCommitmentsIndicesCorrect
	)

Verify that REPEATED_COMMITMENTS indices correctly pair to-be-shifted and shifted commitments.

Mirrors the Shplemini commitment vector construction: [Q, unshifted_comms..., to_be_shifted_comms...], then applies offset = HasZK ? 2 : 1, and checks commitments[original_start + offset + i] == commitments[duplicate_start + offset + i]. This is a one-time substitute for the runtime BB_ASSERTs in remove_repeated_commitments.

Definition at line 566 of file eccvm.test.cpp.

◆ TEST_F() [11/13]

TEST_F	(	ECCVMTests	,
		ScalarEdgeCase
	)

Definition at line 240 of file eccvm.test.cpp.

◆ TEST_F() [12/13]

TEST_F	(	ECCVMTests	,
		WitnessPolynomialsMasked
	)

Verify that every ECCVM witness polynomial has masking values in the reserved head region.

All witness polynomials (wires, z_perm, lookup_inverses) should have non-zero random values at rows 1..NUM_MASKED_ROWS (the masking region). Precomputed polynomials should NOT be masked.

Definition at line 537 of file eccvm.test.cpp.

◆ TEST_F() [13/13]

TEST_F	(	ECCVMTests	,
		ZeroesCoefficients
	)

Definition at line 161 of file eccvm.test.cpp.

Classes

Typedefs

Functions