Struct zkp::toolbox::batch_verifier::BatchVerifier

pub struct BatchVerifier<'a> {
    batch_size: usize,
    transcripts: Vec<&'a mut Transcript>,
    num_scalars: usize,
    static_points: Vec<CompressedRistretto>,
    static_point_labels: Vec<&'static [u8]>,
    instance_points: Vec<Vec<CompressedRistretto>>,
    instance_point_labels: Vec<&'static [u8]>,
    constraints: Vec<(PointVar, Vec<(ScalarVar, PointVar)>)>,
}

Used to produce batch verification results.

To use a BatchVerifier, first construct one using BatchVerifier::new(), declaring a batch size, supplying a domain separation label for the proof statement, as well as a transcript for each proof to verify.

Allocate secret variables using BatchVerifier::allocate_scalar.

To allocate points which have the same assignment for all proofs in the batch, use BatchVerifier::allocate_static_point. This allows the implementation to overlap coefficients among all proofs in the combined verification check.

To allocate points which have different asssignments for each proof instance, use BatchVerifier::allocate_instance_point.

Finally, use BatchVerifier::verify_batchable to consume the verifier and produce a batch verification result.

Fields

batch_size: usize

transcripts: Vec<&'a mut Transcript>

num_scalars: usize

static_points: Vec<CompressedRistretto>

static_point_labels: Vec<&'static [u8]>

instance_points: Vec<Vec<CompressedRistretto>>

instance_point_labels: Vec<&'static [u8]>

constraints: Vec<(PointVar, Vec<(ScalarVar, PointVar)>)>

Methods

impl<'a> BatchVerifier<'a>

pub fn new(
    proof_label: &'static [u8],
    batch_size: usize,
    transcripts: Vec<&'a mut Transcript>
) -> Result<Self, ProofError>

Construct a new batch verifier for the statement with the given proof_label.

The batch_size is required as an up-front parameter to help prevent errors with size mismatches.

Note that this function requires one transcript borrow per proof.

pub fn allocate_scalar(&mut self, label: &'static [u8]) -> ScalarVar

Allocate a placeholder scalar variable with the given label.

pub fn allocate_static_point(
    &mut self,
    label: &'static [u8],
    assignment: CompressedRistretto
) -> Result<PointVar, ProofError>

Allocate a point variable whose assignment is common to all proofs in the batch.

pub fn allocate_instance_point(
    &mut self,
    label: &'static [u8],
    assignments: Vec<CompressedRistretto>
) -> Result<PointVar, ProofError>

Allocate a point variable with a different assignment for each proof instance.

pub fn verify_batchable(
    self,
    proofs: &[BatchableProof]
) -> Result<(), ProofError>

Consume the verifier to produce a verification result.

Trait Implementations

impl<'a> SchnorrCS for BatchVerifier<'a>

type ScalarVar = ScalarVar

A handle for a scalar variable in the constraint system.

type PointVar = PointVar

A handle for a point variable in the constraint system.

fn constrain(
    &mut self,
    lhs: PointVar,
    linear_combination: Vec<(ScalarVar, PointVar)>
)

Add a constraint of the form lhs = linear_combination.