Module sonic_pc

Polynomial commitment scheme based on the construction in [KZG10], modified to obtain batching and to enforce strict degree bounds by following the approach outlined in [MBKM19, “Sonic”] (more precisely, via the variant in [Gabizon19, “AuroraLight”] that avoids negative G1 powers).

Structs

BatchLCProof

A proof of satisfaction of linear combinations.

BatchProof

Evaluation proof at a query set.

CommitterKey

CommitterKey is used to commit to, and create evaluation proofs for, a given polynomial.

CommitterUnionKey

CommitterUnionKey is a union of CommitterKeys, useful for multi-circuit batch proofs.

LabeledCommitment

A commitment along with information about its degree bound (if any).

LabeledPolynomial

A polynomial along with information about its degree bound (if any), and the maximum number of queries that will be made to it. This latter number determines the amount of protection that will be provided to a commitment for this polynomial.

LabeledPolynomialWithBasis

LinearCombination

A labeled linear combinations of polynomials.

PolynomialInfo

SonicKZG10

Polynomial commitment based on [KZG10], with degree enforcement and batching taken from [MBKM19, “Sonic”] (more precisely, their counterparts in [Gabizon19, “AuroraLight”] that avoid negative G1 powers). The (optional) hiding property of the commitment scheme follows the approach described in [CHMMVW20, “Marlin”].

Enums

LCTerm

A term in a linear combination.

PolynomialWithBasis

Functions

evaluate_query_set

Evaluate the given polynomials at query_set.

Type Aliases

Commitment

Commitment is the commitment for the KZG10 scheme.

Evaluations

Evaluations is the result of querying a set of labeled polynomials or equations p at a QuerySet Q. It maps each element of Q to the resulting evaluation. That is, if (label, query) is an element of Q, then evaluation.get((label, query)) should equal p[label].evaluate(query).

PolynomialLabel

Labels a LabeledPolynomial or a LabeledCommitment.

QuerySet

QuerySet is the set of queries that are to be made to a set of labeled polynomials/equations p that have previously been committed to. Each element of a QuerySet is a (label, query) pair, where label is the label of a polynomial in p, and query is the field element that p[label] is to be queried at.

Randomness

Randomness is the randomness for the KZG10 scheme.

UniversalParams

UniversalParams are the universal parameters for the KZG10 scheme.