honk_recursion_constraint.test.cpp

Go to the documentation of this file.

#include "honk_recursion_constraint.hpp"
#include "acir_format.hpp"
#include "acir_format_mocks.hpp"
#include "barretenberg/numeric/uint256/uint256.hpp"
#include "barretenberg/special_public_inputs/special_public_inputs.hpp"
#include "barretenberg/ultra_honk/decider_proving_key.hpp"
#include "barretenberg/ultra_honk/ultra_prover.hpp"
#include "barretenberg/ultra_honk/ultra_verifier.hpp"
#include "proof_surgeon.hpp"
 
#include <gtest/gtest.h>
#include <vector>
 
using namespace acir_format;
using namespace bb;
 
template <typename RecursiveFlavor> class AcirHonkRecursionConstraint : public ::testing::Test {
 
  public:
    using InnerFlavor = typename RecursiveFlavor::NativeFlavor;
    using InnerBuilder = typename InnerFlavor::CircuitBuilder;
    using InnerDeciderProvingKey = DeciderProvingKey_<InnerFlavor>;
    using InnerProver = bb::UltraProver_<InnerFlavor>;
    using InnerVerificationKey = typename InnerFlavor::VerificationKey;
    using InnerVerifier = bb::UltraVerifier_<InnerFlavor>;
    using OuterBuilder = typename RecursiveFlavor::CircuitBuilder;
    using OuterFlavor =
        std::conditional_t<IsMegaBuilder<OuterBuilder>,
                           MegaFlavor,
                           std::conditional_t<HasIPAAccumulator<InnerFlavor>, UltraRollupFlavor, UltraFlavor>>;
    using OuterDeciderProvingKey = DeciderProvingKey_<OuterFlavor>;
    using OuterProver = bb::UltraProver_<OuterFlavor>;
    using OuterVerificationKey = typename OuterFlavor::VerificationKey;
    using OuterVerifier = bb::UltraVerifier_<OuterFlavor>;
 
    InnerBuilder create_inner_circuit()
    {
        RangeConstraint range_a{
            .witness = 0,
            .num_bits = 32,
        };
        RangeConstraint range_b{
            .witness = 1,
            .num_bits = 32,
        };
 
        LogicConstraint logic_constraint{
            .a = WitnessOrConstant<bb::fr>::from_index(0),
            .b = WitnessOrConstant<bb::fr>::from_index(1),
            .result = 2,
            .num_bits = 32,
            .is_xor_gate = 1,
        };
        poly_triple expr_a{
            .a = 2,
            .b = 3,
            .c = 0,
            .q_m = 0,
            .q_l = 1,
            .q_r = -1,
            .q_o = 0,
            .q_c = -10,
        };
        poly_triple expr_b{
            .a = 3,
            .b = 4,
            .c = 5,
            .q_m = 1,
            .q_l = 0,
            .q_r = 0,
            .q_o = -1,
            .q_c = 0,
        };
        poly_triple expr_c{
            .a = 3,
            .b = 5,
            .c = 3,
            .q_m = 1,
            .q_l = 0,
            .q_r = 0,
            .q_o = -1,
            .q_c = 0,
 
        };
        poly_triple expr_d{
            .a = 5,
            .b = 0,
            .c = 0,
            .q_m = 0,
            .q_l = -1,
            .q_r = 0,
            .q_o = 0,
            .q_c = 1,
        };
 
        AcirFormat constraint_system{
            .varnum = 6,
            .num_acir_opcodes = 7,
            .public_inputs = { 1, 2 },
            .logic_constraints = { logic_constraint },
            .range_constraints = { range_a, range_b },
            .poly_triple_constraints = { expr_a, expr_b, expr_c, expr_d },
            .original_opcode_indices = create_empty_original_opcode_indices(),
        };
        mock_opcode_indices(constraint_system);
 
        uint256_t inverse_of_five = fr(5).invert();
        WitnessVector witness{
            5, 10, 15, 5, inverse_of_five, 1,
        };
        uint32_t honk_recursion = 0;
        if constexpr (IsAnyOf<InnerFlavor, UltraFlavor, UltraZKFlavor>) {
            honk_recursion = 1;
        } else if constexpr (IsAnyOf<InnerFlavor, UltraRollupFlavor>) {
            honk_recursion = 2;
        }
        ProgramMetadata metadata{ .recursive = true, .honk_recursion = honk_recursion };
        AcirProgram program{ constraint_system, witness };
        auto builder = create_circuit(program, metadata);
        return builder;
    }
 
    template <typename BuilderType>
    BuilderType create_outer_circuit(std::vector<InnerBuilder>& inner_circuits, bool dummy_witnesses = false)
    {
        std::vector<RecursionConstraint> honk_recursion_constraints;
 
        SlabVector<fr> witness;
 
        for (auto& inner_circuit : inner_circuits) {
 
            auto proving_key = std::make_shared<InnerDeciderProvingKey>(inner_circuit);
            auto verification_key = std::make_shared<InnerVerificationKey>(proving_key->get_precomputed());
            InnerProver prover(proving_key, verification_key);
            InnerVerifier verifier(verification_key);
            auto inner_proof = prover.construct_proof();
 
            std::vector<bb::fr> key_witnesses = verification_key->to_field_elements();
            fr key_hash_witness = verification_key->hash();
            std::vector<fr> proof_witnesses = inner_proof;
 
            // Compute the number of public inputs to extract (the ones from the circuit) and the proof type based on
            // the Flavor
            auto [num_public_inputs_to_extract, proof_type] = [&]() -> std::pair<size_t, acir_format::PROOF_TYPE> {
                size_t num_public_inputs_to_extract = inner_circuit.num_public_inputs();
                if constexpr (HasIPAAccumulator<InnerFlavor>) {
                    return { num_public_inputs_to_extract - RollupIO::PUBLIC_INPUTS_SIZE, ROLLUP_HONK };
                } else if constexpr (InnerFlavor::HasZK) {
                    return { num_public_inputs_to_extract - DefaultIO::PUBLIC_INPUTS_SIZE, HONK_ZK };
                } else {
                    return { num_public_inputs_to_extract - DefaultIO::PUBLIC_INPUTS_SIZE, HONK };
                }
            }();
 
            auto [key_indices, key_hash_index, proof_indices, inner_public_inputs] =
                ProofSurgeon<fr>::populate_recursion_witness_data(
                    witness, proof_witnesses, key_witnesses, key_hash_witness, num_public_inputs_to_extract);
 
            RecursionConstraint honk_recursion_constraint{
                .key = key_indices,
                .proof = proof_indices,
                .public_inputs = inner_public_inputs,
                .key_hash = key_hash_index,
                .proof_type = proof_type,
            };
            honk_recursion_constraints.push_back(honk_recursion_constraint);
        }
 
        AcirFormat constraint_system{};
        constraint_system.varnum = static_cast<uint32_t>(witness.size());
        constraint_system.num_acir_opcodes = static_cast<uint32_t>(honk_recursion_constraints.size());
        constraint_system.honk_recursion_constraints = honk_recursion_constraints;
        constraint_system.original_opcode_indices = create_empty_original_opcode_indices();
 
        mock_opcode_indices(constraint_system);
        uint32_t honk_recursion = 0;
        if constexpr (IsAnyOf<InnerFlavor, UltraFlavor, UltraZKFlavor>) {
            honk_recursion = 1;
        } else if constexpr (IsAnyOf<InnerFlavor, UltraRollupFlavor>) {
            honk_recursion = 2;
        }
        ProgramMetadata metadata{ .honk_recursion = honk_recursion };
        if (dummy_witnesses) {
            witness = {}; // set it all to 0
        }
        AcirProgram program{ constraint_system, witness };
        BuilderType outer_circuit = create_circuit<BuilderType>(program, metadata);
 
        return outer_circuit;
    }
 
    bool verify_proof(const std::shared_ptr<OuterDeciderProvingKey>& proving_key,
                      const std::shared_ptr<OuterVerificationKey>& verification_key,
                      const HonkProof& proof)
    {
        using IO = std::conditional_t<HasIPAAccumulator<RecursiveFlavor>, RollupIO, DefaultIO>;
 
        bool result = false;
 
        if constexpr (HasIPAAccumulator<RecursiveFlavor>) {
            VerifierCommitmentKey<curve::Grumpkin> ipa_verification_key(1 << CONST_ECCVM_LOG_N);
            OuterVerifier verifier(verification_key, ipa_verification_key);
            result = verifier.template verify_proof<IO>(proof, proving_key->ipa_proof).result;
        } else {
            OuterVerifier verifier(verification_key);
            result = verifier.template verify_proof<IO>(proof).result;
        }
 
        return result;
    }
 
  protected:
    static void SetUpTestSuite() { bb::srs::init_file_crs_factory(bb::srs::bb_crs_path()); }
};
 
using Flavors = testing::Types<UltraRecursiveFlavor_<UltraCircuitBuilder>,
                               UltraRollupRecursiveFlavor_<UltraCircuitBuilder>,
                               UltraRecursiveFlavor_<MegaCircuitBuilder>,
                               UltraZKRecursiveFlavor_<UltraCircuitBuilder>,
                               UltraZKRecursiveFlavor_<MegaCircuitBuilder>>;
 
TYPED_TEST_SUITE(AcirHonkRecursionConstraint, Flavors);
 
TYPED_TEST(AcirHonkRecursionConstraint, TestHonkRecursionConstraintVKGeneration)
{
    std::vector<typename TestFixture::InnerBuilder> layer_1_circuits;
    layer_1_circuits.push_back(TestFixture::create_inner_circuit());
 
    auto layer_2_circuit =
        TestFixture::template create_outer_circuit<typename TestFixture::OuterBuilder>(layer_1_circuits);
 
    auto layer_2_circuit_with_dummy_witnesses =
        TestFixture::template create_outer_circuit<typename TestFixture::OuterBuilder>(layer_1_circuits,
                                                                                       /*dummy_witnesses=*/true);
 
    auto proving_key = std::make_shared<typename TestFixture::OuterDeciderProvingKey>(layer_2_circuit);
    auto verification_key =
        std::make_shared<typename TestFixture::OuterVerificationKey>(proving_key->get_precomputed());
 
    auto proving_key_dummy =
        std::make_shared<typename TestFixture::OuterDeciderProvingKey>(layer_2_circuit_with_dummy_witnesses);
    auto verification_key_dummy =
        std::make_shared<typename TestFixture::OuterVerificationKey>(proving_key_dummy->get_precomputed());
 
    // Compare the two vks
    EXPECT_EQ(*verification_key_dummy, *verification_key);
}
 
TYPED_TEST(AcirHonkRecursionConstraint, TestBasicSingleHonkRecursionConstraint)
{
    std::vector<typename TestFixture::InnerBuilder> layer_1_circuits;
    layer_1_circuits.push_back(TestFixture::create_inner_circuit());
 
    auto layer_2_circuit =
        TestFixture::template create_outer_circuit<typename TestFixture::OuterBuilder>(layer_1_circuits);
 
    info("estimate finalized circuit gates = ", layer_2_circuit.get_estimated_num_finalized_gates());
 
    auto proving_key = std::make_shared<typename TestFixture::OuterDeciderProvingKey>(layer_2_circuit);
    auto verification_key =
        std::make_shared<typename TestFixture::OuterVerificationKey>(proving_key->get_precomputed());
    typename TestFixture::OuterProver prover(proving_key, verification_key);
    info("prover gates = ", proving_key->dyadic_size());
    auto proof = prover.construct_proof();
 
    EXPECT_EQ(TestFixture::verify_proof(proving_key, verification_key, proof), true);
}
 
TYPED_TEST(AcirHonkRecursionConstraint, TestBasicDoubleHonkRecursionConstraints)
{
    std::vector<typename TestFixture::InnerBuilder> layer_1_circuits;
    layer_1_circuits.push_back(TestFixture::create_inner_circuit());
 
    layer_1_circuits.push_back(TestFixture::create_inner_circuit());
 
    auto layer_2_circuit =
        TestFixture::template create_outer_circuit<typename TestFixture::OuterBuilder>(layer_1_circuits);
 
    info("circuit gates = ", layer_2_circuit.get_estimated_num_finalized_gates());
 
    auto proving_key = std::make_shared<typename TestFixture::OuterDeciderProvingKey>(layer_2_circuit);
    auto verification_key =
        std::make_shared<typename TestFixture::OuterVerificationKey>(proving_key->get_precomputed());
    typename TestFixture::OuterProver prover(proving_key, verification_key);
    info("prover gates = ", proving_key->dyadic_size());
    auto proof = prover.construct_proof();
 
    EXPECT_EQ(TestFixture::verify_proof(proving_key, verification_key, proof), true);
}
 
TYPED_TEST(AcirHonkRecursionConstraint, TestOneOuterRecursiveCircuit)
{
    std::vector<typename TestFixture::InnerBuilder> layer_1_circuits;
    layer_1_circuits.push_back(TestFixture::create_inner_circuit());
    info("created first inner circuit");
 
    std::vector<typename TestFixture::InnerBuilder> layer_2_circuits;
    layer_2_circuits.push_back(TestFixture::create_inner_circuit());
    info("created second inner circuit");
 
    layer_2_circuits.push_back(
        TestFixture::template create_outer_circuit<typename TestFixture::InnerBuilder>(layer_1_circuits));
    info("created first outer circuit");
 
    auto layer_3_circuit =
        TestFixture::template create_outer_circuit<typename TestFixture::OuterBuilder>(layer_2_circuits);
    info("created second outer circuit");
    info("number of gates in layer 3 = ", layer_3_circuit.get_estimated_num_finalized_gates());
 
    auto proving_key = std::make_shared<typename TestFixture::OuterDeciderProvingKey>(layer_3_circuit);
    auto verification_key =
        std::make_shared<typename TestFixture::OuterVerificationKey>(proving_key->get_precomputed());
    typename TestFixture::OuterProver prover(proving_key, verification_key);
    info("prover gates = ", proving_key->dyadic_size());
    auto proof = prover.construct_proof();
 
    EXPECT_EQ(TestFixture::verify_proof(proving_key, verification_key, proof), true);
}
 
TYPED_TEST(AcirHonkRecursionConstraint, TestFullRecursiveComposition)
{
    std::vector<typename TestFixture::InnerBuilder> layer_b_1_circuits;
    layer_b_1_circuits.push_back(TestFixture::create_inner_circuit());
    info("created first inner circuit");
 
    std::vector<typename TestFixture::InnerBuilder> layer_b_2_circuits;
    layer_b_2_circuits.push_back(TestFixture::create_inner_circuit());
    info("created second inner circuit");
 
    std::vector<Builder> layer_2_circuits;
    layer_2_circuits.push_back(
        TestFixture::template create_outer_circuit<typename TestFixture::InnerBuilder>(layer_b_1_circuits));
    info("created first outer circuit");
 
    layer_2_circuits.push_back(
        TestFixture::template create_outer_circuit<typename TestFixture::InnerBuilder>(layer_b_2_circuits));
    info("created second outer circuit");
 
    auto layer_3_circuit =
        TestFixture::template create_outer_circuit<typename TestFixture::OuterBuilder>(layer_2_circuits);
    info("created third outer circuit");
    info("number of gates in layer 3 circuit = ", layer_3_circuit.get_estimated_num_finalized_gates());
 
    auto proving_key = std::make_shared<typename TestFixture::OuterDeciderProvingKey>(layer_3_circuit);
    auto verification_key =
        std::make_shared<typename TestFixture::OuterVerificationKey>(proving_key->get_precomputed());
    typename TestFixture::OuterProver prover(proving_key, verification_key);
    info("prover gates = ", proving_key->dyadic_size());
    auto proof = prover.construct_proof();
 
    EXPECT_EQ(TestFixture::verify_proof(proving_key, verification_key, proof), true);
}