origin_tag.hpp

Go to the documentation of this file.

// === AUDIT STATUS ===
// internal:    { status: not started, auditors: [], date: YYYY-MM-DD }
// external_1:  { status: not started, auditors: [], date: YYYY-MM-DD }
// external_2:  { status: not started, auditors: [], date: YYYY-MM-DD }
// =====================
 
#pragma once
#include "barretenberg/common/assert.hpp"
#include "barretenberg/common/throw_or_abort.hpp"
#include "barretenberg/numeric/uint256/uint256.hpp"
#include <cstddef>
#include <ostream>
 
// Currently disabled, because there are violations of the tag invariant in the codebase everywhere.
// TODO(https://github.com/AztecProtocol/barretenberg/issues/1409): Re-enable this once the tag invariant is restored.
#define DISABLE_FREE_WITNESS_CHECK
#define DISABLE_DIFFERENT_TRANSCRIPT_CHECKS
#define DISABLE_CHILD_TAG_CHECKS
 
// Disable origin tags in release builds
#ifdef NDEBUG
#define AZTEC_NO_ORIGIN_TAGS
#endif
#define STANDARD_TESTING_TAGS /*Tags reused in tests*/                                                                 \
    const size_t parent_id = 0;                                                                                        \
    [[maybe_unused]] const auto clear_tag = OriginTag();                                                               \
    const auto submitted_value_origin_tag = OriginTag(                                                                 \
        parent_id, /*round_id=*/0, /*is_submitted=*/true); /*A tag describing a value submitted in the 0th round*/     \
    const auto next_submitted_value_origin_tag = OriginTag(                                                            \
        parent_id, /*round_id=*/1, /*is_submitted=*/true); /*A tag describing a value submitted in the 1st round*/     \
    const auto challenge_origin_tag = OriginTag(                                                                       \
        parent_id, /*round_id=*/0, /*is_submitted=*/false); /*A tag describing a challenge derived in the 0th round*/  \
    const auto next_challenge_tag = OriginTag(                                                                         \
        parent_id, /*round_id=*/1, /*is_submitted=*/false); /*A tag describing a challenge derived in the 1st round*/  \
    const auto first_two_merged_tag =                                                                                  \
        OriginTag(submitted_value_origin_tag,                                                                          \
                  challenge_origin_tag); /*A tag describing a value constructed from values submitted by the prover in \
                                            the 0th round and challenges from the same round */                        \
    const auto first_and_third_merged_tag =                                                                            \
        OriginTag(submitted_value_origin_tag,                                                                          \
                  next_challenge_tag); /* A tag describing a value constructed from values submitted in the 0th round  \
                                          and challenges computed in the 1st round*/                                   \
    const auto first_second_third_merged_tag = OriginTag(                                                              \
        first_two_merged_tag, next_challenge_tag); /* A tag describing a value computed from values submitted in the   \
                                                      0th round and challenges generated in the 0th and 1st round*/    \
    const auto first_to_fourth_merged_tag =                                                                            \
        OriginTag(first_second_third_merged_tag,                                                                       \
                  next_submitted_value_origin_tag); /* A tag describing a value computed from values submitted in the  \
                                 0th and 1st round and challenges generated in the 0th and 1st round*/                 \
    const auto instant_death_tag = []() {                                                                              \
        auto some_tag = OriginTag();                                                                                   \
        some_tag.poison();                                                                                             \
        return some_tag;                                                                                               \
    }(); /* A tag that causes and abort on any arithmetic*/
 
namespace bb {
 
void check_child_tags(const uint256_t& tag_a, const uint256_t& tag_b);
#ifndef AZTEC_NO_ORIGIN_TAGS
struct OriginTag {
 
    static constexpr size_t CONSTANT = static_cast<size_t>(-1);
    static constexpr size_t FREE_WITNESS = static_cast<size_t>(-2);
    // Parent tag is supposed to represent the index of a unique trancript object that generated the value. It uses
    // a concrete index, not bits for now, since we never expect two different indices to be used in the same
    // computation apart from equality assertion
    // Parent tag is set to CONSTANT if the value is just a constant
    // Parent tag is set to FREE_WITNESS if the value is a free witness (not a constant and not from the transcript)
    size_t parent_tag = CONSTANT;
 
    // Child tag specifies which submitted values and challenges have been used to generate this element
    // The lower 128 bits represent using a submitted value from a corresponding round (the shift represents the
    // round) The higher 128 bits represent using a challenge value from an corresponding round (the shift
    // represents the round)
    numeric::uint256_t child_tag = numeric::uint256_t(0);
 
    // Instant death is used for poisoning values we should never use in arithmetic
    bool instant_death = false;
 
    // Default Origin Tag has everything set to zero and can't cause any issues
    OriginTag() = default;
    OriginTag(const OriginTag& other) = default;
    OriginTag(OriginTag&& other) = default;
    OriginTag& operator=(const OriginTag& other) = default;
    OriginTag& operator=(OriginTag&& other) noexcept
    {
 
        parent_tag = other.parent_tag;
        child_tag = other.child_tag;
        instant_death = other.instant_death;
        return *this;
    }
    OriginTag(size_t parent_index, size_t child_index, bool is_submitted = true)
        : parent_tag(parent_index)
        , child_tag((static_cast<uint256_t>(1) << (child_index + (is_submitted ? 0 : 128))))
    {
        BB_ASSERT_LT(child_index, 128U);
    }
 
    OriginTag(const OriginTag& tag_a, const OriginTag& tag_b);
 
    template <class... T>
    OriginTag(const OriginTag& tag, const T&... rest)
        : parent_tag(tag.parent_tag)
        , child_tag(tag.child_tag)
        , instant_death(tag.instant_death)
    {
 
        OriginTag merged_tag = *this;
        for (const auto& next_tag : { rest... }) {
            merged_tag = OriginTag(merged_tag, next_tag);
        }
        *this = merged_tag;
    }
    ~OriginTag() = default;
    bool operator==(const OriginTag& other) const;
    void poison() { instant_death = true; }
    void unpoison() { instant_death = false; }
    bool is_poisoned() const { return instant_death; }
    bool is_empty() const { return !instant_death && parent_tag == CONSTANT; };
 
#ifndef DISABLE_FREE_WITNESS_CHECK
    bool is_free_witness() const { return parent_tag == FREE_WITNESS; }
    void set_free_witness()
    {
        parent_tag = FREE_WITNESS;
        child_tag = 0;
    }
    void unset_free_witness()
    {
        parent_tag = CONSTANT;
        child_tag = numeric::uint256_t(0);
    }
 
// The checks are disabled by disallowing to set the free witness tag, because if they are set, it's very hard to make
// the logic of checks work
#else
    bool is_free_witness() const { return false; }
    void set_free_witness() {}
    void unset_free_witness() {}
#endif
};
inline std::ostream& operator<<(std::ostream& os, OriginTag const& v)
{
    return os << "{ p_t: " << v.parent_tag << ", ch_t: " << v.child_tag << ", instadeath: " << v.instant_death << " }";
}
 
#else
 
struct OriginTag {
    OriginTag() = default;
    OriginTag(const OriginTag& other) = default;
    OriginTag(OriginTag&& other) = default;
    OriginTag& operator=(const OriginTag& other) = default;
    OriginTag& operator=(OriginTag&& other) = default;
    ~OriginTag() = default;
 
    OriginTag(size_t parent_index [[maybe_unused]],
              size_t child_index [[maybe_unused]],
              bool is_submitted [[maybe_unused]] = true)
    {}
 
    OriginTag(const OriginTag&, const OriginTag&) {}
    template <class... T> OriginTag(const OriginTag&, const T&...) {}
    bool operator==(const OriginTag& other) const;
    void poison() {}
    void unpoison() {}
    static bool is_poisoned() { return false; }
    static bool is_empty() { return true; };
    bool is_free_witness() const { return false; }
    void set_free_witness() {}
    void unset_free_witness() {}
};
inline std::ostream& operator<<(std::ostream& os, OriginTag const&)
{
    return os << "{ Origin Tag tracking is disabled in release builds }";
}
#endif
} // namespace bb
template <typename T>
concept usesTag = requires(T x, const bb::OriginTag& tag) { x.set_origin_tag(tag); };