Struct OracleSetupChannel 

pub struct OracleSetupChannel { /* private fields */ }

An IOPVerifierChannel that records the OracleSpec of each received oracle.

This performs no verification.

Every receive returns a dummy value, and sampling, observing, and asserting are no-ops.

Drive an IOP verifier with it, then read back what it recorded.

The channel carries one protocol-level zero-knowledge flag.

An oracle is zero-knowledge only if that flag is set and the oracle is witness-dependent.

What is recorded

Two views of the same dry run, differing only in whether round boundaries survive.

• The flat sequence of oracles, in arrival order.
• That same sequence, grouped into the rounds the oracles are committed in.

A round closes wherever a challenge could be drawn.

That is where a decorator committing a round as one oracle stops taking members.

Implementations

impl OracleSetupChannel

pub const fn new(is_zk: bool) -> Self

Creates a new setup channel with the given protocol-level zero-knowledge flag.

pub fn oracle_specs(&self) -> &[OracleSpec]

Returns the oracle specs recorded so far.

pub fn into_oracle_specs(self) -> Vec<OracleSpec>

Consumes the channel and returns the recorded oracle specs, in the order received.

pub fn into_oracle_schedule(self) -> OracleSchedule

Consumes the channel and returns the recorded oracles, grouped by commit round.

The round left open at the end of the dry run is closed here.

So every recorded oracle belongs to some round.

Trait Implementations

impl Clone for OracleSetupChannel

fn clone(&self) -> OracleSetupChannel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OracleSetupChannel

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OracleSetupChannel

fn default() -> OracleSetupChannel

Returns the “default value” for a type.

impl<F: Field> IOPVerifierChannel<F> for OracleSetupChannel

type Oracle = ()

fn remaining_oracle_specs(&self) -> &[OracleSpec]

Returns the specifications for the remaining oracles to be received.

fn recv_oracle( &mut self, log_msg_len: usize, is_witness_dependent: bool, ) -> Result<Self::Oracle, Error>

Receives an oracle commitment from the prover.

fn verify_oracle_relation( &mut self, _oracle: Self::Oracle, _transparent: TransparentEvalFn<Self::Elem>, _claim: Self::Elem, ) -> Result<(), Error>

Queues one oracle linear relation to be opened.

impl<F: Field> IPVerifierChannel<F> for OracleSetupChannel

type Elem = DummyElem<F>

The element type returned by receive and sample methods.

fn recv_one(&mut self) -> Result<DummyElem<F>, Error>

Receives a single field element from the prover.

fn recv_many(&mut self, n: usize) -> Result<Vec<DummyElem<F>>, Error>

Receives n field elements from the prover.

fn recv_array<const N: usize>(&mut self) -> Result<[DummyElem<F>; N], Error>

Receives a fixed-size array of field elements from the prover.

fn sample(&mut self) -> DummyElem<F>

Samples a random challenge.

fn observe_one(&mut self, _val: F) -> DummyElem<F>

Observes a single field element, feeding it into the Fiat-Shamir state.

fn observe_many(&mut self, vals: &[F]) -> Vec<DummyElem<F>>

Observes multiple field elements, feeding them into the Fiat-Shamir state.

fn assert_zero(&mut self, _val: DummyElem<F>) -> Result<(), Error>

Asserts that a value is zero.

fn recv_public_claim(&mut self) -> Result<Self::Elem, Error>

Receives a value the verifier could compute for itself, taken as advice.

fn sample_many(&mut self, n: usize) -> Vec<Self::Elem>

Samples n random challenges.

fn sample_array<const N: usize>(&mut self) -> [Self::Elem; N]

Samples a fixed-size array of random challenges.

impl<F: BinaryField> WordIPVerifierChannel<F> for OracleSetupChannel

type Word = Word

The word type this channel carries.

fn observe_words(&mut self, words: &[Word]) -> Vec<Word>

Feeds words into the Fiat-Shamir state, each as eight little-endian bytes, and returns them as this channel’s word type.

fn subset_sum(&mut self, _elems: &[DummyElem<F>], _word: &Word) -> DummyElem<F>

Returns the sum of the elems selected by the low bits of word, low bit first.

fn select(&mut self, _elems: &[DummyElem<F>], _word: &Word) -> DummyElem<F>

Returns the element of elems at the index in the low bits of word.

fn sample_bits(&mut self, _bits: usize) -> Word

Samples a uniform word of the given bit width.

fn pack_words(&mut self, words: &[Word]) -> Vec<DummyElem<F>>

Packs words into field elements, as many words to an element as one holds.