Struct ZKProver 

pub struct ZKProver<P, H>
where
    P: PackedField<Scalar = Ghash128b>,
    H: ParallelHashSuite,
{ /* private fields */ }

Zero-knowledge prover for Binius64 constraint systems.

Wraps the Binius64 IOP prover with a Spartan-based ZK wrapper. Call Self::setup with a [ZKVerifier], then Self::prove with witness data and a proof transcript.

Implementations

impl<P, H> ZKProver<P, H>

where P: PackedField<Scalar = Ghash128b>, H: ParallelHashSuite, Output<H::LeafHash>: SerializeBytes,

pub fn setup(zk_verifier: &ZKVerifier<H>) -> Result<Self, Error>

Constructs a ZK prover from a [ZKVerifier].

pub const fn inner_iop_prover(&self) -> &IOPProver

Returns a reference to the inner IOP prover.

pub const fn key_collection(&self) -> &KeyCollection

Returns a reference to the KeyCollection.

pub fn prove<Challenger_: Challenger>( &self, witness: &ValueVec, rng: impl CryptoRng, transcript: &mut ProverTranscript<Challenger_>, ) -> Result<(), Error>

Generates a ZK proof for a witness.

pub fn prove_sig<Challenger_: Challenger>( &self, witness: &ValueVec, message: &[u8], rng: impl CryptoRng, transcript: &mut ProverTranscript<Challenger_>, ) -> Result<(), Error>

Generates a ZK signature of knowledge over message.

Binds message into the transcript before any other data, then runs the ordinary Self::prove logic. See [binius_verifier::signature] for details.

Trait Implementations

impl<P, H> DeserializeBytes for ZKProver<P, H>

where P: PackedField<Scalar = Ghash128b>, H: ParallelHashSuite, Output<H::LeafHash>: SerializeBytes + DeserializeBytes,

fn deserialize(read_buf: impl Buf) -> Result<Self, SerializationError>

impl<P, H> SerializeBytes for ZKProver<P, H>

where P: PackedField<Scalar = Ghash128b>, H: ParallelHashSuite, Output<H::LeafHash>: SerializeBytes + DeserializeBytes,

Serializes the seed a ZKProver is built from — constraint system, log_inv_rate, and the prebuilt KeyCollection. On DeserializeBytes::deserialize the key collection (the dominant setup cost) is reused as-is while the cheaper derived state is recomputed.

fn serialize(&self, write_buf: impl BufMut) -> Result<(), SerializationError>