@aztec/blob-lib 3.0.0-devnet.6 → 3.0.0-devnet.6-patch.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dest/batched_blob.d.ts +26 -0
- package/dest/batched_blob.d.ts.map +1 -0
- package/dest/batched_blob.js +20 -0
- package/dest/blob.d.ts +6 -11
- package/dest/blob.d.ts.map +1 -1
- package/dest/blob.js +5 -2
- package/dest/blob_batching.d.ts +35 -84
- package/dest/blob_batching.d.ts.map +1 -1
- package/dest/blob_batching.js +73 -108
- package/dest/blob_utils.d.ts +21 -11
- package/dest/blob_utils.d.ts.map +1 -1
- package/dest/blob_utils.js +29 -20
- package/dest/circuit_types/blob_accumulator.d.ts +4 -2
- package/dest/circuit_types/blob_accumulator.d.ts.map +1 -1
- package/dest/circuit_types/blob_accumulator.js +5 -1
- package/dest/circuit_types/final_blob_accumulator.d.ts +3 -2
- package/dest/circuit_types/final_blob_accumulator.d.ts.map +1 -1
- package/dest/circuit_types/final_blob_accumulator.js +2 -1
- package/dest/circuit_types/final_blob_batching_challenges.d.ts +3 -2
- package/dest/circuit_types/final_blob_batching_challenges.d.ts.map +1 -1
- package/dest/circuit_types/final_blob_batching_challenges.js +2 -1
- package/dest/circuit_types/index.d.ts +1 -1
- package/dest/encoding/block_blob_data.d.ts +22 -0
- package/dest/encoding/block_blob_data.d.ts.map +1 -0
- package/dest/encoding/block_blob_data.js +65 -0
- package/dest/encoding/block_end_marker.d.ts +11 -0
- package/dest/encoding/block_end_marker.d.ts.map +1 -0
- package/dest/encoding/block_end_marker.js +41 -0
- package/dest/encoding/block_end_state_field.d.ts +12 -0
- package/dest/encoding/block_end_state_field.d.ts.map +1 -0
- package/dest/encoding/block_end_state_field.js +39 -0
- package/dest/encoding/checkpoint_blob_data.d.ts +15 -0
- package/dest/encoding/checkpoint_blob_data.d.ts.map +1 -0
- package/dest/encoding/checkpoint_blob_data.js +67 -0
- package/dest/encoding/checkpoint_end_marker.d.ts +8 -0
- package/dest/encoding/checkpoint_end_marker.d.ts.map +1 -0
- package/dest/encoding/checkpoint_end_marker.js +28 -0
- package/dest/encoding/fixtures.d.ts +41 -0
- package/dest/encoding/fixtures.d.ts.map +1 -0
- package/dest/encoding/fixtures.js +140 -0
- package/dest/encoding/index.d.ts +10 -0
- package/dest/encoding/index.d.ts.map +1 -0
- package/dest/encoding/index.js +9 -0
- package/dest/encoding/tx_blob_data.d.ts +19 -0
- package/dest/encoding/tx_blob_data.d.ts.map +1 -0
- package/dest/encoding/tx_blob_data.js +79 -0
- package/dest/encoding/tx_start_marker.d.ts +16 -0
- package/dest/encoding/tx_start_marker.d.ts.map +1 -0
- package/dest/{encoding.js → encoding/tx_start_marker.js} +13 -59
- package/dest/errors.d.ts +1 -1
- package/dest/errors.d.ts.map +1 -1
- package/dest/hash.d.ts +13 -5
- package/dest/hash.d.ts.map +1 -1
- package/dest/hash.js +19 -8
- package/dest/index.d.ts +4 -4
- package/dest/index.d.ts.map +1 -1
- package/dest/index.js +3 -3
- package/dest/interface.d.ts +1 -1
- package/dest/kzg_context.d.ts +6 -2
- package/dest/kzg_context.d.ts.map +1 -1
- package/dest/kzg_context.js +12 -3
- package/dest/sponge_blob.d.ts +9 -15
- package/dest/sponge_blob.d.ts.map +1 -1
- package/dest/sponge_blob.js +21 -36
- package/dest/testing.d.ts +8 -16
- package/dest/testing.d.ts.map +1 -1
- package/dest/testing.js +35 -64
- package/dest/types.d.ts +2 -1
- package/dest/types.d.ts.map +1 -1
- package/dest/types.js +1 -0
- package/package.json +8 -7
- package/src/batched_blob.ts +26 -0
- package/src/blob.ts +5 -2
- package/src/blob_batching.ts +91 -126
- package/src/blob_utils.ts +33 -22
- package/src/circuit_types/blob_accumulator.ts +13 -1
- package/src/circuit_types/final_blob_accumulator.ts +2 -1
- package/src/circuit_types/final_blob_batching_challenges.ts +2 -1
- package/src/encoding/block_blob_data.ts +102 -0
- package/src/encoding/block_end_marker.ts +55 -0
- package/src/encoding/block_end_state_field.ts +59 -0
- package/src/encoding/checkpoint_blob_data.ts +95 -0
- package/src/encoding/checkpoint_end_marker.ts +40 -0
- package/src/encoding/fixtures.ts +210 -0
- package/src/encoding/index.ts +9 -0
- package/src/encoding/tx_blob_data.ts +116 -0
- package/src/{encoding.ts → encoding/tx_start_marker.ts} +19 -76
- package/src/hash.ts +20 -8
- package/src/index.ts +3 -3
- package/src/kzg_context.ts +12 -1
- package/src/sponge_blob.ts +23 -36
- package/src/testing.ts +47 -73
- package/src/types.ts +1 -0
- package/dest/deserialize.d.ts +0 -14
- package/dest/deserialize.d.ts.map +0 -1
- package/dest/deserialize.js +0 -33
- package/dest/encoding.d.ts +0 -26
- package/dest/encoding.d.ts.map +0 -1
- package/src/deserialize.ts +0 -38
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import { BLS12Fr, BLS12Point } from '@aztec/foundation/curves/bls12';
|
|
2
|
+
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
|
+
import { FinalBlobAccumulator } from './circuit_types/index.js';
|
|
4
|
+
/**
|
|
5
|
+
* A class to represent the result from accumulating blobs in an epoch using BatchedBlobAccumulator.
|
|
6
|
+
*/
|
|
7
|
+
export declare class BatchedBlob {
|
|
8
|
+
readonly blobCommitmentsHash: Fr;
|
|
9
|
+
readonly z: Fr;
|
|
10
|
+
readonly y: BLS12Fr;
|
|
11
|
+
readonly commitment: BLS12Point;
|
|
12
|
+
readonly q: BLS12Point;
|
|
13
|
+
constructor(
|
|
14
|
+
/** Hash of Cs (to link to L1 blob hashes). */
|
|
15
|
+
blobCommitmentsHash: Fr,
|
|
16
|
+
/** Challenge point z such that p_i(z) = y_i. */
|
|
17
|
+
z: Fr,
|
|
18
|
+
/** Evaluation y, linear combination of all evaluations y_i = p_i(z) with gamma. */
|
|
19
|
+
y: BLS12Fr,
|
|
20
|
+
/** Commitment C, linear combination of all commitments C_i = [p_i] with gamma. */
|
|
21
|
+
commitment: BLS12Point,
|
|
22
|
+
/** KZG opening 'proof' Q (commitment to the quotient poly.), linear combination of all blob kzg 'proofs' Q_i with gamma. */
|
|
23
|
+
q: BLS12Point);
|
|
24
|
+
toFinalBlobAccumulator(): FinalBlobAccumulator;
|
|
25
|
+
}
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYmF0Y2hlZF9ibG9iLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvYmF0Y2hlZF9ibG9iLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sZ0NBQWdDLENBQUM7QUFDckUsT0FBTyxFQUFFLEVBQUUsRUFBRSxNQUFNLGdDQUFnQyxDQUFDO0FBRXBELE9BQU8sRUFBRSxvQkFBb0IsRUFBRSxNQUFNLDBCQUEwQixDQUFDO0FBRWhFOztHQUVHO0FBQ0gscUJBQWEsV0FBVzthQUdKLG1CQUFtQixFQUFFLEVBQUU7YUFFdkIsQ0FBQyxFQUFFLEVBQUU7YUFFTCxDQUFDLEVBQUUsT0FBTzthQUVWLFVBQVUsRUFBRSxVQUFVO2FBRXRCLENBQUMsRUFBRSxVQUFVO0lBVi9CO0lBQ0UsOENBQThDO0lBQzlCLG1CQUFtQixFQUFFLEVBQUU7SUFDdkMsZ0RBQWdEO0lBQ2hDLENBQUMsRUFBRSxFQUFFO0lBQ3JCLG1GQUFtRjtJQUNuRSxDQUFDLEVBQUUsT0FBTztJQUMxQixrRkFBa0Y7SUFDbEUsVUFBVSxFQUFFLFVBQVU7SUFDdEMsNEhBQTRIO0lBQzVHLENBQUMsRUFBRSxVQUFVLEVBQzNCO0lBRUosc0JBQXNCLHlCQUVyQjtDQUNGIn0=
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"batched_blob.d.ts","sourceRoot":"","sources":["../src/batched_blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;GAEG;AACH,qBAAa,WAAW;aAGJ,mBAAmB,EAAE,EAAE;aAEvB,CAAC,EAAE,EAAE;aAEL,CAAC,EAAE,OAAO;aAEV,UAAU,EAAE,UAAU;aAEtB,CAAC,EAAE,UAAU;IAV/B;IACE,8CAA8C;IAC9B,mBAAmB,EAAE,EAAE;IACvC,gDAAgD;IAChC,CAAC,EAAE,EAAE;IACrB,mFAAmF;IACnE,CAAC,EAAE,OAAO;IAC1B,kFAAkF;IAClE,UAAU,EAAE,UAAU;IACtC,4HAA4H;IAC5G,CAAC,EAAE,UAAU,EAC3B;IAEJ,sBAAsB,yBAErB;CACF"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import { FinalBlobAccumulator } from './circuit_types/index.js';
|
|
2
|
+
/**
|
|
3
|
+
* A class to represent the result from accumulating blobs in an epoch using BatchedBlobAccumulator.
|
|
4
|
+
*/ export class BatchedBlob {
|
|
5
|
+
blobCommitmentsHash;
|
|
6
|
+
z;
|
|
7
|
+
y;
|
|
8
|
+
commitment;
|
|
9
|
+
q;
|
|
10
|
+
constructor(/** Hash of Cs (to link to L1 blob hashes). */ blobCommitmentsHash, /** Challenge point z such that p_i(z) = y_i. */ z, /** Evaluation y, linear combination of all evaluations y_i = p_i(z) with gamma. */ y, /** Commitment C, linear combination of all commitments C_i = [p_i] with gamma. */ commitment, /** KZG opening 'proof' Q (commitment to the quotient poly.), linear combination of all blob kzg 'proofs' Q_i with gamma. */ q){
|
|
11
|
+
this.blobCommitmentsHash = blobCommitmentsHash;
|
|
12
|
+
this.z = z;
|
|
13
|
+
this.y = y;
|
|
14
|
+
this.commitment = commitment;
|
|
15
|
+
this.q = q;
|
|
16
|
+
}
|
|
17
|
+
toFinalBlobAccumulator() {
|
|
18
|
+
return new FinalBlobAccumulator(this.blobCommitmentsHash, this.z, this.y, this.commitment);
|
|
19
|
+
}
|
|
20
|
+
}
|
package/dest/blob.d.ts
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { FIELDS_PER_BLOB } from '@aztec/constants';
|
|
2
|
-
import { BLS12Fr
|
|
2
|
+
import { BLS12Fr } from '@aztec/foundation/curves/bls12';
|
|
3
|
+
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
4
|
import { BufferReader } from '@aztec/foundation/serialize';
|
|
4
5
|
import type { BlobJson } from './interface.js';
|
|
5
6
|
export { FIELDS_PER_BLOB };
|
|
@@ -11,13 +12,7 @@ export { FIELDS_PER_BLOB };
|
|
|
11
12
|
* and is correctly encoded.
|
|
12
13
|
*/
|
|
13
14
|
export declare class Blob {
|
|
14
|
-
/**
|
|
15
|
-
* The data to be broadcast on L1 in bytes form.
|
|
16
|
-
*/
|
|
17
15
|
readonly data: Uint8Array;
|
|
18
|
-
/**
|
|
19
|
-
* Commitment to the blob data. Used in compressed BLS12 point format (48 bytes).
|
|
20
|
-
*/
|
|
21
16
|
readonly commitment: Buffer;
|
|
22
17
|
constructor(
|
|
23
18
|
/**
|
|
@@ -113,9 +108,9 @@ export declare class Blob {
|
|
|
113
108
|
*/
|
|
114
109
|
getSize(): number;
|
|
115
110
|
static getViemKzgInstance(): {
|
|
116
|
-
blobToKzgCommitment: (blob: Uint8Array) => Uint8Array
|
|
117
|
-
computeBlobKzgProof: (blob: Uint8Array
|
|
118
|
-
computeCellsAndKzgProofs: (b: Uint8Array) => [Uint8Array[], Uint8Array[]];
|
|
111
|
+
blobToKzgCommitment: (blob: Uint8Array<ArrayBufferLike>) => Uint8Array<ArrayBufferLike>;
|
|
112
|
+
computeBlobKzgProof: (blob: Uint8Array<ArrayBufferLike>, commitment: Uint8Array<ArrayBufferLike>) => Uint8Array<ArrayBufferLike>;
|
|
113
|
+
computeCellsAndKzgProofs: (b: Uint8Array<ArrayBufferLike>) => [Uint8Array<ArrayBufferLike>[], Uint8Array<ArrayBufferLike>[]];
|
|
119
114
|
};
|
|
120
115
|
}
|
|
121
|
-
//# sourceMappingURL=
|
|
116
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/dest/blob.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"blob.d.ts","sourceRoot":"","sources":["../src/blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"blob.d.ts","sourceRoot":"","sources":["../src/blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AAG9E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B;;;;;;GAMG;AACH,qBAAa,IAAI;aAKG,IAAI,EAAE,UAAU;aAIhB,UAAU,EAAE,MAAM;IARpC;IACE;;OAEG;IACa,IAAI,EAAE,UAAU;IAChC;;OAEG;IACa,UAAU,EAAE,MAAM,EAQnC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAG5C;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAQpC;IAED;;;;;;OAMG;IACH,QAAQ,IAAI,EAAE,EAAE,CAIf;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CASpC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAO9B;IAED,uBAAuB,IAAI,MAAM,CAEhC;IAED;;;OAGG;IACG,iBAAiB,CAAC,cAAc,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAEvD;IAED;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,WAAW,UAAQ;;;MAU3C;IAED;;;;;;OAMG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAGlD;IAED;;OAEG;IACH,OAAO,WAEN;IAED,MAAM,CAAC,kBAAkB;;;;MAUxB;CACF"}
|
package/dest/blob.js
CHANGED
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
import { FIELDS_PER_BLOB } from '@aztec/constants';
|
|
2
|
-
import { BLS12Fr
|
|
2
|
+
import { BLS12Fr } from '@aztec/foundation/curves/bls12';
|
|
3
|
+
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
4
|
import { BufferReader, serializeToBuffer } from '@aztec/foundation/serialize';
|
|
4
5
|
import { computeBlobCommitment, computeChallengeZ, computeEthVersionedBlobHash } from './hash.js';
|
|
5
|
-
import { BYTES_PER_BLOB, BYTES_PER_COMMITMENT,
|
|
6
|
+
import { BYTES_PER_BLOB, BYTES_PER_COMMITMENT, getKzg } from './kzg_context.js';
|
|
6
7
|
export { FIELDS_PER_BLOB };
|
|
7
8
|
/**
|
|
8
9
|
* A class to create, manage, and prove EVM blobs.
|
|
@@ -114,6 +115,7 @@ export { FIELDS_PER_BLOB };
|
|
|
114
115
|
* y: BLS12Fr - Evaluation y = p(z), where p() is the blob polynomial. BLS12 field element, rep. as BigNum in nr, bigint in ts.
|
|
115
116
|
* proof: Buffer - KZG opening proof for y = p(z). The commitment to quotient polynomial Q, used in compressed BLS12 point format (48 bytes).
|
|
116
117
|
*/ evaluate(challengeZ, verifyProof = false) {
|
|
118
|
+
const kzg = getKzg();
|
|
117
119
|
const res = kzg.computeKzgProof(this.data, challengeZ.toBuffer());
|
|
118
120
|
if (verifyProof && !kzg.verifyKzgProof(this.commitment, challengeZ.toBuffer(), res[1], res[0])) {
|
|
119
121
|
throw new Error(`KZG proof did not verify.`);
|
|
@@ -151,6 +153,7 @@ export { FIELDS_PER_BLOB };
|
|
|
151
153
|
return this.data.length;
|
|
152
154
|
}
|
|
153
155
|
static getViemKzgInstance() {
|
|
156
|
+
const kzg = getKzg();
|
|
154
157
|
return {
|
|
155
158
|
blobToKzgCommitment: kzg.blobToKzgCommitment.bind(kzg),
|
|
156
159
|
computeBlobKzgProof: kzg.computeBlobKzgProof.bind(kzg),
|
package/dest/blob_batching.d.ts
CHANGED
|
@@ -1,97 +1,20 @@
|
|
|
1
|
-
import { BLS12Fr, BLS12Point
|
|
1
|
+
import { BLS12Fr, BLS12Point } from '@aztec/foundation/curves/bls12';
|
|
2
|
+
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
|
+
import { BatchedBlob } from './batched_blob.js';
|
|
2
4
|
import { Blob } from './blob.js';
|
|
3
5
|
import { BlobAccumulator, FinalBlobAccumulator, FinalBlobBatchingChallenges } from './circuit_types/index.js';
|
|
4
6
|
/**
|
|
5
7
|
* A class to create, manage, and prove batched EVM blobs.
|
|
6
|
-
*/
|
|
7
|
-
export declare class BatchedBlob {
|
|
8
|
-
/** Hash of Cs (to link to L1 blob hashes). */
|
|
9
|
-
readonly blobCommitmentsHash: Fr;
|
|
10
|
-
/** Challenge point z such that p_i(z) = y_i. */
|
|
11
|
-
readonly z: Fr;
|
|
12
|
-
/** Evaluation y, linear combination of all evaluations y_i = p_i(z) with gamma. */
|
|
13
|
-
readonly y: BLS12Fr;
|
|
14
|
-
/** Commitment C, linear combination of all commitments C_i = [p_i] with gamma. */
|
|
15
|
-
readonly commitment: BLS12Point;
|
|
16
|
-
/** KZG opening 'proof' Q (commitment to the quotient poly.), linear combination of all blob kzg 'proofs' Q_i with gamma. */
|
|
17
|
-
readonly q: BLS12Point;
|
|
18
|
-
constructor(
|
|
19
|
-
/** Hash of Cs (to link to L1 blob hashes). */
|
|
20
|
-
blobCommitmentsHash: Fr,
|
|
21
|
-
/** Challenge point z such that p_i(z) = y_i. */
|
|
22
|
-
z: Fr,
|
|
23
|
-
/** Evaluation y, linear combination of all evaluations y_i = p_i(z) with gamma. */
|
|
24
|
-
y: BLS12Fr,
|
|
25
|
-
/** Commitment C, linear combination of all commitments C_i = [p_i] with gamma. */
|
|
26
|
-
commitment: BLS12Point,
|
|
27
|
-
/** KZG opening 'proof' Q (commitment to the quotient poly.), linear combination of all blob kzg 'proofs' Q_i with gamma. */
|
|
28
|
-
q: BLS12Point);
|
|
29
|
-
/**
|
|
30
|
-
* Get the final batched opening proof from multiple blobs.
|
|
31
|
-
* @dev MUST input all blobs to be broadcast. Does not work in multiple calls because z and gamma are calculated
|
|
32
|
-
* beforehand from ALL blobs.
|
|
33
|
-
*
|
|
34
|
-
* @returns A batched blob.
|
|
35
|
-
*/
|
|
36
|
-
static batch(blobs: Blob[][]): Promise<BatchedBlob>;
|
|
37
|
-
/**
|
|
38
|
-
* Returns an empty BatchedBlobAccumulator with precomputed challenges from all blobs in the epoch.
|
|
39
|
-
* @dev MUST input all blobs to be broadcast. Does not work in multiple calls because z and gamma are calculated
|
|
40
|
-
* beforehand from ALL blobs.
|
|
41
|
-
*/
|
|
42
|
-
static newAccumulator(blobs: Blob[][]): Promise<BatchedBlobAccumulator>;
|
|
43
|
-
/**
|
|
44
|
-
* Gets the final challenges based on all blobs and their elements to perform a multi opening proof.
|
|
45
|
-
* Used in BatchedBlobAccumulator as 'finalZ' and finalGamma':
|
|
46
|
-
* - z = H(...H(H(z_0, z_1) z_2)..z_n)
|
|
47
|
-
* - where z_i = H(H(fields of blob_i), C_i) = Blob.challengeZ,
|
|
48
|
-
* - used such that p_i(z) = y_i = Blob.evaluationY for all n blob polynomials p_i().
|
|
49
|
-
* - gamma = H(H(...H(H(y_0, y_1) y_2)..y_n), z)
|
|
50
|
-
* - used such that y = sum_i { gamma^i * y_i }, and C = sum_i { gamma^i * C_i }, for all blob evaluations y_i (see above) and commitments C_i.
|
|
51
|
-
*
|
|
52
|
-
* @param blobs - The blobs to precompute the challenges for. Each sub-array is the blobs for an L1 block.
|
|
53
|
-
* @returns Challenges z and gamma.
|
|
54
|
-
*/
|
|
55
|
-
static precomputeBatchedBlobChallenges(blobs: Blob[][]): Promise<FinalBlobBatchingChallenges>;
|
|
56
|
-
verify(): boolean;
|
|
57
|
-
getEthVersionedBlobHash(): Buffer;
|
|
58
|
-
/**
|
|
59
|
-
* Returns a proof of opening of the blobs to verify on L1 using the point evaluation precompile:
|
|
60
|
-
*
|
|
61
|
-
* input[:32] - versioned_hash
|
|
62
|
-
* input[32:64] - z
|
|
63
|
-
* input[64:96] - y
|
|
64
|
-
* input[96:144] - commitment C
|
|
65
|
-
* input[144:192] - commitment Q (a 'proof' committing to the quotient polynomial q(X))
|
|
66
|
-
*
|
|
67
|
-
* See https://eips.ethereum.org/EIPS/eip-4844#point-evaluation-precompile
|
|
68
|
-
*/
|
|
69
|
-
getEthBlobEvaluationInputs(): `0x${string}`;
|
|
70
|
-
toFinalBlobAccumulator(): FinalBlobAccumulator;
|
|
71
|
-
}
|
|
72
|
-
/**
|
|
73
8
|
* See noir-projects/noir-protocol-circuits/crates/blob/src/abis/blob_accumulator.nr
|
|
74
9
|
*/
|
|
75
10
|
export declare class BatchedBlobAccumulator {
|
|
76
|
-
/** Hash of Cs (to link to L1 blob hashes). */
|
|
77
11
|
readonly blobCommitmentsHashAcc: Fr;
|
|
78
|
-
/** Challenge point z_acc. Final value used such that p_i(z) = y_i. */
|
|
79
12
|
readonly zAcc: Fr;
|
|
80
|
-
/** Evaluation y_acc. Final value is is linear combination of all evaluations y_i = p_i(z) with gamma. */
|
|
81
13
|
readonly yAcc: BLS12Fr;
|
|
82
|
-
/** Commitment c_acc. Final value is linear combination of all commitments C_i = [p_i] with gamma. */
|
|
83
14
|
readonly cAcc: BLS12Point;
|
|
84
|
-
/** KZG opening q_acc. Final value is linear combination of all blob kzg 'proofs' Q_i with gamma. */
|
|
85
15
|
readonly qAcc: BLS12Point;
|
|
86
|
-
/**
|
|
87
|
-
* Challenge point gamma_acc for multi opening. Used with y, C, and kzg 'proof' Q above.
|
|
88
|
-
* TODO(#13608): We calculate this by hashing natively in the circuit (hence Fr representation), but it's actually used
|
|
89
|
-
* as a BLS12Fr field elt. Is this safe? Is there a skew?
|
|
90
|
-
*/
|
|
91
16
|
readonly gammaAcc: Fr;
|
|
92
|
-
/** Simply gamma^(i + 1) at blob i. Used for calculating the i'th element of the above linear comb.s */
|
|
93
17
|
readonly gammaPow: BLS12Fr;
|
|
94
|
-
/** Final challenge values used in evaluation. Optimistically input and checked in the final acc. */
|
|
95
18
|
readonly finalBlobChallenges: FinalBlobBatchingChallenges;
|
|
96
19
|
constructor(
|
|
97
20
|
/** Hash of Cs (to link to L1 blob hashes). */
|
|
@@ -119,19 +42,46 @@ export declare class BatchedBlobAccumulator {
|
|
|
119
42
|
* @returns An empty blob accumulator with challenges.
|
|
120
43
|
*/
|
|
121
44
|
static newWithChallenges(finalBlobChallenges: FinalBlobBatchingChallenges): BatchedBlobAccumulator;
|
|
45
|
+
/**
|
|
46
|
+
* Returns an empty BatchedBlobAccumulator with precomputed challenges from all blobs in the epoch.
|
|
47
|
+
* @dev MUST input all blobs to be broadcast. Does not work in multiple calls because z and gamma are calculated
|
|
48
|
+
* beforehand from ALL blobs.
|
|
49
|
+
*/
|
|
50
|
+
static fromBlobFields(blobFieldsPerCheckpoint: Fr[][]): Promise<BatchedBlobAccumulator>;
|
|
51
|
+
/**
|
|
52
|
+
* Get the final batched opening proof from multiple blobs.
|
|
53
|
+
* @dev MUST input all blobs to be broadcast. Does not work in multiple calls because z and gamma are calculated
|
|
54
|
+
* beforehand from ALL blobs.
|
|
55
|
+
*
|
|
56
|
+
* @returns A batched blob.
|
|
57
|
+
*/
|
|
58
|
+
static batch(blobFieldsPerCheckpoint: Fr[][], verifyProof?: boolean): Promise<BatchedBlob>;
|
|
59
|
+
/**
|
|
60
|
+
* Gets the final challenges based on all blobs and their elements to perform a multi opening proof.
|
|
61
|
+
* Used in BatchedBlobAccumulator as 'finalZ' and finalGamma':
|
|
62
|
+
* - z = H(...H(H(z_0, z_1) z_2)..z_n)
|
|
63
|
+
* - where z_i = H(H(fields of blob_i), C_i) = Blob.challengeZ,
|
|
64
|
+
* - used such that p_i(z) = y_i = Blob.evaluationY for all n blob polynomials p_i().
|
|
65
|
+
* - gamma = H(H(...H(H(y_0, y_1) y_2)..y_n), z)
|
|
66
|
+
* - used such that y = sum_i { gamma^i * y_i }, and C = sum_i { gamma^i * C_i }, for all blob evaluations y_i (see above) and commitments C_i.
|
|
67
|
+
*
|
|
68
|
+
* @param blobs - The blobs to precompute the challenges for. Each sub-array is the blobs for an L1 block.
|
|
69
|
+
* @returns Challenges z and gamma.
|
|
70
|
+
*/
|
|
71
|
+
static precomputeBatchedBlobChallenges(blobFieldsPerCheckpoint: Fr[][]): Promise<FinalBlobBatchingChallenges>;
|
|
122
72
|
/**
|
|
123
73
|
* Given blob i, accumulate all state.
|
|
124
74
|
* We assume the input blob has not been evaluated at z.
|
|
125
75
|
* @returns An updated blob accumulator.
|
|
126
76
|
*/
|
|
127
|
-
|
|
77
|
+
accumulateBlob(blob: Blob, blobFieldsHash: Fr): Promise<BatchedBlobAccumulator>;
|
|
128
78
|
/**
|
|
129
79
|
* Given blobs, accumulate all state.
|
|
130
80
|
* We assume the input blobs have not been evaluated at z.
|
|
131
|
-
* @param
|
|
81
|
+
* @param blobFields - The blob fields of a checkpoint to accumulate.
|
|
132
82
|
* @returns An updated blob accumulator.
|
|
133
83
|
*/
|
|
134
|
-
|
|
84
|
+
accumulateFields(blobFields: Fr[]): Promise<BatchedBlobAccumulator>;
|
|
135
85
|
/**
|
|
136
86
|
* Finalize accumulation state of the epoch.
|
|
137
87
|
* We assume ALL blobs in the epoch have been accumulated.
|
|
@@ -147,9 +97,10 @@ export declare class BatchedBlobAccumulator {
|
|
|
147
97
|
* @returns A batched blob.
|
|
148
98
|
*/
|
|
149
99
|
finalize(verifyProof?: boolean): Promise<BatchedBlob>;
|
|
100
|
+
verify(): boolean;
|
|
150
101
|
isEmptyState(): boolean;
|
|
151
102
|
clone(): BatchedBlobAccumulator;
|
|
152
103
|
toBlobAccumulator(): BlobAccumulator;
|
|
153
104
|
toFinalBlobAccumulator(): FinalBlobAccumulator;
|
|
154
105
|
}
|
|
155
|
-
//# sourceMappingURL=
|
|
106
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"blob_batching.d.ts","sourceRoot":"","sources":["../src/blob_batching.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"blob_batching.d.ts","sourceRoot":"","sources":["../src/blob_batching.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAI9G;;;GAGG;AACH,qBAAa,sBAAsB;aAGf,sBAAsB,EAAE,EAAE;aAE1B,IAAI,EAAE,EAAE;aAER,IAAI,EAAE,OAAO;aAEb,IAAI,EAAE,UAAU;aAEhB,IAAI,EAAE,UAAU;aAMhB,QAAQ,EAAE,EAAE;aAEZ,QAAQ,EAAE,OAAO;aAEjB,mBAAmB,EAAE,2BAA2B;IApBlE;IACE,8CAA8C;IAC9B,sBAAsB,EAAE,EAAE;IAC1C,sEAAsE;IACtD,IAAI,EAAE,EAAE;IACxB,yGAAyG;IACzF,IAAI,EAAE,OAAO;IAC7B,qGAAqG;IACrF,IAAI,EAAE,UAAU;IAChC,oGAAoG;IACpF,IAAI,EAAE,UAAU;IAChC;;;;OAIG;IACa,QAAQ,EAAE,EAAE;IAC5B,uGAAuG;IACvF,QAAQ,EAAE,OAAO;IACjC,oGAAoG;IACpF,mBAAmB,EAAE,2BAA2B,EAC9D;IAEJ;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,2BAA2B,GAAG,sBAAsB,CAWjG;IAED;;;;OAIG;IACH,OAAa,cAAc,CAAC,uBAAuB,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAG5F;IAED;;;;;;OAMG;IACH,OAAa,KAAK,CAAC,uBAAuB,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,UAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAe7F;IAED;;;;;;;;;;;OAWG;IACH,OAAa,+BAA+B,CAAC,uBAAuB,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAmClH;IAED;;;;OAIG;IACG,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,mCAuClD;IAED;;;;;OAKG;IACG,gBAAgB,CAAC,UAAU,EAAE,EAAE,EAAE,mCAkBtC;IAED;;;;;;;;;;;;;OAaG;IACG,QAAQ,CAAC,WAAW,UAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAsBxD;IAED,MAAM,YAOL;IAED,YAAY,YAUX;IAED,KAAK,2BAWJ;IAED,iBAAiB,oBAShB;IAED,sBAAsB,yBAErB;CACF"}
|
package/dest/blob_batching.js
CHANGED
|
@@ -1,24 +1,52 @@
|
|
|
1
|
-
import { AZTEC_MAX_EPOCH_DURATION,
|
|
2
|
-
import { poseidon2Hash
|
|
3
|
-
import {
|
|
4
|
-
import {
|
|
1
|
+
import { AZTEC_MAX_EPOCH_DURATION, BLOBS_PER_CHECKPOINT } from '@aztec/constants';
|
|
2
|
+
import { poseidon2Hash } from '@aztec/foundation/crypto/poseidon';
|
|
3
|
+
import { sha256ToField } from '@aztec/foundation/crypto/sha256';
|
|
4
|
+
import { BLS12Fr, BLS12Point } from '@aztec/foundation/curves/bls12';
|
|
5
|
+
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
6
|
+
import { BatchedBlob } from './batched_blob.js';
|
|
7
|
+
import { getBlobsPerL1Block } from './blob_utils.js';
|
|
5
8
|
import { BlobAccumulator, FinalBlobAccumulator, FinalBlobBatchingChallenges } from './circuit_types/index.js';
|
|
6
|
-
import {
|
|
7
|
-
import {
|
|
9
|
+
import { computeBlobFieldsHash, hashNoirBigNumLimbs } from './hash.js';
|
|
10
|
+
import { getKzg } from './kzg_context.js';
|
|
8
11
|
/**
|
|
9
12
|
* A class to create, manage, and prove batched EVM blobs.
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
13
|
+
* See noir-projects/noir-protocol-circuits/crates/blob/src/abis/blob_accumulator.nr
|
|
14
|
+
*/ export class BatchedBlobAccumulator {
|
|
15
|
+
blobCommitmentsHashAcc;
|
|
16
|
+
zAcc;
|
|
17
|
+
yAcc;
|
|
18
|
+
cAcc;
|
|
19
|
+
qAcc;
|
|
20
|
+
gammaAcc;
|
|
21
|
+
gammaPow;
|
|
22
|
+
finalBlobChallenges;
|
|
23
|
+
constructor(/** Hash of Cs (to link to L1 blob hashes). */ blobCommitmentsHashAcc, /** Challenge point z_acc. Final value used such that p_i(z) = y_i. */ zAcc, /** Evaluation y_acc. Final value is is linear combination of all evaluations y_i = p_i(z) with gamma. */ yAcc, /** Commitment c_acc. Final value is linear combination of all commitments C_i = [p_i] with gamma. */ cAcc, /** KZG opening q_acc. Final value is linear combination of all blob kzg 'proofs' Q_i with gamma. */ qAcc, /**
|
|
24
|
+
* Challenge point gamma_acc for multi opening. Used with y, C, and kzg 'proof' Q above.
|
|
25
|
+
* TODO(#13608): We calculate this by hashing natively in the circuit (hence Fr representation), but it's actually used
|
|
26
|
+
* as a BLS12Fr field elt. Is this safe? Is there a skew?
|
|
27
|
+
*/ gammaAcc, /** Simply gamma^(i + 1) at blob i. Used for calculating the i'th element of the above linear comb.s */ gammaPow, /** Final challenge values used in evaluation. Optimistically input and checked in the final acc. */ finalBlobChallenges){
|
|
28
|
+
this.blobCommitmentsHashAcc = blobCommitmentsHashAcc;
|
|
29
|
+
this.zAcc = zAcc;
|
|
30
|
+
this.yAcc = yAcc;
|
|
31
|
+
this.cAcc = cAcc;
|
|
32
|
+
this.qAcc = qAcc;
|
|
33
|
+
this.gammaAcc = gammaAcc;
|
|
34
|
+
this.gammaPow = gammaPow;
|
|
35
|
+
this.finalBlobChallenges = finalBlobChallenges;
|
|
36
|
+
}
|
|
37
|
+
/**
|
|
38
|
+
* Create the empty accumulation state of the epoch.
|
|
39
|
+
* @returns An empty blob accumulator with challenges.
|
|
40
|
+
*/ static newWithChallenges(finalBlobChallenges) {
|
|
41
|
+
return new BatchedBlobAccumulator(Fr.ZERO, Fr.ZERO, BLS12Fr.ZERO, BLS12Point.ZERO, BLS12Point.ZERO, Fr.ZERO, BLS12Fr.ZERO, finalBlobChallenges);
|
|
42
|
+
}
|
|
43
|
+
/**
|
|
44
|
+
* Returns an empty BatchedBlobAccumulator with precomputed challenges from all blobs in the epoch.
|
|
45
|
+
* @dev MUST input all blobs to be broadcast. Does not work in multiple calls because z and gamma are calculated
|
|
46
|
+
* beforehand from ALL blobs.
|
|
47
|
+
*/ static async fromBlobFields(blobFieldsPerCheckpoint) {
|
|
48
|
+
const finalBlobChallenges = await this.precomputeBatchedBlobChallenges(blobFieldsPerCheckpoint);
|
|
49
|
+
return BatchedBlobAccumulator.newWithChallenges(finalBlobChallenges);
|
|
22
50
|
}
|
|
23
51
|
/**
|
|
24
52
|
* Get the final batched opening proof from multiple blobs.
|
|
@@ -26,25 +54,18 @@ import { kzg } from './kzg_context.js';
|
|
|
26
54
|
* beforehand from ALL blobs.
|
|
27
55
|
*
|
|
28
56
|
* @returns A batched blob.
|
|
29
|
-
*/ static async batch(
|
|
30
|
-
|
|
31
|
-
|
|
57
|
+
*/ static async batch(blobFieldsPerCheckpoint, verifyProof = false) {
|
|
58
|
+
const numCheckpoints = blobFieldsPerCheckpoint.length;
|
|
59
|
+
if (numCheckpoints > AZTEC_MAX_EPOCH_DURATION) {
|
|
60
|
+
throw new Error(`Too many checkpoints sent to batch(). The maximum is ${AZTEC_MAX_EPOCH_DURATION}. Got ${numCheckpoints}.`);
|
|
32
61
|
}
|
|
33
62
|
// Precalculate the values (z and gamma) and initialize the accumulator:
|
|
34
|
-
let acc = await this.
|
|
63
|
+
let acc = await this.fromBlobFields(blobFieldsPerCheckpoint);
|
|
35
64
|
// Now we can create a multi opening proof of all input blobs:
|
|
36
|
-
for (const
|
|
37
|
-
acc = await acc.
|
|
65
|
+
for (const blobFields of blobFieldsPerCheckpoint){
|
|
66
|
+
acc = await acc.accumulateFields(blobFields);
|
|
38
67
|
}
|
|
39
|
-
return await acc.finalize();
|
|
40
|
-
}
|
|
41
|
-
/**
|
|
42
|
-
* Returns an empty BatchedBlobAccumulator with precomputed challenges from all blobs in the epoch.
|
|
43
|
-
* @dev MUST input all blobs to be broadcast. Does not work in multiple calls because z and gamma are calculated
|
|
44
|
-
* beforehand from ALL blobs.
|
|
45
|
-
*/ static async newAccumulator(blobs) {
|
|
46
|
-
const finalBlobChallenges = await this.precomputeBatchedBlobChallenges(blobs);
|
|
47
|
-
return BatchedBlobAccumulator.newWithChallenges(finalBlobChallenges);
|
|
68
|
+
return await acc.finalize(verifyProof);
|
|
48
69
|
}
|
|
49
70
|
/**
|
|
50
71
|
* Gets the final challenges based on all blobs and their elements to perform a multi opening proof.
|
|
@@ -57,13 +78,15 @@ import { kzg } from './kzg_context.js';
|
|
|
57
78
|
*
|
|
58
79
|
* @param blobs - The blobs to precompute the challenges for. Each sub-array is the blobs for an L1 block.
|
|
59
80
|
* @returns Challenges z and gamma.
|
|
60
|
-
*/ static async precomputeBatchedBlobChallenges(
|
|
81
|
+
*/ static async precomputeBatchedBlobChallenges(blobFieldsPerCheckpoint) {
|
|
61
82
|
// Compute the final challenge z to evaluate the blobs.
|
|
62
83
|
let z;
|
|
63
|
-
|
|
84
|
+
const allBlobs = [];
|
|
85
|
+
for (const blobFields of blobFieldsPerCheckpoint){
|
|
64
86
|
// Compute the hash of all the fields in the block.
|
|
65
|
-
const blobFieldsHash = await
|
|
66
|
-
|
|
87
|
+
const blobFieldsHash = await computeBlobFieldsHash(blobFields);
|
|
88
|
+
const blobs = getBlobsPerL1Block(blobFields);
|
|
89
|
+
for (const blob of blobs){
|
|
67
90
|
// Compute the challenge z for each blob and accumulate it.
|
|
68
91
|
const challengeZ = await blob.computeChallengeZ(blobFieldsHash);
|
|
69
92
|
if (!z) {
|
|
@@ -75,12 +98,12 @@ import { kzg } from './kzg_context.js';
|
|
|
75
98
|
]);
|
|
76
99
|
}
|
|
77
100
|
}
|
|
101
|
+
allBlobs.push(...blobs);
|
|
78
102
|
}
|
|
79
103
|
if (!z) {
|
|
80
104
|
throw new Error('No blobs to precompute challenges for.');
|
|
81
105
|
}
|
|
82
106
|
// Now we have a shared challenge for all blobs, evaluate them...
|
|
83
|
-
const allBlobs = blobs.flat();
|
|
84
107
|
const proofObjects = allBlobs.map((b)=>b.evaluate(z));
|
|
85
108
|
const evaluations = await Promise.all(proofObjects.map(({ y })=>hashNoirBigNumLimbs(y)));
|
|
86
109
|
// ...and find the challenge for the linear combination of blobs.
|
|
@@ -98,73 +121,11 @@ import { kzg } from './kzg_context.js';
|
|
|
98
121
|
]);
|
|
99
122
|
return new FinalBlobBatchingChallenges(z, BLS12Fr.fromBN254Fr(gamma));
|
|
100
123
|
}
|
|
101
|
-
verify() {
|
|
102
|
-
return kzg.verifyKzgProof(this.commitment.compress(), this.z.toBuffer(), this.y.toBuffer(), this.q.compress());
|
|
103
|
-
}
|
|
104
|
-
// Returns ethereum's versioned blob hash, following kzg_to_versioned_hash: https://eips.ethereum.org/EIPS/eip-4844#helpers
|
|
105
|
-
getEthVersionedBlobHash() {
|
|
106
|
-
return computeEthVersionedBlobHash(this.commitment.compress());
|
|
107
|
-
}
|
|
108
|
-
/**
|
|
109
|
-
* Returns a proof of opening of the blobs to verify on L1 using the point evaluation precompile:
|
|
110
|
-
*
|
|
111
|
-
* input[:32] - versioned_hash
|
|
112
|
-
* input[32:64] - z
|
|
113
|
-
* input[64:96] - y
|
|
114
|
-
* input[96:144] - commitment C
|
|
115
|
-
* input[144:192] - commitment Q (a 'proof' committing to the quotient polynomial q(X))
|
|
116
|
-
*
|
|
117
|
-
* See https://eips.ethereum.org/EIPS/eip-4844#point-evaluation-precompile
|
|
118
|
-
*/ getEthBlobEvaluationInputs() {
|
|
119
|
-
const buf = Buffer.concat([
|
|
120
|
-
this.getEthVersionedBlobHash(),
|
|
121
|
-
this.z.toBuffer(),
|
|
122
|
-
this.y.toBuffer(),
|
|
123
|
-
this.commitment.compress(),
|
|
124
|
-
this.q.compress()
|
|
125
|
-
]);
|
|
126
|
-
return `0x${buf.toString('hex')}`;
|
|
127
|
-
}
|
|
128
|
-
toFinalBlobAccumulator() {
|
|
129
|
-
return new FinalBlobAccumulator(this.blobCommitmentsHash, this.z, this.y, this.commitment);
|
|
130
|
-
}
|
|
131
|
-
}
|
|
132
|
-
/**
|
|
133
|
-
* See noir-projects/noir-protocol-circuits/crates/blob/src/abis/blob_accumulator.nr
|
|
134
|
-
*/ export class BatchedBlobAccumulator {
|
|
135
|
-
blobCommitmentsHashAcc;
|
|
136
|
-
zAcc;
|
|
137
|
-
yAcc;
|
|
138
|
-
cAcc;
|
|
139
|
-
qAcc;
|
|
140
|
-
gammaAcc;
|
|
141
|
-
gammaPow;
|
|
142
|
-
finalBlobChallenges;
|
|
143
|
-
constructor(/** Hash of Cs (to link to L1 blob hashes). */ blobCommitmentsHashAcc, /** Challenge point z_acc. Final value used such that p_i(z) = y_i. */ zAcc, /** Evaluation y_acc. Final value is is linear combination of all evaluations y_i = p_i(z) with gamma. */ yAcc, /** Commitment c_acc. Final value is linear combination of all commitments C_i = [p_i] with gamma. */ cAcc, /** KZG opening q_acc. Final value is linear combination of all blob kzg 'proofs' Q_i with gamma. */ qAcc, /**
|
|
144
|
-
* Challenge point gamma_acc for multi opening. Used with y, C, and kzg 'proof' Q above.
|
|
145
|
-
* TODO(#13608): We calculate this by hashing natively in the circuit (hence Fr representation), but it's actually used
|
|
146
|
-
* as a BLS12Fr field elt. Is this safe? Is there a skew?
|
|
147
|
-
*/ gammaAcc, /** Simply gamma^(i + 1) at blob i. Used for calculating the i'th element of the above linear comb.s */ gammaPow, /** Final challenge values used in evaluation. Optimistically input and checked in the final acc. */ finalBlobChallenges){
|
|
148
|
-
this.blobCommitmentsHashAcc = blobCommitmentsHashAcc;
|
|
149
|
-
this.zAcc = zAcc;
|
|
150
|
-
this.yAcc = yAcc;
|
|
151
|
-
this.cAcc = cAcc;
|
|
152
|
-
this.qAcc = qAcc;
|
|
153
|
-
this.gammaAcc = gammaAcc;
|
|
154
|
-
this.gammaPow = gammaPow;
|
|
155
|
-
this.finalBlobChallenges = finalBlobChallenges;
|
|
156
|
-
}
|
|
157
|
-
/**
|
|
158
|
-
* Create the empty accumulation state of the epoch.
|
|
159
|
-
* @returns An empty blob accumulator with challenges.
|
|
160
|
-
*/ static newWithChallenges(finalBlobChallenges) {
|
|
161
|
-
return new BatchedBlobAccumulator(Fr.ZERO, Fr.ZERO, BLS12Fr.ZERO, BLS12Point.ZERO, BLS12Point.ZERO, Fr.ZERO, BLS12Fr.ZERO, finalBlobChallenges);
|
|
162
|
-
}
|
|
163
124
|
/**
|
|
164
125
|
* Given blob i, accumulate all state.
|
|
165
126
|
* We assume the input blob has not been evaluated at z.
|
|
166
127
|
* @returns An updated blob accumulator.
|
|
167
|
-
*/ async
|
|
128
|
+
*/ async accumulateBlob(blob, blobFieldsHash) {
|
|
168
129
|
const { proof, y: thisY } = blob.evaluate(this.finalBlobChallenges.z);
|
|
169
130
|
const thisC = BLS12Point.decompress(blob.commitment);
|
|
170
131
|
const thisQ = BLS12Point.decompress(proof);
|
|
@@ -198,18 +159,19 @@ import { kzg } from './kzg_context.js';
|
|
|
198
159
|
/**
|
|
199
160
|
* Given blobs, accumulate all state.
|
|
200
161
|
* We assume the input blobs have not been evaluated at z.
|
|
201
|
-
* @param
|
|
162
|
+
* @param blobFields - The blob fields of a checkpoint to accumulate.
|
|
202
163
|
* @returns An updated blob accumulator.
|
|
203
|
-
*/ async
|
|
204
|
-
|
|
205
|
-
|
|
164
|
+
*/ async accumulateFields(blobFields) {
|
|
165
|
+
const blobs = getBlobsPerL1Block(blobFields);
|
|
166
|
+
if (blobs.length > BLOBS_PER_CHECKPOINT) {
|
|
167
|
+
throw new Error(`Too many blobs to accumulate. The maximum is ${BLOBS_PER_CHECKPOINT} per checkpoint. Got ${blobs.length}.`);
|
|
206
168
|
}
|
|
207
169
|
// Compute the hash of all the fields in the block.
|
|
208
|
-
const blobFieldsHash = await
|
|
170
|
+
const blobFieldsHash = await computeBlobFieldsHash(blobFields);
|
|
209
171
|
// Initialize the acc to iterate over:
|
|
210
172
|
let acc = this.clone();
|
|
211
173
|
for (const blob of blobs){
|
|
212
|
-
acc = await acc.
|
|
174
|
+
acc = await acc.accumulateBlob(blob, blobFieldsHash);
|
|
213
175
|
}
|
|
214
176
|
return acc;
|
|
215
177
|
}
|
|
@@ -240,11 +202,14 @@ import { kzg } from './kzg_context.js';
|
|
|
240
202
|
throw new Error(`Blob batching mismatch: accumulated gamma ${calculatedGamma} does not equal injected gamma ${this.finalBlobChallenges.gamma.toBN254Fr()}`);
|
|
241
203
|
}
|
|
242
204
|
const batchedBlob = new BatchedBlob(this.blobCommitmentsHashAcc, this.zAcc, this.yAcc, this.cAcc, this.qAcc);
|
|
243
|
-
if (verifyProof && !
|
|
205
|
+
if (verifyProof && !this.verify()) {
|
|
244
206
|
throw new Error(`KZG proof did not verify.`);
|
|
245
207
|
}
|
|
246
208
|
return batchedBlob;
|
|
247
209
|
}
|
|
210
|
+
verify() {
|
|
211
|
+
return getKzg().verifyKzgProof(this.cAcc.compress(), this.zAcc.toBuffer(), this.yAcc.toBuffer(), this.qAcc.compress());
|
|
212
|
+
}
|
|
248
213
|
isEmptyState() {
|
|
249
214
|
return this.blobCommitmentsHashAcc.isZero() && this.zAcc.isZero() && this.yAcc.isZero() && this.cAcc.isZero() && this.qAcc.isZero() && this.gammaAcc.isZero() && this.gammaPow.isZero();
|
|
250
215
|
}
|
package/dest/blob_utils.d.ts
CHANGED
|
@@ -1,5 +1,8 @@
|
|
|
1
|
-
import { BLS12Point
|
|
1
|
+
import { BLS12Point } from '@aztec/foundation/curves/bls12';
|
|
2
|
+
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
|
+
import type { BatchedBlob } from './batched_blob.js';
|
|
2
4
|
import { Blob } from './blob.js';
|
|
5
|
+
import { type CheckpointBlobData } from './encoding/index.js';
|
|
3
6
|
/**
|
|
4
7
|
* @param blobs - The blobs to emit.
|
|
5
8
|
* @returns The blobs' compressed commitments in hex prefixed by the number of blobs. 1 byte for the prefix, 48 bytes
|
|
@@ -15,16 +18,23 @@ export declare function getPrefixedEthBlobCommitments(blobs: Blob[]): `0x${strin
|
|
|
15
18
|
*/
|
|
16
19
|
export declare function getBlobsPerL1Block(fields: Fr[]): Blob[];
|
|
17
20
|
/**
|
|
18
|
-
* Get the
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
* @param blobs - The blobs to read fields from. Should be all the blobs in the L1 block proposing the checkpoint.
|
|
22
|
-
* @param checkEncoding - Whether to check if the entire encoded blob fields are valid. If false, it will still check
|
|
23
|
-
* the checkpoint prefix and throw if there's not enough fields.
|
|
24
|
-
* @returns The fields added throughout the checkpoint.
|
|
21
|
+
* Get the encoded data from all blobs in the checkpoint.
|
|
22
|
+
* @param blobs - The blobs to read data from. Should be all the blobs for the L1 block proposing the checkpoint.
|
|
23
|
+
* @returns The encoded data of the checkpoint.
|
|
25
24
|
*/
|
|
26
|
-
export declare function
|
|
27
|
-
export declare function computeBlobFieldsHashFromBlobs(blobs: Blob[]): Promise<Fr>;
|
|
25
|
+
export declare function decodeCheckpointBlobDataFromBlobs(blobs: Blob[]): CheckpointBlobData;
|
|
28
26
|
export declare function computeBlobsHashFromBlobs(blobs: Blob[]): Fr;
|
|
29
27
|
export declare function getBlobCommitmentsFromBlobs(blobs: Blob[]): BLS12Point[];
|
|
30
|
-
|
|
28
|
+
/**
|
|
29
|
+
* Returns a proof of opening of the blobs to verify on L1 using the point evaluation precompile:
|
|
30
|
+
*
|
|
31
|
+
* input[:32] - versioned_hash
|
|
32
|
+
* input[32:64] - z
|
|
33
|
+
* input[64:96] - y
|
|
34
|
+
* input[96:144] - commitment C
|
|
35
|
+
* input[144:192] - commitment Q (a 'proof' committing to the quotient polynomial q(X))
|
|
36
|
+
*
|
|
37
|
+
* See https://eips.ethereum.org/EIPS/eip-4844#point-evaluation-precompile
|
|
38
|
+
*/
|
|
39
|
+
export declare function getEthBlobEvaluationInputs(batchedBlob: BatchedBlob): `0x${string}`;
|
|
40
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/dest/blob_utils.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"blob_utils.d.ts","sourceRoot":"","sources":["../src/blob_utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"blob_utils.d.ts","sourceRoot":"","sources":["../src/blob_utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,kBAAkB,EAAsC,MAAM,qBAAqB,CAAC;AAGlG;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,MAAM,EAAE,CAS1E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CASvD;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAGnF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAE3D;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAEvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,WAAW,GAAG,KAAK,MAAM,EAAE,CASlF"}
|