@aztec/standard-contracts 0.0.1-commit.a5db02d → 0.0.1-commit.b8a057fa
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/artifacts/AuthRegistry.json +213 -578
- package/artifacts/HandshakeRegistry.json +215 -301
- package/artifacts/MultiCallEntrypoint.json +162 -437
- package/artifacts/PublicChecks.json +145 -510
- package/dest/handshake-registry/constants.d.ts +3 -9
- package/dest/handshake-registry/constants.d.ts.map +1 -1
- package/dest/handshake-registry/constants.js +0 -10
- package/dest/handshake-registry/index.d.ts +2 -2
- package/dest/handshake-registry/index.d.ts.map +1 -1
- package/dest/handshake-registry/index.js +1 -1
- package/dest/index.d.ts +1 -2
- package/dest/index.d.ts.map +1 -1
- package/dest/index.js +0 -1
- package/dest/standard_contract_data.js +20 -20
- package/package.json +3 -3
- package/src/handshake-registry/constants.ts +0 -13
- package/src/handshake-registry/index.ts +0 -1
- package/src/index.ts +0 -1
- package/src/standard_contract_data.ts +20 -20
- package/dest/publishable_standard_contracts.d.ts +0 -17
- package/dest/publishable_standard_contracts.d.ts.map +0 -1
- package/dest/publishable_standard_contracts.js +0 -23
- package/src/publishable_standard_contracts.ts +0 -22
|
@@ -67,7 +67,7 @@
|
|
|
67
67
|
"start": 4151
|
|
68
68
|
}
|
|
69
69
|
],
|
|
70
|
-
"path": "/home/
|
|
70
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/logging.nr",
|
|
71
71
|
"source": "// Not all log levels are currently used, but we provide the full set so that new call sites can use any level. Because\n// of that we tag all with `#[allow(dead_code)]` to prevent warnings.\n//\n// All wrappers resolve function paths at comptime via `resolve_fn` so that the emitted `Quoted` code works both inside\n// aztec-nr (where `crate::` = aztec) and inside macro-generated contract code (where `crate::` = the contract).\n\nuse std::meta::ctstring::AsCtString;\n\ncomptime fn log_prefix<let N: u32>(msg: str<N>) -> CtString {\n \"[aztec-nr] \".as_ctstring().append_str(msg)\n}\n\n// --- No-args variants (direct call) ---\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_fatal_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::fatal_log });\n quote { $f($msg) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_error_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::error_log });\n quote { $f($msg) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_warn_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::warn_log });\n quote { $f($msg) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_info_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::info_log });\n quote { $f($msg) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_verbose_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::verbose_log });\n quote { $f($msg) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_debug_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::debug_log });\n quote { $f($msg) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_trace_log<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::trace_log });\n quote { $f($msg) }\n}\n\n// --- Format variants (return lambda for runtime args) ---\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_fatal_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::fatal_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_error_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::error_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_warn_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::warn_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_info_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::info_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_verbose_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::verbose_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_debug_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::debug_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n#[allow(dead_code)]\npub(crate) comptime fn aztecnr_trace_log_format<let N: u32>(msg: str<N>) -> Quoted {\n let msg = log_prefix(msg);\n let f = resolve_fn(quote { crate::protocol::logging::trace_log_format });\n quote { (|args| $f($msg, args)) }\n}\n\n// See module-level comment for why this is needed.\ncomptime fn resolve_fn(path: Quoted) -> TypedExpr {\n path.as_expr().unwrap().resolve(Option::none())\n}\n"
|
|
72
72
|
},
|
|
73
73
|
"102": {
|
|
@@ -85,7 +85,7 @@
|
|
|
85
85
|
"start": 7724
|
|
86
86
|
}
|
|
87
87
|
],
|
|
88
|
-
"path": "/home/
|
|
88
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/macros/aztec/compute_note_hash_and_nullifier.nr",
|
|
89
89
|
"source": "use crate::logging;\nuse crate::macros::{notes::NOTES, utils::get_trait_impl_method};\n\n/// Generates two contract library methods called `_compute_note_hash` and `_compute_note_nullifier`, plus a\n/// (deprecated) wrapper called `_compute_note_hash_and_nullifier`, which are used for note discovery (i.e. these are\n/// of the `aztec::messages::discovery::ComputeNoteHash` and `aztec::messages::discovery::ComputeNoteNullifier` types).\npub(crate) comptime fn generate_contract_library_methods_compute_note_hash_and_nullifier() -> Quoted {\n let compute_note_hash = generate_contract_library_method_compute_note_hash();\n let compute_note_nullifier = generate_contract_library_method_compute_note_nullifier();\n\n quote {\n $compute_note_hash\n $compute_note_nullifier\n\n /// Unpacks an array into a note corresponding to `note_type_id` and then computes its note hash (non-siloed) and inner nullifier (non-siloed) assuming the note has been inserted into the note hash tree with `note_nonce`.\n ///\n /// This function is automatically injected by the `#[aztec]` macro.\n #[contract_library_method]\n #[allow(dead_code)]\n unconstrained fn _compute_note_hash_and_nullifier(\n packed_note: BoundedVec<Field, aztec::messages::logs::note::MAX_NOTE_PACKED_LEN>,\n owner: aztec::protocol::address::AztecAddress,\n storage_slot: Field,\n note_type_id: Field,\n contract_address: aztec::protocol::address::AztecAddress,\n randomness: Field,\n note_nonce: Field,\n ) -> Option<aztec::messages::discovery::NoteHashAndNullifier> {\n _compute_note_hash(packed_note, owner, storage_slot, note_type_id, contract_address, randomness).map(|note_hash| {\n\n let siloed_note_hash = aztec::protocol::hash::compute_siloed_note_hash(contract_address, note_hash);\n let unique_note_hash = aztec::protocol::hash::compute_unique_note_hash(note_nonce, siloed_note_hash);\n \n let inner_nullifier = _compute_note_nullifier(unique_note_hash, packed_note, owner, storage_slot, note_type_id, contract_address, randomness);\n\n aztec::messages::discovery::NoteHashAndNullifier {\n note_hash,\n inner_nullifier,\n }\n })\n }\n }\n}\n\ncomptime fn generate_contract_library_method_compute_note_hash() -> Quoted {\n if NOTES.len() == 0 {\n // Contracts with no notes still implement this function to avoid having special-casing, the implementation\n // simply throws immediately.\n quote {\n /// This contract does not use private notes, so this function should never be called as it will unconditionally fail.\n ///\n /// This function is automatically injected by the `#[aztec]` macro.\n #[contract_library_method]\n unconstrained fn _compute_note_hash(\n _packed_note: BoundedVec<Field, aztec::messages::logs::note::MAX_NOTE_PACKED_LEN>,\n _owner: aztec::protocol::address::AztecAddress,\n _storage_slot: Field,\n _note_type_id: Field,\n _contract_address: aztec::protocol::address::AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n panic(f\"This contract does not use private notes\")\n }\n }\n } else {\n // Contracts that do define notes produce an if-else chain where `note_type_id` is matched against the\n // `get_note_type_id()` function of each note type that we know of, in order to identify the note type. Once we\n // know it we call the correct `unpack` method from the `Packable` trait to obtain the underlying\n // note type, and compute the note hash (non-siloed).\n\n // We resolve the log format calls here so that the resulting Quoted values can be spliced into the quote\n // block below.\n let warn_length_mismatch = logging::aztecnr_warn_log_format(\n \"Packed note length mismatch for note type id {0}: expected {1} fields, got {2}. Skipping note.\",\n );\n let warn_unknown_note_type = logging::aztecnr_warn_log_format(\"Unknown note type id {0}. Skipping note.\");\n\n let mut if_note_type_id_match_statements_list = @[];\n for i in 0..NOTES.len() {\n let typ = NOTES.get(i);\n\n let get_note_type_id = get_trait_impl_method(\n typ,\n quote { crate::note::note_interface::NoteType },\n quote { get_id },\n );\n let unpack = get_trait_impl_method(\n typ,\n quote { crate::protocol::traits::Packable },\n quote { unpack },\n );\n\n let compute_note_hash = get_trait_impl_method(\n typ,\n quote { crate::note::note_interface::NoteHash },\n quote { compute_note_hash },\n );\n\n let if_or_else_if = if i == 0 {\n quote { if }\n } else {\n quote { else if }\n };\n\n if_note_type_id_match_statements_list = if_note_type_id_match_statements_list.push_back(\n quote {\n $if_or_else_if note_type_id == $get_note_type_id() {\n // As an extra safety check we make sure that the packed_note BoundedVec has the expected\n // length, since we're about to interpret its raw storage as a fixed-size array by calling the\n // unpack function on it.\n let expected_len = <$typ as $crate::protocol::traits::Packable>::N;\n let actual_len = packed_note.len();\n if actual_len != expected_len {\n $warn_length_mismatch([note_type_id, expected_len as Field, actual_len as Field]);\n Option::none()\n } else {\n let note = $unpack(aztec::utils::array::subarray(packed_note.storage(), 0));\n\n Option::some($compute_note_hash(note, owner, storage_slot, randomness))\n }\n }\n },\n );\n }\n\n let if_note_type_id_match_statements = if_note_type_id_match_statements_list.join(quote {});\n\n quote {\n /// Unpacks an array into a note corresponding to `note_type_id` and then computes its note hash\n /// (non-siloed).\n ///\n /// The signature of this function notably matches the `aztec::messages::discovery::ComputeNoteHash` type,\n /// and so it can be used to call functions from that module such as `do_sync_state` and\n /// `process_private_note_msg`.\n ///\n /// This function is automatically injected by the `#[aztec]` macro.\n #[contract_library_method]\n unconstrained fn _compute_note_hash(\n packed_note: BoundedVec<Field, aztec::messages::logs::note::MAX_NOTE_PACKED_LEN>,\n owner: aztec::protocol::address::AztecAddress,\n storage_slot: Field,\n note_type_id: Field,\n _contract_address: aztec::protocol::address::AztecAddress,\n randomness: Field,\n ) -> Option<Field> {\n $if_note_type_id_match_statements\n else {\n $warn_unknown_note_type([note_type_id]);\n Option::none()\n }\n }\n }\n }\n}\n\ncomptime fn generate_contract_library_method_compute_note_nullifier() -> Quoted {\n if NOTES.len() == 0 {\n // Contracts with no notes still implement this function to avoid having special-casing, the implementation\n // simply throws immediately.\n quote {\n /// This contract does not use private notes, so this function should never be called as it will unconditionally fail.\n ///\n /// This function is automatically injected by the `#[aztec]` macro.\n #[contract_library_method]\n unconstrained fn _compute_note_nullifier(\n _unique_note_hash: Field,\n _packed_note: BoundedVec<Field, aztec::messages::logs::note::MAX_NOTE_PACKED_LEN>,\n _owner: aztec::protocol::address::AztecAddress,\n _storage_slot: Field,\n _note_type_id: Field,\n _contract_address: aztec::protocol::address::AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n panic(f\"This contract does not use private notes\")\n }\n }\n } else {\n // Contracts that do define notes produce an if-else chain where `note_type_id` is matched against the\n // `get_note_type_id()` function of each note type that we know of, in order to identify the note type. Once we\n // know it we call the correct `unpack` method from the `Packable` trait to obtain the underlying\n // note type, and compute the inner nullifier (non-siloed).\n\n // We resolve the log format calls here so that the resulting Quoted values can be spliced into the quote\n // block below.\n let warn_length_mismatch = logging::aztecnr_warn_log_format(\n \"Packed note length mismatch for note type id {0}: expected {1} fields, got {2}. Skipping note.\",\n );\n let warn_unknown_note_type = logging::aztecnr_warn_log_format(\"Unknown note type id {0}. Skipping note.\");\n\n let mut if_note_type_id_match_statements_list = @[];\n for i in 0..NOTES.len() {\n let typ = NOTES.get(i);\n\n let get_note_type_id = get_trait_impl_method(\n typ,\n quote { crate::note::note_interface::NoteType },\n quote { get_id },\n );\n let unpack = get_trait_impl_method(\n typ,\n quote { crate::protocol::traits::Packable },\n quote { unpack },\n );\n\n let compute_nullifier_unconstrained = get_trait_impl_method(\n typ,\n quote { crate::note::note_interface::NoteHash },\n quote { compute_nullifier_unconstrained },\n );\n\n let if_or_else_if = if i == 0 {\n quote { if }\n } else {\n quote { else if }\n };\n\n if_note_type_id_match_statements_list = if_note_type_id_match_statements_list.push_back(\n quote {\n $if_or_else_if note_type_id == $get_note_type_id() {\n // As an extra safety check we make sure that the packed_note BoundedVec has the expected\n // length, since we're about to interpret its raw storage as a fixed-size array by calling the\n // unpack function on it.\n let expected_len = <$typ as $crate::protocol::traits::Packable>::N;\n let actual_len = packed_note.len();\n if actual_len != expected_len {\n $warn_length_mismatch([note_type_id, expected_len as Field, actual_len as Field]);\n Option::none()\n } else {\n let note = $unpack(aztec::utils::array::subarray(packed_note.storage(), 0));\n\n // The message discovery process finds settled notes, that is, notes that were created in\n // prior transactions and are therefore already part of the note hash tree. The note hash\n // for nullification is hence the unique note hash.\n $compute_nullifier_unconstrained(note, owner, unique_note_hash)\n }\n }\n },\n );\n }\n\n let if_note_type_id_match_statements = if_note_type_id_match_statements_list.join(quote {});\n\n quote {\n /// Computes a note's inner nullifier (non-siloed) given its unique note hash, preimage and extra data.\n ///\n /// The signature of this function notably matches the `aztec::messages::discovery::ComputeNoteNullifier`\n /// type, and so it can be used to call functions from that module such as `do_sync_state` and\n /// `process_private_note_msg`.\n ///\n /// This function is automatically injected by the `#[aztec]` macro.\n #[contract_library_method]\n unconstrained fn _compute_note_nullifier(\n unique_note_hash: Field,\n packed_note: BoundedVec<Field, aztec::messages::logs::note::MAX_NOTE_PACKED_LEN>,\n owner: aztec::protocol::address::AztecAddress,\n _storage_slot: Field,\n note_type_id: Field,\n _contract_address: aztec::protocol::address::AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n $if_note_type_id_match_statements\n else {\n $warn_unknown_note_type([note_type_id]);\n Option::none()\n }\n }\n }\n }\n}\n"
|
|
90
90
|
},
|
|
91
91
|
"103": {
|
|
@@ -123,7 +123,7 @@
|
|
|
123
123
|
"start": 12880
|
|
124
124
|
}
|
|
125
125
|
],
|
|
126
|
-
"path": "/home/
|
|
126
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/macros/aztec.nr",
|
|
127
127
|
"source": "mod compute_note_hash_and_nullifier;\n\nuse crate::{\n macros::{\n calls_generation::{\n external_functions::{generate_external_function_calls, generate_external_function_self_calls_structs},\n internal_functions::generate_call_internal_struct,\n },\n dispatch::generate_public_dispatch,\n emit_public_init_nullifier::generate_emit_public_init_nullifier,\n internals_functions_generation::{create_fn_abi_exports, process_functions},\n offchain_receive::{\n OFFCHAIN_RECEIVE_FN_NAME, OFFCHAIN_RECEIVE_PARAM_NAME, offchain_receive_param_type,\n OFFCHAIN_RECEIVE_RETURN_TYPE,\n },\n storage::STORAGE_LAYOUT_NAME,\n utils::{is_fn_contract_library_method, is_fn_external, is_fn_internal, is_fn_test, module_has_storage},\n },\n messages::discovery::{CustomMessageHandler, CustomSyncHandler},\n};\n\nuse compute_note_hash_and_nullifier::generate_contract_library_methods_compute_note_hash_and_nullifier;\n\n/// Configuration for the [`aztec`] macro.\n///\n/// This type lets users override different parts of the default aztec-nr contract behavior, such\n/// as message handling and state synchronization. These are advanced features that require careful\n/// understanding of the behavior of these systems.\n///\n/// ## Examples\n///\n/// ```noir\n/// #[aztec(aztec::macros::AztecConfig::new().custom_message_handler(my_handler))]\n/// contract MyContract { ... }\n/// ```\npub struct AztecConfig {\n custom_message_handler: Option<CustomMessageHandler>,\n custom_sync_state: Option<CustomSyncHandler>,\n}\n\nimpl AztecConfig {\n /// Creates a new `AztecConfig` with default values.\n ///\n /// Calling `new` is equivalent to invoking the [`aztec`] macro with no parameters. The different methods\n /// (e.g. [`AztecConfig::custom_message_handler`]) can then be used to change the default behavior.\n pub comptime fn new() -> Self {\n Self { custom_message_handler: Option::none(), custom_sync_state: Option::none() }\n }\n\n /// Sets a handler for custom messages.\n ///\n /// This enables contracts to process non-standard messages (i.e. any with a message type that is not in\n /// [`crate::messages::msg_type`]).\n ///\n /// `handler` must be a function that conforms to the\n /// [`crate::messages::discovery::CustomMessageHandler`] type signature.\n pub comptime fn custom_message_handler(&mut self, handler: CustomMessageHandler) -> Self {\n self.custom_message_handler = Option::some(handler);\n *self\n }\n\n /// Overrides the default state synchronization logic.\n ///\n /// The generated `sync_state` function will call `handler` instead of\n /// [`crate::messages::discovery::do_sync_state`]. The handler receives all of the same parameters, so it can\n /// run custom logic (e.g. fetching and decrypting custom logs) before, after, or instead of calling\n /// `do_sync_state`.\n ///\n /// `handler` must be a function that conforms to the\n /// [`crate::messages::discovery::CustomSyncHandler`] type signature.\n pub comptime fn custom_sync_state(&mut self, handler: CustomSyncHandler) -> Self {\n self.custom_sync_state = Option::some(handler);\n *self\n }\n}\n\n/// Enables aztec-nr features on a `contract`.\n///\n/// All aztec-nr contracts should have this macro invoked on them, as it is the one that processes all contract\n/// functions, notes, storage, generates interfaces for external calls, and creates the message processing\n/// boilerplate.\n///\n/// ## Examples\n///\n/// Most contracts can simply invoke the macro with no parameters, resulting in default aztec-nr behavior:\n/// ```noir\n/// #[aztec]\n/// contract MyContract { ... }\n/// ```\n///\n/// Advanced contracts can use [`AztecConfig`] to customize parts of its behavior, such as message\n/// processing.\n/// ```noir\n/// #[aztec(aztec::macros::AztecConfig::new().custom_message_handler(my_handler))]\n/// contract MyAdvancedContract { ... }\n/// ```\n#[varargs]\npub comptime fn aztec(m: Module, args: [AztecConfig]) -> Quoted {\n let num_args = args.len();\n let config = if num_args == 0 {\n AztecConfig::new()\n } else if num_args == 1 {\n args[0]\n } else {\n panic(f\"#[aztec] expects 0 or 1 arguments, got {num_args}\")\n };\n\n // Functions that don't have #[external(...)], #[contract_library_method], or #[test] are not allowed in contracts.\n check_each_fn_macroified(m);\n\n // We generate new functions prefixed with `__aztec_nr_internals__` and we replace the original functions' bodies\n // with `static_assert(false, ...)` to prevent them from being called directly from within the contract.\n let functions = process_functions(m);\n\n // We generate structs and their implementations necessary for convenient functions calls.\n let interface = generate_contract_interface(m);\n let self_call_structs = generate_external_function_self_calls_structs(m);\n let call_internal_struct = generate_call_internal_struct(m);\n\n // We generate ABI exports for all the external functions in the contract.\n let fn_abi_exports = create_fn_abi_exports(m);\n\n // We generate `_compute_note_hash`, `_compute_note_nullifier` (and the deprecated\n // `_compute_note_hash_and_nullifier` wrapper) only if they are not already implemented.\n // If they are implemented we just insert empty quotes.\n let contract_library_method_compute_note_hash_and_nullifier = if !m.functions().any(|f| {\n // Note that we don't test for `_compute_note_hash` or `_compute_note_nullifier` in order to make this simpler\n // - users must either implement all three or none.\n // Down the line we'll remove this check and use `AztecConfig`.\n f.name() == quote { _compute_note_hash_and_nullifier }\n }) {\n generate_contract_library_methods_compute_note_hash_and_nullifier()\n } else {\n quote {}\n };\n let process_custom_message_option = if config.custom_message_handler.is_some() {\n let handler = config.custom_message_handler.unwrap();\n quote { Option::some($handler) }\n } else {\n quote { Option::<aztec::messages::discovery::CustomMessageHandler>::none() }\n };\n\n let offchain_inbox_sync_option = quote {\n Option::some(aztec::messages::processing::offchain::sync_inbox)\n };\n\n if m.functions().any(|f| f.name() == quote { sync_state }) {\n panic(\n \"User-defined 'sync_state' is not allowed. Use AztecConfig::custom_sync_state() to customize sync behavior.\",\n );\n }\n\n let custom_sync_handler = if config.custom_sync_state.is_some() {\n let handler = config.custom_sync_state.unwrap();\n Option::some(quote { $handler })\n } else {\n Option::none()\n };\n\n let sync_state_fn_and_abi_export = generate_sync_state(\n process_custom_message_option,\n offchain_inbox_sync_option,\n custom_sync_handler,\n );\n\n if m.functions().any(|f| f.name() == quote { offchain_receive }) {\n panic(\n \"User-defined 'offchain_receive' is not allowed. The function is auto-injected by the #[aztec] macro. See https://docs.aztec.network/errors/7\",\n );\n }\n let offchain_receive_fn_and_abi_export = generate_offchain_receive();\n\n let (has_public_init_nullifier_fn, emit_public_init_nullifier_fn_body) = generate_emit_public_init_nullifier(m);\n let public_dispatch = generate_public_dispatch(m, has_public_init_nullifier_fn);\n\n quote {\n $interface\n $self_call_structs\n $call_internal_struct\n $functions\n $fn_abi_exports\n $contract_library_method_compute_note_hash_and_nullifier\n $public_dispatch\n $sync_state_fn_and_abi_export\n $emit_public_init_nullifier_fn_body\n $offchain_receive_fn_and_abi_export\n }\n}\n\ncomptime fn generate_contract_interface(m: Module) -> Quoted {\n let calls = generate_external_function_calls(m);\n\n let module_name = m.name();\n\n let has_storage_layout = module_has_storage(m) & STORAGE_LAYOUT_NAME.get(m).is_some();\n let storage_layout_getter = if has_storage_layout {\n let storage_layout_name = STORAGE_LAYOUT_NAME.get(m).unwrap();\n quote {\n pub fn storage_layout() -> StorageLayoutFields {\n $storage_layout_name.fields\n }\n }\n } else {\n quote {}\n };\n\n let library_storage_layout_getter = if has_storage_layout {\n quote {\n #[contract_library_method]\n $storage_layout_getter\n }\n } else {\n quote {}\n };\n\n quote {\n pub struct $module_name {\n pub target_contract: aztec::protocol::address::AztecAddress\n }\n\n impl $module_name {\n $calls\n\n pub fn at(\n addr: aztec::protocol::address::AztecAddress\n ) -> Self {\n Self { target_contract: addr }\n }\n\n pub fn interface() -> Self {\n Self { target_contract: aztec::protocol::address::AztecAddress::zero() }\n }\n\n $storage_layout_getter\n }\n\n #[contract_library_method]\n pub fn at(\n addr: aztec::protocol::address::AztecAddress\n ) -> $module_name {\n $module_name { target_contract: addr }\n }\n\n #[contract_library_method]\n pub fn interface() -> $module_name {\n $module_name { target_contract: aztec::protocol::address::AztecAddress::zero() }\n }\n\n $library_storage_layout_getter\n\n }\n}\n\n/// Generates the `sync_state` utility function that performs message discovery.\ncomptime fn generate_sync_state(\n process_custom_message_option: Quoted,\n offchain_inbox_sync_option: Quoted,\n custom_sync_handler: Option<Quoted>,\n) -> Quoted {\n let body = if custom_sync_handler.is_some() {\n let handler = custom_sync_handler.unwrap();\n quote {\n $handler(\n address,\n _compute_note_hash,\n _compute_note_nullifier,\n $process_custom_message_option,\n $offchain_inbox_sync_option,\n scope,\n );\n }\n } else {\n quote {\n aztec::messages::discovery::do_sync_state(\n address,\n _compute_note_hash,\n _compute_note_nullifier,\n $process_custom_message_option,\n $offchain_inbox_sync_option,\n scope,\n );\n }\n };\n\n quote {\n pub struct sync_state_parameters {\n pub scope: aztec::protocol::address::AztecAddress,\n }\n\n #[abi(functions)]\n pub struct sync_state_abi {\n parameters: sync_state_parameters,\n }\n\n #[aztec::macros::internals_functions_generation::abi_attributes::abi_utility]\n unconstrained fn sync_state(scope: aztec::protocol::address::AztecAddress) {\n let address = aztec::context::UtilityContext::new().this_address();\n $body\n }\n }\n}\n\n/// Generates an `offchain_receive` utility function that lets callers add messages to the offchain message inbox.\n///\n/// For more details, see `aztec::messages::processing::offchain::receive`.\ncomptime fn generate_offchain_receive() -> Quoted {\n let param_type = offchain_receive_param_type(quote { aztec });\n let parameters_struct_name = f\"{OFFCHAIN_RECEIVE_FN_NAME}_parameters\".quoted_contents();\n let abi_struct_name = f\"{OFFCHAIN_RECEIVE_FN_NAME}_abi\".quoted_contents();\n\n quote {\n pub struct $parameters_struct_name {\n pub $OFFCHAIN_RECEIVE_PARAM_NAME: $param_type,\n }\n\n #[abi(functions)]\n pub struct $abi_struct_name {\n parameters: $parameters_struct_name,\n }\n\n /// Receives offchain messages into this contract's offchain inbox for subsequent processing.\n ///\n /// Each message is routed to the inbox scoped to its `recipient` field.\n ///\n /// For more details, see `aztec::messages::processing::offchain::receive`.\n ///\n /// This function is automatically injected by the `#[aztec]` macro.\n #[aztec::macros::internals_functions_generation::abi_attributes::abi_utility]\n unconstrained fn $OFFCHAIN_RECEIVE_FN_NAME($OFFCHAIN_RECEIVE_PARAM_NAME: $param_type) -> $OFFCHAIN_RECEIVE_RETURN_TYPE {\n let address = aztec::context::UtilityContext::new().this_address();\n aztec::messages::processing::offchain::receive(address, $OFFCHAIN_RECEIVE_PARAM_NAME);\n }\n }\n}\n\n/// Checks that all functions in the module have a context macro applied.\n///\n/// Non-macroified functions are not allowed in contracts. They must all be one of\n/// [`crate::macros::functions::external`], [`crate::macros::functions::internal`] or `test`.\ncomptime fn check_each_fn_macroified(m: Module) {\n for f in m.functions() {\n let name = f.name();\n if !is_fn_external(f) & !is_fn_contract_library_method(f) & !is_fn_internal(f) & !is_fn_test(f) {\n // We don't suggest that #[contract_library_method] is allowed because we don't want to introduce another\n // concept\n panic(\n f\"Function {name} must be marked as either #[external(...)], #[internal(...)], or #[test]\",\n );\n }\n }\n}\n"
|
|
128
128
|
},
|
|
129
129
|
"118": {
|
|
@@ -133,304 +133,50 @@
|
|
|
133
133
|
"start": 579
|
|
134
134
|
}
|
|
135
135
|
],
|
|
136
|
-
"path": "/home/
|
|
136
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/macros/internals_functions_generation/external/private.nr",
|
|
137
137
|
"source": "use crate::macros::{\n functions::initialization_utils::has_public_init_checked_functions,\n internals_functions_generation::external::helpers::{create_authorize_once_check, get_abi_relevant_attributes},\n utils::{\n fn_has_allow_phase_change, fn_has_authorize_once, fn_has_noinitcheck, is_fn_initializer, is_fn_only_self,\n is_fn_view, module_has_initializer, module_has_storage,\n },\n};\nuse crate::protocol::meta::utils::derive_serialization_quotes;\nuse std::meta::type_of;\n\npub(crate) comptime fn generate_private_external(f: FunctionDefinition) -> Quoted {\n let module_has_initializer = module_has_initializer(f.module());\n let module_has_storage = module_has_storage(f.module());\n\n // Private functions undergo a lot of transformations from their Aztec.nr form into a circuit that can be fed to\n // the Private Kernel Circuit. First we change the function signature so that it also receives\n // `PrivateContextInputs`, which contain information about the execution context (e.g. the caller).\n let original_params = f.parameters();\n\n let original_params_quotes =\n original_params.map(|(param_name, param_type)| quote { $param_name: $param_type }).join(quote {, });\n\n let params = quote { inputs: aztec::context::inputs::PrivateContextInputs, $original_params_quotes };\n\n let mut body = f.body().as_block().unwrap();\n\n // The original params are hashed and passed to the `context` object, so that the kernel can verify we've received\n // the correct values.\n let (args_serialization, _, serialized_args_name) = derive_serialization_quotes(original_params, false);\n\n let storage_init = if module_has_storage {\n // Contract has Storage defined so we initialize it.\n quote {\n let storage = Storage::init(&mut context);\n }\n } else {\n // Contract does not have Storage defined, so we set storage to the unit type `()`. ContractSelfPrivate\n // requires a storage struct in its constructor. Using an Option type would lead to worse developer experience\n // and higher constraint counts so we use the unit type `()` instead.\n quote {\n let storage = ();\n }\n };\n\n let contract_self_creation = quote {\n #[allow(unused_variables)]\n let mut self = {\n $args_serialization\n let args_hash = aztec::hash::hash_args($serialized_args_name);\n let mut context = aztec::context::PrivateContext::new(inputs, args_hash);\n $storage_init\n let self_address = context.this_address();\n let call_self: CallSelf<&mut aztec::context::PrivateContext> = CallSelf { address: self_address, context: &mut context };\n let enqueue_self: EnqueueSelf<&mut aztec::context::PrivateContext> = EnqueueSelf { address: self_address, context: &mut context };\n let call_self_static: CallSelfStatic<&mut aztec::context::PrivateContext> = CallSelfStatic { address: self_address, context: &mut context };\n let enqueue_self_static: EnqueueSelfStatic<&mut aztec::context::PrivateContext> = EnqueueSelfStatic { address: self_address, context: &mut context };\n let internal: CallInternal<&mut aztec::context::PrivateContext> = CallInternal { context: &mut context };\n let call_self_utility = CallSelfUtility { address: self_address };\n let utility: aztec::contract_self::PrivateUtilityCalls<CallSelfUtility> = aztec::contract_self::PrivateUtilityCalls { call_self: call_self_utility };\n aztec::contract_self::ContractSelfPrivate::new(&mut context, storage, call_self, enqueue_self, call_self_static, enqueue_self_static, internal, utility)\n };\n };\n\n let original_function_name = f.name();\n\n // Modifications introduced by the different marker attributes.\n let internal_check = if is_fn_only_self(f) {\n let assertion_message = f\"Function {original_function_name} can only be called by the same contract\";\n quote { assert(self.msg_sender() == self.address, $assertion_message); }\n } else {\n quote {}\n };\n\n let view_check = if is_fn_view(f) {\n let assertion_message = f\"Function {original_function_name} can only be called statically\".as_quoted_str();\n quote { assert(self.context.is_static_call(), $assertion_message); }\n } else {\n quote {}\n };\n\n let (assert_initializer, mark_as_initialized) = if is_fn_initializer(f) {\n let has_public_fns_with_init_check = has_public_init_checked_functions(f.module());\n (\n quote {\n aztec::macros::functions::initialization_utils::assert_initialization_matches_address_preimage_private(*self.context);\n },\n quote { aztec::macros::functions::initialization_utils::mark_as_initialized_from_private_initializer(self.context, $has_public_fns_with_init_check); },\n )\n } else {\n (quote {}, quote {})\n };\n\n // Initialization checks are not included in contracts that don't have initializers.\n let init_check = if module_has_initializer & !is_fn_initializer(f) & !fn_has_noinitcheck(f) {\n quote { aztec::macros::functions::initialization_utils::assert_is_initialized_private(self.context); }\n } else {\n quote {}\n };\n\n // Phase checks are skipped in functions that request to manually handle phases\n let initial_phase_store = if fn_has_allow_phase_change(f) {\n quote {}\n } else {\n quote { let within_revertible_phase: bool = self.context.in_revertible_phase(); }\n };\n\n let no_phase_change_check = if fn_has_allow_phase_change(f) {\n quote {}\n } else {\n quote {\n assert_eq(\n within_revertible_phase,\n self.context.in_revertible_phase(),\n f\"Phase change detected on function with phase check. If this is expected, use #[allow_phase_change]\",\n );\n }\n };\n\n // Inject the authwit check if the function is marked with #[authorize_once].\n let authorize_once_check = if fn_has_authorize_once(f) {\n create_authorize_once_check(f, true)\n } else {\n quote {}\n };\n\n // Finally, we need to change the return type to be `PrivateCircuitPublicInputs`, which is what the Private Kernel\n // circuit expects.\n let return_value_var_name = quote { macro__returned__values };\n\n let return_value_type = f.return_type();\n let return_value = if body.len() == 0 {\n quote {}\n } else if return_value_type != type_of(()) {\n // The original return value is serialized and hashed before being passed to the context.\n let (body_without_return, last_body_expr) = body.pop_back();\n let return_value = last_body_expr.quoted();\n let return_value_assignment = quote { let $return_value_var_name: $return_value_type = $return_value; };\n\n let (return_serialization, _, serialized_return_name) =\n derive_serialization_quotes([(return_value_var_name, return_value_type)], false);\n\n body = body_without_return;\n\n quote {\n $return_value_assignment\n $return_serialization\n self.context.set_return_hash($serialized_return_name);\n }\n } else {\n let (body_without_return, last_body_expr) = body.pop_back();\n if !last_body_expr.has_semicolon()\n & last_body_expr.as_for().is_none()\n & last_body_expr.as_assert().is_none()\n & last_body_expr.as_for_range().is_none()\n & last_body_expr.as_assert_eq().is_none()\n & last_body_expr.as_let().is_none() {\n let unused_return_value_name = f\"_{return_value_var_name}\".quoted_contents();\n body = body_without_return.push_back(quote { let $unused_return_value_name = $last_body_expr; }\n .as_expr()\n .unwrap());\n }\n quote {}\n };\n\n let context_finish = quote { self.context.finish() };\n\n // Preserve all attributes that are relevant to the function's ABI.\n let abi_relevant_attributes = get_abi_relevant_attributes(f);\n\n let fn_name = f\"__aztec_nr_internals__{original_function_name}\".quoted_contents();\n\n let to_prepend = quote {\n aztec::oracle::version::assert_compatible_oracle_version();\n $contract_self_creation\n $initial_phase_store\n $assert_initializer\n $init_check\n $internal_check\n $view_check\n $authorize_once_check\n };\n\n let body_quote = body.map(|expr| expr.quoted()).join(quote { });\n\n // `mark_as_initialized` is placed after the user's function body. If it ran at the beginning, the contract\n // would appear initialized while the initializer is still running, allowing contracts called by the initializer\n // to re-enter into a half-initialized contract.\n let to_append = quote {\n $return_value\n $mark_as_initialized\n $no_phase_change_check\n $context_finish\n };\n\n quote {\n #[aztec::macros::internals_functions_generation::abi_attributes::abi_private]\n $abi_relevant_attributes\n fn $fn_name($params) -> return_data aztec::protocol::abis::private_circuit_public_inputs::PrivateCircuitPublicInputs {\n $to_prepend\n $body_quote\n $to_append\n }\n }\n}\n"
|
|
138
138
|
},
|
|
139
139
|
"133": {
|
|
140
140
|
"function_locations": [
|
|
141
|
-
{
|
|
142
|
-
"name": "protect_from_forgery",
|
|
143
|
-
"start": 4924
|
|
144
|
-
},
|
|
145
|
-
{
|
|
146
|
-
"name": "forgery_protected_eph_pk",
|
|
147
|
-
"start": 5936
|
|
148
|
-
},
|
|
149
141
|
{
|
|
150
142
|
"name": "get_existing_app_siloed_handshake_secrets",
|
|
151
|
-
"start":
|
|
143
|
+
"start": 3756
|
|
152
144
|
},
|
|
153
145
|
{
|
|
154
146
|
"name": "create_non_interactive_handshake",
|
|
155
|
-
"start":
|
|
147
|
+
"start": 4624
|
|
156
148
|
},
|
|
157
149
|
{
|
|
158
150
|
"name": "create_interactive_handshake",
|
|
159
|
-
"start":
|
|
151
|
+
"start": 5411
|
|
160
152
|
},
|
|
161
153
|
{
|
|
162
154
|
"name": "get_handshake_secrets",
|
|
163
|
-
"start":
|
|
155
|
+
"start": 5990
|
|
164
156
|
},
|
|
165
157
|
{
|
|
166
158
|
"name": "fetch_handshake_page",
|
|
167
|
-
"start":
|
|
159
|
+
"start": 7311
|
|
168
160
|
},
|
|
169
161
|
{
|
|
170
162
|
"name": "test::get_handshake_secrets_returns_secrets_from_single_page",
|
|
171
|
-
"start":
|
|
163
|
+
"start": 8161
|
|
172
164
|
},
|
|
173
165
|
{
|
|
174
166
|
"name": "test::get_handshake_secrets_fetches_multiple_pages",
|
|
175
|
-
"start":
|
|
167
|
+
"start": 9808
|
|
176
168
|
},
|
|
177
169
|
{
|
|
178
|
-
"name": "test::
|
|
179
|
-
"start":
|
|
170
|
+
"name": "test::get_handshake_secrets_returns_empty_when_scope_keys_not_held",
|
|
171
|
+
"start": 12119
|
|
180
172
|
},
|
|
181
173
|
{
|
|
182
174
|
"name": "test::mock_get_shared_secrets",
|
|
183
|
-
"start": 16538
|
|
184
|
-
}
|
|
185
|
-
],
|
|
186
|
-
"path": "/home/nventuro/pkg-1/noir-projects/aztec-nr/aztec/src/messages/delivery/handshake.nr",
|
|
187
|
-
"source": "use crate::protocol::point::EmbeddedCurvePoint;\nuse crate::protocol::traits::{Deserialize, Serialize};\nuse std::embedded_curve_ops::{EmbeddedCurveScalar, multi_scalar_mul};\n\nuse crate::{\n context::PrivateContext,\n ephemeral::EphemeralArray,\n messages::{delivery::OnchainDeliveryMode, processing::provided_secret::ProvidedSecret},\n oracle::{call_utility_function::call_utility_function, shared_secret::get_shared_secrets},\n protocol::{\n abis::function_selector::FunctionSelector,\n address::AztecAddress,\n constants::DOM_SEP__HANDSHAKE_FORGERY_PROTECTION,\n hash::{poseidon2_hash_with_separator, sha256_to_field},\n traits::ToField,\n },\n standard_addresses::STANDARD_HANDSHAKE_REGISTRY_ADDRESS,\n};\n\n/// Page size for handshake discovery pagination.\npub global MAX_HANDSHAKES_PER_PAGE: u32 = 32;\n\n/// A handshake discovered during sync: the sender's ephemeral public key.\n#[derive(Deserialize, Eq, Serialize)]\npub struct DiscoveredHandshake {\n pub eph_pk: EmbeddedCurvePoint,\n}\n\n/// A paginated response of discovered handshakes.\n#[derive(Deserialize, Serialize)]\npub struct HandshakePage {\n pub items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE>,\n pub total_count: u32,\n}\n\n/// The app-siloed handshake secrets the registry returns for a `(sender, recipient)` pair.\n#[derive(Deserialize, Eq, Serialize)]\npub struct AppSiloedHandshakeSecrets {\n /// The app-siloed shared secret, used to derive the recipient's discovery tag. The recipient can reconstruct\n /// it from the handshake's public ephemeral key via ECDH.\n pub shared: Field,\n /// The app-siloed sender-only secret, folded into the constrained-delivery sequence nullifier so only the\n /// sender can advance a sequence. The recipient cannot reconstruct it: it derives from a random secret stored\n /// only in the sender's handshake note and never transmitted.\n pub sender_only: Field,\n}\n\npub(crate) global PROVIDED_SECRETS_ARRAY_BASE_SLOT: Field =\n sha256_to_field(\"AZTEC_NR::PROVIDED_SECRETS_ARRAY_BASE_SLOT\".as_bytes());\n\nglobal HANDSHAKE_EPH_PKS_SLOT: Field = sha256_to_field(\"AZTEC_NR::HANDSHAKE_EPH_PKS_SLOT\".as_bytes());\n\n// The helper cannot import the handshake registry interface because the registry contract depends on aztec-nr. These\n// selector constants pin the registry ABI surface this library calls. The registry's test suite compares them against\n// its macro-generated `HandshakeRegistry::at(...).method(...).selector` values so signature drift fails in tests.\npub global GET_APP_SILOED_SECRETS_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"get_app_siloed_secrets((Field),(Field))\") };\npub global NON_INTERACTIVE_HANDSHAKE_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"non_interactive_handshake((Field),(Field))\") };\npub global INTERACTIVE_HANDSHAKE_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"interactive_handshake((Field),(Field))\") };\npub global GET_NON_INTERACTIVE_HANDSHAKES_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"get_non_interactive_handshakes((Field),u32)\") };\n\n/// Protects a handshake's shared secret from recipient forgery.\n///\n/// The handshake's ECDH shared secret is symmetric: `S = eph_sk * recipient_pub`, where `(eph_sk, eph_pk)` is\n/// the sender's ephemeral key pair, also equals `recipient_priv * eph_pk`. The recipient recomputing `S` this\n/// way is normal: it is how they derive the handshake's tags when scanning. The attack is minting a second\n/// handshake with the same secret: the ephemeral key is unconstrained, so a malicious recipient can register\n/// its own handshake crafted to land on `S` again, with a different sender-only secret, and emit logs under\n/// the honest handshake's constrained-delivery tag. That breaks the invariant that a constrained-delivery log\n/// sequence is tied to a single sender: by colliding on the tag it blocks the honest sender, who can no longer\n/// emit the next note in their sequence.\n///\n/// The protection multiplies `S` by the scalar `k = hash(eph_pk, recipient_point)`: a forgery must announce a\n/// different `eph_pk`, so the protected secrets diverge. The result is still a point and silos like `S`.\n///\n/// The recipient point must be part of `k`: were `k` independent of it, an attacker choosing the fake\n/// recipient point as a multiple of the honest protected secret could solve for the multiplier that makes the\n/// forged secret land exactly on it.\n///\n/// Concretely, on the sender's side:\n/// S = eph_sk * recipient_point\n/// S' = protect_from_forgery(S, eph_pk, recipient_point) = k * S\n///\n/// See [`forgery_protected_eph_pk`] for how that arrives at the same `S'`.\npub fn protect_from_forgery(\n secret: EmbeddedCurvePoint,\n eph_pk: EmbeddedCurvePoint,\n recipient_point: EmbeddedCurvePoint,\n) -> EmbeddedCurvePoint {\n let scalar = poseidon2_hash_with_separator(\n [eph_pk.x, eph_pk.y, recipient_point.x, recipient_point.y],\n DOM_SEP__HANDSHAKE_FORGERY_PROTECTION,\n );\n multi_scalar_mul([secret], [EmbeddedCurveScalar::from_field(scalar)])\n}\n\n/// Applies the forgery protection to a discovered ephemeral key.\n///\n/// The recipient never holds the raw `S` (its side of the ECDH happens inside PXE), so it cannot call\n/// [`protect_from_forgery`] on the secret directly. The protection is a scalar multiplication and therefore\n/// commutes through ECDH: protecting the ephemeral key before the shared-secret derivation yields the same\n/// protected secret `S'` the sender stored:\n///\n/// protected_eph_pk = forgery_protected_eph_pk(eph_pk, recipient_point) = k * eph_pk\n/// recipient_priv * protected_eph_pk = recipient_priv * (k * eph_pk) = k * (recipient_priv * eph_pk) = k * S = S'\npub fn forgery_protected_eph_pk(eph_pk: EmbeddedCurvePoint, recipient_point: EmbeddedCurvePoint) -> EmbeddedCurvePoint {\n // Passing `eph_pk` twice is deliberate: it is both the point being multiplied and an input to the scalar\n // `k`, yielding `k * eph_pk` (see the algebra on [`protect_from_forgery`]).\n protect_from_forgery(eph_pk, eph_pk, recipient_point)\n}\n\n/// Reads the existing app-siloed handshake secrets for `(sender, recipient)` from the registry.\n///\n/// Returns `None` when no handshake has been registered for the pair yet, in which case the caller decides how to\n/// source a tagging secret (see [`super::tag::derive_log_tag`]).\n///\n/// ## Batching\n///\n/// This reads committed state, so within a single transaction multiple sends cannot see each other's pending\n/// handshake. A brand-new recipient therefore needs one landed transaction to establish the handshake before further\n/// sends can be batched onto it.\npub(crate) unconstrained fn get_existing_app_siloed_handshake_secrets(\n registry: AztecAddress,\n sender: AztecAddress,\n recipient: AztecAddress,\n) -> Option<AppSiloedHandshakeSecrets> {\n let returns = call_utility_function(\n registry,\n GET_APP_SILOED_SECRETS_SELECTOR,\n [sender.to_field(), recipient.to_field()],\n );\n Deserialize::deserialize(returns)\n}\n\n/// Establishes a non-interactive handshake for `(sender, recipient)` and returns its app-siloed secrets.\n///\n/// The registry inserts a fresh handshake note and returns the app-siloed secrets. The constrained return value is the\n/// source of truth for the secrets, so constrained delivery anchoring a freshly bootstrapped handshake needs no\n/// separate call to the registry's `validate_handshake`.\n///\n/// Any handshake already registered for the pair is overwritten.\npub(crate) fn create_non_interactive_handshake(\n context: &mut PrivateContext,\n registry: AztecAddress,\n sender: AztecAddress,\n recipient: AztecAddress,\n) -> AppSiloedHandshakeSecrets {\n context\n .call_private_function(registry, NON_INTERACTIVE_HANDSHAKE_SELECTOR, [sender.to_field(), recipient.to_field()])\n .get_preimage()\n}\n\n/// Establishes an interactive handshake for `(sender, recipient)` and returns its app-siloed secrets.\n///\n/// As with [`create_non_interactive_handshake`], the constrained return value is the source of truth for the\n/// secrets, so constrained delivery anchoring a freshly bootstrapped handshake needs no separate call to the\n/// registry's `validate_handshake`.\n///\n/// Any handshake already registered for the pair is overwritten.\npub(crate) fn create_interactive_handshake(\n context: &mut PrivateContext,\n registry: AztecAddress,\n sender: AztecAddress,\n recipient: AztecAddress,\n) -> AppSiloedHandshakeSecrets {\n context\n .call_private_function(registry, INTERACTIVE_HANDSHAKE_SELECTOR, [sender.to_field(), recipient.to_field()])\n .get_preimage()\n}\n\n/// Fetches discovered handshakes from the HandshakeRegistry and derives app-siloed tagging secrets for each,\n/// returning them so that [`get_pending_tagged_logs`](crate::oracle::message_processing::get_pending_tagged_logs)\n/// searches for logs tagged with these secrets.\npub(crate) unconstrained fn get_handshake_secrets(\n contract_address: AztecAddress,\n recipient: AztecAddress,\n) -> EphemeralArray<ProvidedSecret> {\n let provided_secrets = EphemeralArray::<ProvidedSecret>::empty_at(PROVIDED_SECRETS_ARRAY_BASE_SLOT);\n\n // Each ephemeral key gets the forgery protection applied (see [`forgery_protected_eph_pk`]) so the oracle's\n // ECDH yields the protected secret the sender stored.\n let protected_eph_pks: EphemeralArray<EmbeddedCurvePoint> = EphemeralArray::empty_at(HANDSHAKE_EPH_PKS_SLOT);\n let recipient_point = recipient.to_address_point().expect(f\"recipient address is not on the curve\").inner;\n\n let mut page_offset: u32 = 0;\n let mut has_more = true;\n while has_more {\n let page = fetch_handshake_page(recipient, page_offset);\n\n for j in 0..page.items.len() {\n protected_eph_pks.push(forgery_protected_eph_pk(page.items.get(j).eph_pk, recipient_point));\n }\n\n page_offset += page.items.len();\n has_more = page_offset < page.total_count;\n }\n\n if protected_eph_pks.len() > 0 {\n let secrets = get_shared_secrets(recipient, protected_eph_pks, contract_address);\n for j in 0..secrets.len() {\n let secret = secrets.get(j);\n // Handshakes are mode-agnostic; emit one entry per on-chain tag domain for PXE to scan.\n provided_secrets.push(ProvidedSecret { secret, mode: OnchainDeliveryMode::onchain_unconstrained() });\n provided_secrets.push(ProvidedSecret { secret, mode: OnchainDeliveryMode::onchain_constrained() });\n }\n }\n\n provided_secrets\n}\n\n/// Calls the HandshakeRegistry's `get_non_interactive_handshakes` utility function and deserializes the response.\nunconstrained fn fetch_handshake_page(recipient: AztecAddress, page_offset: u32) -> HandshakePage {\n let args: [Field; 2] = [recipient.to_field(), page_offset as Field];\n let response = call_utility_function(\n STANDARD_HANDSHAKE_REGISTRY_ADDRESS,\n GET_NON_INTERACTIVE_HANDSHAKES_SELECTOR,\n args,\n );\n HandshakePage::deserialize(response)\n}\n\nmod test {\n use crate::ephemeral::EphemeralArray;\n use crate::messages::delivery::handshake::{\n DiscoveredHandshake, get_handshake_secrets, HandshakePage, MAX_HANDSHAKES_PER_PAGE,\n };\n use crate::messages::delivery::OnchainDeliveryMode;\n use crate::protocol::{address::AztecAddress, traits::{FromField, Serialize}};\n use crate::test::helpers::test_environment::TestEnvironment;\n use crate::utils::point::point_from_x_coord;\n use std::test::OracleMock;\n\n #[test]\n unconstrained fn get_handshake_secrets_returns_secrets_from_single_page() {\n let env = TestEnvironment::new();\n let recipient = AztecAddress::from_field(1);\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n let pk_a = point_from_x_coord(1).unwrap();\n let pk_b = point_from_x_coord(2).unwrap();\n\n let mut items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE> = BoundedVec::new();\n items.push(DiscoveredHandshake { eph_pk: pk_a });\n items.push(DiscoveredHandshake { eph_pk: pk_b });\n let page = HandshakePage { items, total_count: 2 };\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page.serialize());\n\n let secret_a: Field = 111;\n let secret_b: Field = 222;\n mock_get_shared_secrets([secret_a, secret_b]);\n\n let secrets = get_handshake_secrets(contract_address, recipient);\n\n assert_eq(secrets.len(), 4);\n assert_eq(secrets.get(0).secret, secret_a);\n assert(secrets.get(0).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(1).secret, secret_a);\n assert(secrets.get(1).mode == OnchainDeliveryMode::onchain_constrained());\n assert_eq(secrets.get(2).secret, secret_b);\n assert(secrets.get(2).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(3).secret, secret_b);\n assert(secrets.get(3).mode == OnchainDeliveryMode::onchain_constrained());\n });\n }\n\n #[test]\n unconstrained fn get_handshake_secrets_fetches_multiple_pages() {\n let env = TestEnvironment::new();\n let recipient = AztecAddress::from_field(1);\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n let pk_a = point_from_x_coord(1).unwrap();\n let pk_b = point_from_x_coord(2).unwrap();\n let pk_c = point_from_x_coord(8).unwrap();\n\n let mut page_1_items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE> = BoundedVec::new();\n page_1_items.push(DiscoveredHandshake { eph_pk: pk_a });\n page_1_items.push(DiscoveredHandshake { eph_pk: pk_b });\n let page_1 = HandshakePage { items: page_1_items, total_count: 3 };\n\n let mut page_2_items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE> = BoundedVec::new();\n page_2_items.push(DiscoveredHandshake { eph_pk: pk_c });\n let page_2 = HandshakePage { items: page_2_items, total_count: 3 };\n\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page_1.serialize()).times(1);\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page_2.serialize()).times(1);\n\n mock_get_shared_secrets([111, 222, 333]);\n\n let secrets = get_handshake_secrets(contract_address, recipient);\n assert_eq(secrets.len(), 6);\n assert_eq(secrets.get(0).secret, 111);\n assert(secrets.get(0).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(1).secret, 111);\n assert(secrets.get(1).mode == OnchainDeliveryMode::onchain_constrained());\n assert_eq(secrets.get(2).secret, 222);\n assert(secrets.get(2).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(3).secret, 222);\n assert(secrets.get(3).mode == OnchainDeliveryMode::onchain_constrained());\n assert_eq(secrets.get(4).secret, 333);\n assert(secrets.get(4).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(5).secret, 333);\n assert(secrets.get(5).mode == OnchainDeliveryMode::onchain_constrained());\n });\n }\n\n #[test]\n unconstrained fn get_handshake_secrets_returns_empty_when_recipient_keys_not_held() {\n let env = TestEnvironment::new();\n let recipient = AztecAddress::from_field(1);\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n let mut items = BoundedVec::new();\n items.push(DiscoveredHandshake { eph_pk: point_from_x_coord(1).unwrap() });\n let page = HandshakePage { items, total_count: 1 };\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page.serialize());\n\n let empty: [Field; 0] = [];\n mock_get_shared_secrets(empty);\n\n let secrets = get_handshake_secrets(contract_address, recipient);\n assert_eq(secrets.len(), 0);\n });\n }\n\n unconstrained fn mock_get_shared_secrets<let N: u32>(response_values: [Field; N]) {\n let response_slot: Field = 99;\n let response_array: EphemeralArray<Field> = EphemeralArray::at(response_slot);\n for value in response_values {\n response_array.push(value);\n }\n let _ = OracleMock::mock(\"aztec_utl_getSharedSecrets\").returns(response_slot);\n }\n}\n"
|
|
188
|
-
},
|
|
189
|
-
"14": {
|
|
190
|
-
"function_locations": [
|
|
191
|
-
{
|
|
192
|
-
"name": "EmbeddedCurvePoint::new",
|
|
193
|
-
"start": 510
|
|
194
|
-
},
|
|
195
|
-
{
|
|
196
|
-
"name": "EmbeddedCurvePoint::double",
|
|
197
|
-
"start": 705
|
|
198
|
-
},
|
|
199
|
-
{
|
|
200
|
-
"name": "EmbeddedCurvePoint::point_at_infinity",
|
|
201
|
-
"start": 877
|
|
202
|
-
},
|
|
203
|
-
{
|
|
204
|
-
"name": "EmbeddedCurvePoint::generator",
|
|
205
|
-
"start": 1018
|
|
206
|
-
},
|
|
207
|
-
{
|
|
208
|
-
"name": "EmbeddedCurvePoint::is_infinite",
|
|
209
|
-
"start": 1329
|
|
210
|
-
},
|
|
211
|
-
{
|
|
212
|
-
"name": "<impl Add for EmbeddedCurvePoint>::add",
|
|
213
|
-
"start": 1576
|
|
214
|
-
},
|
|
215
|
-
{
|
|
216
|
-
"name": "<impl Sub for EmbeddedCurvePoint>::sub",
|
|
217
|
-
"start": 1793
|
|
218
|
-
},
|
|
219
|
-
{
|
|
220
|
-
"name": "<impl Neg for EmbeddedCurvePoint>::neg",
|
|
221
|
-
"start": 2051
|
|
222
|
-
},
|
|
223
|
-
{
|
|
224
|
-
"name": "<impl Eq for EmbeddedCurvePoint>::eq",
|
|
225
|
-
"start": 2245
|
|
226
|
-
},
|
|
227
|
-
{
|
|
228
|
-
"name": "<impl Hash for EmbeddedCurvePoint>::hash",
|
|
229
|
-
"start": 2415
|
|
230
|
-
},
|
|
231
|
-
{
|
|
232
|
-
"name": "EmbeddedCurveScalar::new",
|
|
233
|
-
"start": 2969
|
|
234
|
-
},
|
|
235
|
-
{
|
|
236
|
-
"name": "EmbeddedCurveScalar::from_field",
|
|
237
|
-
"start": 3154
|
|
238
|
-
},
|
|
239
|
-
{
|
|
240
|
-
"name": "<impl Eq for EmbeddedCurveScalar>::eq",
|
|
241
|
-
"start": 3342
|
|
242
|
-
},
|
|
243
|
-
{
|
|
244
|
-
"name": "<impl Hash for EmbeddedCurveScalar>::hash",
|
|
245
|
-
"start": 3525
|
|
246
|
-
},
|
|
247
|
-
{
|
|
248
|
-
"name": "multi_scalar_mul",
|
|
249
|
-
"start": 4201
|
|
250
|
-
},
|
|
251
|
-
{
|
|
252
|
-
"name": "fixed_base_scalar_mul",
|
|
253
|
-
"start": 4416
|
|
254
|
-
},
|
|
255
|
-
{
|
|
256
|
-
"name": "multi_scalar_mul_array_return",
|
|
257
|
-
"start": 4699
|
|
258
|
-
},
|
|
259
|
-
{
|
|
260
|
-
"name": "embedded_curve_add",
|
|
261
|
-
"start": 5154
|
|
262
|
-
},
|
|
263
|
-
{
|
|
264
|
-
"name": "embedded_curve_add_array_return",
|
|
265
|
-
"start": 5439
|
|
266
|
-
},
|
|
267
|
-
{
|
|
268
|
-
"name": "tests::hash_point",
|
|
269
|
-
"start": 5888
|
|
270
|
-
},
|
|
271
|
-
{
|
|
272
|
-
"name": "tests::hash_scalar",
|
|
273
|
-
"start": 6064
|
|
274
|
-
},
|
|
275
|
-
{
|
|
276
|
-
"name": "tests::point_new_sets_coordinates",
|
|
277
|
-
"start": 6236
|
|
278
|
-
},
|
|
279
|
-
{
|
|
280
|
-
"name": "tests::point_at_infinity_is_origin",
|
|
281
|
-
"start": 6395
|
|
282
|
-
},
|
|
283
|
-
{
|
|
284
|
-
"name": "tests::generator_has_documented_coordinates",
|
|
285
|
-
"start": 6579
|
|
286
|
-
},
|
|
287
|
-
{
|
|
288
|
-
"name": "tests::is_infinite_only_true_for_origin",
|
|
289
|
-
"start": 6803
|
|
290
|
-
},
|
|
291
|
-
{
|
|
292
|
-
"name": "tests::points_with_same_coords_are_equal",
|
|
293
|
-
"start": 7126
|
|
294
|
-
},
|
|
295
|
-
{
|
|
296
|
-
"name": "tests::points_with_different_coords_are_unequal",
|
|
297
|
-
"start": 7318
|
|
298
|
-
},
|
|
299
|
-
{
|
|
300
|
-
"name": "tests::neg_negates_y_coordinate",
|
|
301
|
-
"start": 7580
|
|
302
|
-
},
|
|
303
|
-
{
|
|
304
|
-
"name": "tests::neg_is_involution",
|
|
305
|
-
"start": 7768
|
|
306
|
-
},
|
|
307
|
-
{
|
|
308
|
-
"name": "tests::add_with_point_at_infinity_is_identity",
|
|
309
|
-
"start": 7913
|
|
310
|
-
},
|
|
311
|
-
{
|
|
312
|
-
"name": "tests::add_of_two_infinities_is_infinity",
|
|
313
|
-
"start": 8147
|
|
314
|
-
},
|
|
315
|
-
{
|
|
316
|
-
"name": "tests::add_with_negation_is_point_at_infinity",
|
|
317
|
-
"start": 8318
|
|
318
|
-
},
|
|
319
|
-
{
|
|
320
|
-
"name": "tests::add_is_commutative",
|
|
321
|
-
"start": 8458
|
|
322
|
-
},
|
|
323
|
-
{
|
|
324
|
-
"name": "tests::add_is_associative",
|
|
325
|
-
"start": 8620
|
|
326
|
-
},
|
|
327
|
-
{
|
|
328
|
-
"name": "tests::sub_of_a_point_with_itself_is_infinity",
|
|
329
|
-
"start": 8841
|
|
330
|
-
},
|
|
331
|
-
{
|
|
332
|
-
"name": "tests::sub_with_point_at_infinity_is_identity",
|
|
333
|
-
"start": 8998
|
|
334
|
-
},
|
|
335
|
-
{
|
|
336
|
-
"name": "tests::sub_inverts_add",
|
|
337
|
-
"start": 9183
|
|
338
|
-
},
|
|
339
|
-
{
|
|
340
|
-
"name": "tests::double_equals_self_plus_self",
|
|
341
|
-
"start": 9394
|
|
342
|
-
},
|
|
343
|
-
{
|
|
344
|
-
"name": "tests::double_of_point_at_infinity_is_infinity",
|
|
345
|
-
"start": 9551
|
|
346
|
-
},
|
|
347
|
-
{
|
|
348
|
-
"name": "tests::embedded_curve_add_matches_add_operator",
|
|
349
|
-
"start": 9701
|
|
350
|
-
},
|
|
351
|
-
{
|
|
352
|
-
"name": "tests::point_hash_is_consistent_for_equal_points",
|
|
353
|
-
"start": 9905
|
|
354
|
-
},
|
|
355
|
-
{
|
|
356
|
-
"name": "tests::point_hash_differs_for_distinct_points",
|
|
357
|
-
"start": 10117
|
|
358
|
-
},
|
|
359
|
-
{
|
|
360
|
-
"name": "tests::scalar_new_sets_limbs",
|
|
361
|
-
"start": 10515
|
|
362
|
-
},
|
|
363
|
-
{
|
|
364
|
-
"name": "tests::scalars_with_same_limbs_are_equal",
|
|
365
|
-
"start": 10683
|
|
366
|
-
},
|
|
367
|
-
{
|
|
368
|
-
"name": "tests::scalars_with_different_limbs_are_unequal",
|
|
369
|
-
"start": 10877
|
|
370
|
-
},
|
|
371
|
-
{
|
|
372
|
-
"name": "tests::scalar_from_field_decomposes_zero",
|
|
373
|
-
"start": 11098
|
|
374
|
-
},
|
|
375
|
-
{
|
|
376
|
-
"name": "tests::scalar_from_field_decomposes_small_value",
|
|
377
|
-
"start": 11256
|
|
378
|
-
},
|
|
379
|
-
{
|
|
380
|
-
"name": "tests::scalar_from_field_decomposes_two_pow_128",
|
|
381
|
-
"start": 11455
|
|
382
|
-
},
|
|
383
|
-
{
|
|
384
|
-
"name": "tests::scalar_hash_is_consistent_for_equal_scalars",
|
|
385
|
-
"start": 11645
|
|
386
|
-
},
|
|
387
|
-
{
|
|
388
|
-
"name": "tests::scalar_hash_differs_for_distinct_scalars",
|
|
389
|
-
"start": 11865
|
|
390
|
-
},
|
|
391
|
-
{
|
|
392
|
-
"name": "tests::msm_with_scalar_one_returns_point",
|
|
393
|
-
"start": 12288
|
|
394
|
-
},
|
|
395
|
-
{
|
|
396
|
-
"name": "tests::msm_with_scalar_zero_returns_infinity",
|
|
397
|
-
"start": 12507
|
|
398
|
-
},
|
|
399
|
-
{
|
|
400
|
-
"name": "tests::msm_with_scalar_two_doubles_point",
|
|
401
|
-
"start": 12732
|
|
402
|
-
},
|
|
403
|
-
{
|
|
404
|
-
"name": "tests::msm_sums_terms",
|
|
405
175
|
"start": 12937
|
|
406
|
-
},
|
|
407
|
-
{
|
|
408
|
-
"name": "tests::msm_with_opposite_terms_cancels",
|
|
409
|
-
"start": 13167
|
|
410
|
-
},
|
|
411
|
-
{
|
|
412
|
-
"name": "tests::msm_skips_point_at_infinity",
|
|
413
|
-
"start": 13393
|
|
414
|
-
},
|
|
415
|
-
{
|
|
416
|
-
"name": "tests::msm_skips_zero_scalar",
|
|
417
|
-
"start": 13665
|
|
418
|
-
},
|
|
419
|
-
{
|
|
420
|
-
"name": "tests::fixed_base_scalar_mul_with_one_returns_generator",
|
|
421
|
-
"start": 13955
|
|
422
|
-
},
|
|
423
|
-
{
|
|
424
|
-
"name": "tests::fixed_base_scalar_mul_with_zero_returns_infinity",
|
|
425
|
-
"start": 14164
|
|
426
|
-
},
|
|
427
|
-
{
|
|
428
|
-
"name": "tests::fixed_base_scalar_mul_matches_msm_on_generator",
|
|
429
|
-
"start": 14351
|
|
430
176
|
}
|
|
431
177
|
],
|
|
432
|
-
"path": "
|
|
433
|
-
"source": "use crate::cmp::Eq;\nuse crate::hash::Hash;\nuse crate::ops::arith::{Add, Neg, Sub};\n\n/// A point on the embedded elliptic curve\n/// By definition, the base field of the embedded curve is the scalar field of the proof system curve, i.e the Noir Field.\n/// x and y denotes the Weierstrass coordinates of the point.\npub struct EmbeddedCurvePoint {\n pub x: Field,\n pub y: Field,\n}\n\nimpl EmbeddedCurvePoint {\n /// Create a new point using the provided (x, y) pair\n pub fn new(x: Field, y: Field) -> Self {\n EmbeddedCurvePoint { x, y }\n }\n\n /// Elliptic curve point doubling operation\n /// returns the doubled point of a point P, i.e P+P\n pub fn double(self) -> EmbeddedCurvePoint {\n embedded_curve_add(self, self)\n }\n\n /// Returns the null element of the curve; 'the point at infinity'\n pub fn point_at_infinity() -> EmbeddedCurvePoint {\n EmbeddedCurvePoint { x: 0, y: 0 }\n }\n\n /// Returns the curve's generator point.\n pub fn generator() -> EmbeddedCurvePoint {\n // Generator point for the grumpkin curve (y^2 = x^3 - 17)\n EmbeddedCurvePoint {\n x: 1,\n y: 17631683881184975370165255887551781615748388533673675138860, // sqrt(-16)\n }\n }\n\n /// True if this point is the point at infinity\n pub fn is_infinite(self) -> bool {\n (self.x == 0) & (self.y == 0)\n }\n}\n\nimpl Add for EmbeddedCurvePoint {\n /// Adds two points P+Q, using the curve addition formula, and also handles point at infinity\n fn add(self, other: EmbeddedCurvePoint) -> EmbeddedCurvePoint {\n embedded_curve_add(self, other)\n }\n}\n\nimpl Sub for EmbeddedCurvePoint {\n /// Points subtraction operation, using addition and negation\n fn sub(self, other: EmbeddedCurvePoint) -> EmbeddedCurvePoint {\n self + other.neg()\n }\n}\n\nimpl Neg for EmbeddedCurvePoint {\n /// Negates a point P, i.e returns -P, by negating the y coordinate.\n /// If the point is at infinity, then the result is also at infinity.\n fn neg(self) -> EmbeddedCurvePoint {\n EmbeddedCurvePoint { x: self.x, y: -self.y }\n }\n}\n\nimpl Eq for EmbeddedCurvePoint {\n /// Checks whether two points are equal\n fn eq(self: Self, b: EmbeddedCurvePoint) -> bool {\n (self.x == b.x) & (self.y == b.y)\n }\n}\n\nimpl Hash for EmbeddedCurvePoint {\n fn hash<H>(self, state: &mut H)\n where\n H: crate::hash::Hasher,\n {\n self.x.hash(state);\n self.y.hash(state);\n }\n}\n\n/// Scalar for the embedded curve represented as low and high limbs\n/// By definition, the scalar field of the embedded curve is base field of the proving system curve.\n/// It may not fit into a Field element, so it is represented with two Field elements; its low and high limbs.\npub struct EmbeddedCurveScalar {\n pub lo: Field,\n pub hi: Field,\n}\n\nimpl EmbeddedCurveScalar {\n /// Create a new scalar using the provided (lo, hi) pair\n pub fn new(lo: Field, hi: Field) -> Self {\n EmbeddedCurveScalar { lo, hi }\n }\n\n /// Create a scalar from the given bn254 field value\n #[field(bn254)]\n pub fn from_field(scalar: Field) -> EmbeddedCurveScalar {\n let (a, b) = crate::field::bn254::decompose(scalar);\n EmbeddedCurveScalar { lo: a, hi: b }\n }\n}\n\nimpl Eq for EmbeddedCurveScalar {\n fn eq(self, other: Self) -> bool {\n (other.hi == self.hi) & (other.lo == self.lo)\n }\n}\n\nimpl Hash for EmbeddedCurveScalar {\n fn hash<H>(self, state: &mut H)\n where\n H: crate::hash::Hasher,\n {\n self.hi.hash(state);\n self.lo.hash(state);\n }\n}\n\n/// Computes a multi scalar multiplication over the embedded curve.\n/// For bn254, We have Grumpkin.\n///\n/// The embedded curve being used is decided by the\n/// underlying proof system.\n///\n/// IMPORTANT: Prefer `multi_scalar_mul()` over repeated `embedded_curve_add()`\n/// for adding multiple points. This is significantly more efficient.\n/// For adding exactly 2 points, use `embedded_curve_add()` directly.\n// docs:start:multi_scalar_mul\npub fn multi_scalar_mul<let N: u32>(\n points: [EmbeddedCurvePoint; N],\n scalars: [EmbeddedCurveScalar; N],\n) -> EmbeddedCurvePoint\n// docs:end:multi_scalar_mul\n{\n multi_scalar_mul_array_return(points, scalars, true)[0]\n}\n\n// docs:start:fixed_base_scalar_mul\npub fn fixed_base_scalar_mul(scalar: EmbeddedCurveScalar) -> EmbeddedCurvePoint\n// docs:end:fixed_base_scalar_mul\n{\n multi_scalar_mul([EmbeddedCurvePoint::generator()], [scalar])\n}\n\n#[foreign(multi_scalar_mul)]\npub(crate) fn multi_scalar_mul_array_return<let N: u32>(\n points: [EmbeddedCurvePoint; N],\n scalars: [EmbeddedCurveScalar; N],\n predicate: bool,\n) -> [EmbeddedCurvePoint; 1] {}\n\n/// Elliptic curve addition\n/// IMPORTANT: this function is expected to perform a full addition in order to handle all corner cases:\n/// - points on the curve\n/// - point doubling\n/// - point at infinity\n/// As a result, you may not get optimal performance, depending on the assumptions of your inputs.\n// docs:start:embedded_curve_add\npub fn embedded_curve_add(\n point1: EmbeddedCurvePoint,\n point2: EmbeddedCurvePoint,\n) -> EmbeddedCurvePoint {\n // docs:end:embedded_curve_add\n embedded_curve_add_array_return(point1, point2, true)[0]\n}\n\n#[foreign(embedded_curve_add)]\nfn embedded_curve_add_array_return(\n _point1: EmbeddedCurvePoint,\n _point2: EmbeddedCurvePoint,\n _predicate: bool,\n) -> [EmbeddedCurvePoint; 1] {}\n\nmod tests {\n // TODO: Allow imports from \"super\"\n use crate::default::Default;\n use crate::embedded_curve_ops::{\n embedded_curve_add, EmbeddedCurvePoint, EmbeddedCurveScalar, fixed_base_scalar_mul,\n multi_scalar_mul,\n };\n use crate::field::bn254::TWO_POW_128;\n use crate::hash::Hash;\n use crate::hash::Hasher;\n use crate::hash::poseidon2::Poseidon2Hasher;\n\n fn hash_point(p: EmbeddedCurvePoint) -> Field {\n let mut hasher: Poseidon2Hasher = Default::default();\n p.hash(&mut hasher);\n hasher.finish()\n }\n\n fn hash_scalar(s: EmbeddedCurveScalar) -> Field {\n let mut hasher: Poseidon2Hasher = Default::default();\n s.hash(&mut hasher);\n hasher.finish()\n }\n\n #[test]\n fn point_new_sets_coordinates() {\n let p = EmbeddedCurvePoint::new(3, 5);\n assert_eq(p.x, 3);\n assert_eq(p.y, 5);\n }\n\n #[test]\n fn point_at_infinity_is_origin() {\n let inf = EmbeddedCurvePoint::point_at_infinity();\n assert_eq(inf.x, 0);\n assert_eq(inf.y, 0);\n }\n\n #[test]\n fn generator_has_documented_coordinates() {\n let g = EmbeddedCurvePoint::generator();\n assert_eq(g.x, 1);\n assert_eq(g.y, 17631683881184975370165255887551781615748388533673675138860);\n }\n\n #[test]\n fn is_infinite_only_true_for_origin() {\n assert(EmbeddedCurvePoint::point_at_infinity().is_infinite());\n assert(!EmbeddedCurvePoint::generator().is_infinite());\n assert(!EmbeddedCurvePoint::new(1, 0).is_infinite());\n assert(!EmbeddedCurvePoint::new(0, 1).is_infinite());\n }\n\n #[test]\n fn points_with_same_coords_are_equal() {\n let p = EmbeddedCurvePoint::new(7, 11);\n let q = EmbeddedCurvePoint::new(7, 11);\n assert_eq(p, q);\n }\n\n #[test]\n fn points_with_different_coords_are_unequal() {\n let p = EmbeddedCurvePoint::new(7, 11);\n assert(p != EmbeddedCurvePoint::new(7, 12));\n assert(p != EmbeddedCurvePoint::new(8, 11));\n assert(p != EmbeddedCurvePoint::new(8, 12));\n }\n\n #[test]\n fn neg_negates_y_coordinate() {\n let g = EmbeddedCurvePoint::generator();\n let neg_g = -g;\n assert_eq(neg_g.x, g.x);\n assert_eq(neg_g.y, -g.y);\n }\n\n #[test]\n fn neg_is_involution() {\n let g = EmbeddedCurvePoint::generator();\n assert_eq(--g, g);\n }\n\n #[test]\n fn add_with_point_at_infinity_is_identity() {\n let g = EmbeddedCurvePoint::generator();\n let inf = EmbeddedCurvePoint::point_at_infinity();\n assert_eq(g + inf, g);\n assert_eq(inf + g, g);\n }\n\n #[test]\n fn add_of_two_infinities_is_infinity() {\n let inf = EmbeddedCurvePoint::point_at_infinity();\n assert((inf + inf).is_infinite());\n }\n\n #[test]\n fn add_with_negation_is_point_at_infinity() {\n let g = EmbeddedCurvePoint::generator();\n assert((g + (-g)).is_infinite());\n }\n\n #[test]\n fn add_is_commutative() {\n let g = EmbeddedCurvePoint::generator();\n let g2 = g.double();\n assert_eq(g + g2, g2 + g);\n }\n\n #[test]\n fn add_is_associative() {\n let g = EmbeddedCurvePoint::generator();\n let g2 = g.double();\n let g3 = g + g2;\n assert_eq((g + g2) + g3, g + (g2 + g3));\n }\n\n #[test]\n fn sub_of_a_point_with_itself_is_infinity() {\n let g = EmbeddedCurvePoint::generator();\n assert((g - g).is_infinite());\n }\n\n #[test]\n fn sub_with_point_at_infinity_is_identity() {\n let g = EmbeddedCurvePoint::generator();\n let inf = EmbeddedCurvePoint::point_at_infinity();\n assert_eq(g - inf, g);\n }\n\n #[test]\n fn sub_inverts_add() {\n let g = EmbeddedCurvePoint::generator();\n let g2 = g.double();\n assert_eq((g + g2) - g2, g);\n assert_eq((g + g2) - g, g2);\n }\n\n #[test]\n fn double_equals_self_plus_self() {\n let g = EmbeddedCurvePoint::generator();\n assert_eq(g.double(), g + g);\n }\n\n #[test]\n fn double_of_point_at_infinity_is_infinity() {\n assert(EmbeddedCurvePoint::point_at_infinity().double().is_infinite());\n }\n\n #[test]\n fn embedded_curve_add_matches_add_operator() {\n let g = EmbeddedCurvePoint::generator();\n let g2 = g.double();\n assert_eq(embedded_curve_add(g, g2), g + g2);\n }\n\n #[test]\n fn point_hash_is_consistent_for_equal_points() {\n let p = EmbeddedCurvePoint::new(3, 5);\n let q = EmbeddedCurvePoint::new(3, 5);\n assert_eq(hash_point(p), hash_point(q));\n }\n\n #[test]\n fn point_hash_differs_for_distinct_points() {\n let p = EmbeddedCurvePoint::new(3, 5);\n assert(hash_point(p) != hash_point(EmbeddedCurvePoint::new(3, 7)));\n assert(hash_point(p) != hash_point(EmbeddedCurvePoint::new(4, 5)));\n // Distinguishes (x, y) from (y, x) - order of writes matters.\n assert(hash_point(p) != hash_point(EmbeddedCurvePoint::new(5, 3)));\n }\n\n #[test]\n fn scalar_new_sets_limbs() {\n let s = EmbeddedCurveScalar::new(3, 5);\n assert_eq(s.lo, 3);\n assert_eq(s.hi, 5);\n }\n\n #[test]\n fn scalars_with_same_limbs_are_equal() {\n let s = EmbeddedCurveScalar::new(7, 11);\n let t = EmbeddedCurveScalar::new(7, 11);\n assert_eq(s, t);\n }\n\n #[test]\n fn scalars_with_different_limbs_are_unequal() {\n let s = EmbeddedCurveScalar::new(7, 11);\n assert(s != EmbeddedCurveScalar::new(7, 12));\n assert(s != EmbeddedCurveScalar::new(8, 11));\n }\n\n #[test]\n fn scalar_from_field_decomposes_zero() {\n assert_eq(EmbeddedCurveScalar::from_field(0), EmbeddedCurveScalar::new(0, 0));\n }\n\n #[test]\n fn scalar_from_field_decomposes_small_value() {\n let s = EmbeddedCurveScalar::from_field(0x1234567890);\n assert_eq(s, EmbeddedCurveScalar::new(0x1234567890, 0));\n }\n\n #[test]\n fn scalar_from_field_decomposes_two_pow_128() {\n let s = EmbeddedCurveScalar::from_field(TWO_POW_128);\n assert_eq(s, EmbeddedCurveScalar::new(0, 1));\n }\n\n #[test]\n fn scalar_hash_is_consistent_for_equal_scalars() {\n let s = EmbeddedCurveScalar::new(7, 11);\n let t = EmbeddedCurveScalar::new(7, 11);\n assert_eq(hash_scalar(s), hash_scalar(t));\n }\n\n #[test]\n fn scalar_hash_differs_for_distinct_scalars() {\n let s = EmbeddedCurveScalar::new(7, 11);\n assert(hash_scalar(s) != hash_scalar(EmbeddedCurveScalar::new(7, 12)));\n assert(hash_scalar(s) != hash_scalar(EmbeddedCurveScalar::new(8, 11)));\n // Distinguishes (lo, hi) from (hi, lo) - limb order matters.\n assert(hash_scalar(s) != hash_scalar(EmbeddedCurveScalar::new(11, 7)));\n }\n\n #[test]\n fn msm_with_scalar_one_returns_point() {\n let g = EmbeddedCurvePoint::generator();\n let one = EmbeddedCurveScalar::new(1, 0);\n assert_eq(multi_scalar_mul([g], [one]), g);\n }\n\n #[test]\n fn msm_with_scalar_zero_returns_infinity() {\n let g = EmbeddedCurvePoint::generator();\n let zero = EmbeddedCurveScalar::new(0, 0);\n assert(multi_scalar_mul([g], [zero]).is_infinite());\n }\n\n #[test]\n fn msm_with_scalar_two_doubles_point() {\n let g = EmbeddedCurvePoint::generator();\n let two = EmbeddedCurveScalar::new(2, 0);\n assert_eq(multi_scalar_mul([g], [two]), g.double());\n }\n\n #[test]\n fn msm_sums_terms() {\n let g = EmbeddedCurvePoint::generator();\n let one = EmbeddedCurveScalar::new(1, 0);\n assert_eq(multi_scalar_mul([g, g], [one, one]), g.double());\n }\n\n #[test]\n fn msm_with_opposite_terms_cancels() {\n let g = EmbeddedCurvePoint::generator();\n let one = EmbeddedCurveScalar::new(1, 0);\n assert(multi_scalar_mul([g, -g], [one, one]).is_infinite());\n }\n\n #[test]\n fn msm_skips_point_at_infinity() {\n let g = EmbeddedCurvePoint::generator();\n let inf = EmbeddedCurvePoint::point_at_infinity();\n let one = EmbeddedCurveScalar::new(1, 0);\n assert_eq(multi_scalar_mul([inf, g], [one, one]), g);\n }\n\n #[test]\n fn msm_skips_zero_scalar() {\n let g = EmbeddedCurvePoint::generator();\n let one = EmbeddedCurveScalar::new(1, 0);\n let zero = EmbeddedCurveScalar::new(0, 0);\n assert_eq(multi_scalar_mul([g, g], [zero, one]), g);\n }\n\n #[test]\n fn fixed_base_scalar_mul_with_one_returns_generator() {\n let one = EmbeddedCurveScalar::new(1, 0);\n assert_eq(fixed_base_scalar_mul(one), EmbeddedCurvePoint::generator());\n }\n\n #[test]\n fn fixed_base_scalar_mul_with_zero_returns_infinity() {\n let zero = EmbeddedCurveScalar::new(0, 0);\n assert(fixed_base_scalar_mul(zero).is_infinite());\n }\n\n #[test]\n fn fixed_base_scalar_mul_matches_msm_on_generator() {\n let s = EmbeddedCurveScalar::new(2, 0);\n assert_eq(\n fixed_base_scalar_mul(s),\n multi_scalar_mul([EmbeddedCurvePoint::generator()], [s]),\n );\n }\n}\n"
|
|
178
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/delivery/handshake.nr",
|
|
179
|
+
"source": "use crate::protocol::point::EmbeddedCurvePoint;\nuse crate::protocol::traits::{Deserialize, Serialize};\n\nuse crate::{\n context::PrivateContext,\n ephemeral::EphemeralArray,\n messages::{delivery::OnchainDeliveryMode, processing::provided_secret::ProvidedSecret},\n oracle::{call_utility_function::call_utility_function, shared_secret::get_shared_secrets},\n protocol::{\n abis::function_selector::FunctionSelector, address::AztecAddress, hash::sha256_to_field, traits::ToField,\n },\n standard_addresses::STANDARD_HANDSHAKE_REGISTRY_ADDRESS,\n};\n\n/// Page size for handshake discovery pagination.\npub global MAX_HANDSHAKES_PER_PAGE: u32 = 32;\n\n/// A handshake discovered during sync: the sender's ephemeral public key.\n#[derive(Deserialize, Eq, Serialize)]\npub struct DiscoveredHandshake {\n pub eph_pk: EmbeddedCurvePoint,\n}\n\n/// A paginated response of discovered handshakes.\n#[derive(Deserialize, Serialize)]\npub struct HandshakePage {\n pub items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE>,\n pub total_count: u32,\n}\n\n/// The app-siloed handshake secrets the registry returns for a `(sender, recipient)` pair.\n#[derive(Deserialize, Eq, Serialize)]\npub struct AppSiloedHandshakeSecrets {\n /// The app-siloed shared secret, used to derive the recipient's discovery tag. The recipient can reconstruct\n /// it from the handshake's public ephemeral key via ECDH.\n pub shared: Field,\n /// The app-siloed sender-only secret, folded into the constrained-delivery sequence nullifier so only the\n /// sender can advance a sequence. The recipient cannot reconstruct it: it derives from a random secret stored\n /// only in the sender's handshake note and never transmitted.\n pub sender_only: Field,\n}\n\npub(crate) global PROVIDED_SECRETS_ARRAY_BASE_SLOT: Field =\n sha256_to_field(\"AZTEC_NR::PROVIDED_SECRETS_ARRAY_BASE_SLOT\".as_bytes());\n\nglobal HANDSHAKE_EPH_PKS_SLOT: Field = sha256_to_field(\"AZTEC_NR::HANDSHAKE_EPH_PKS_SLOT\".as_bytes());\n\n// The helper cannot import the handshake registry interface because the registry contract depends on aztec-nr. These\n// selector constants pin the registry ABI surface this library calls. The registry's test suite compares them against\n// its macro-generated `HandshakeRegistry::at(...).method(...).selector` values so signature drift fails in tests.\npub global GET_APP_SILOED_SECRETS_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"get_app_siloed_secrets((Field),(Field))\") };\npub global NON_INTERACTIVE_HANDSHAKE_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"non_interactive_handshake((Field),(Field))\") };\npub global INTERACTIVE_HANDSHAKE_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"interactive_handshake((Field),(Field))\") };\npub global GET_NON_INTERACTIVE_HANDSHAKES_SELECTOR: FunctionSelector =\n comptime { FunctionSelector::from_signature(\"get_non_interactive_handshakes((Field),u32)\") };\n\n/// Reads the existing app-siloed handshake secrets for `(sender, recipient)` from the registry.\n///\n/// Returns `None` when no handshake has been registered for the pair yet, in which case the caller decides how to\n/// source a tagging secret (see [`super::tag::derive_log_tag`]).\n///\n/// ## Batching\n///\n/// This reads committed state, so within a single transaction multiple sends cannot see each other's pending\n/// handshake. A brand-new recipient therefore needs one landed transaction to establish the handshake before further\n/// sends can be batched onto it.\npub(crate) unconstrained fn get_existing_app_siloed_handshake_secrets(\n registry: AztecAddress,\n sender: AztecAddress,\n recipient: AztecAddress,\n) -> Option<AppSiloedHandshakeSecrets> {\n let returns = call_utility_function(\n registry,\n GET_APP_SILOED_SECRETS_SELECTOR,\n [sender.to_field(), recipient.to_field()],\n );\n Deserialize::deserialize(returns)\n}\n\n/// Establishes a non-interactive handshake for `(sender, recipient)` and returns its app-siloed secrets.\n///\n/// The registry inserts a fresh handshake note and returns the app-siloed secrets. The constrained return value is the\n/// source of truth for the secrets, so constrained delivery anchoring a freshly bootstrapped handshake needs no\n/// separate call to the registry's `validate_handshake`.\n///\n/// Any handshake already registered for the pair is overwritten.\npub(crate) fn create_non_interactive_handshake(\n context: &mut PrivateContext,\n registry: AztecAddress,\n sender: AztecAddress,\n recipient: AztecAddress,\n) -> AppSiloedHandshakeSecrets {\n context\n .call_private_function(registry, NON_INTERACTIVE_HANDSHAKE_SELECTOR, [sender.to_field(), recipient.to_field()])\n .get_preimage()\n}\n\n/// Establishes an interactive handshake for `(sender, recipient)` and returns its app-siloed secrets.\n///\n/// As with [`create_non_interactive_handshake`], the constrained return value is the source of truth for the\n/// secrets, so constrained delivery anchoring a freshly bootstrapped handshake needs no separate call to the\n/// registry's `validate_handshake`.\n///\n/// Any handshake already registered for the pair is overwritten.\npub(crate) fn create_interactive_handshake(\n context: &mut PrivateContext,\n registry: AztecAddress,\n sender: AztecAddress,\n recipient: AztecAddress,\n) -> AppSiloedHandshakeSecrets {\n context\n .call_private_function(registry, INTERACTIVE_HANDSHAKE_SELECTOR, [sender.to_field(), recipient.to_field()])\n .get_preimage()\n}\n\n/// Fetches discovered handshakes from the HandshakeRegistry and derives app-siloed tagging secrets for each,\n/// returning them so that [`get_pending_tagged_logs`](crate::oracle::message_processing::get_pending_tagged_logs)\n/// searches for logs tagged with these secrets.\npub(crate) unconstrained fn get_handshake_secrets(\n contract_address: AztecAddress,\n scope: AztecAddress,\n) -> EphemeralArray<ProvidedSecret> {\n let provided_secrets = EphemeralArray::<ProvidedSecret>::empty_at(PROVIDED_SECRETS_ARRAY_BASE_SLOT);\n\n let eph_pks: EphemeralArray<EmbeddedCurvePoint> = EphemeralArray::empty_at(HANDSHAKE_EPH_PKS_SLOT);\n\n let mut page_offset: u32 = 0;\n let mut has_more = true;\n while has_more {\n let page = fetch_handshake_page(scope, page_offset);\n\n for j in 0..page.items.len() {\n eph_pks.push(page.items.get(j).eph_pk);\n }\n\n page_offset += page.items.len();\n has_more = page_offset < page.total_count;\n }\n\n if eph_pks.len() > 0 {\n let secrets = get_shared_secrets(scope, eph_pks, contract_address);\n for j in 0..secrets.len() {\n let secret = secrets.get(j);\n // Handshakes are mode-agnostic; emit one entry per on-chain tag domain for PXE to scan.\n provided_secrets.push(ProvidedSecret { secret, mode: OnchainDeliveryMode::onchain_unconstrained() });\n provided_secrets.push(ProvidedSecret { secret, mode: OnchainDeliveryMode::onchain_constrained() });\n }\n }\n\n provided_secrets\n}\n\n/// Calls the HandshakeRegistry's `get_non_interactive_handshakes` utility function and deserializes the response.\nunconstrained fn fetch_handshake_page(recipient: AztecAddress, page_offset: u32) -> HandshakePage {\n let args: [Field; 2] = [recipient.to_field(), page_offset as Field];\n let response = call_utility_function(\n STANDARD_HANDSHAKE_REGISTRY_ADDRESS,\n GET_NON_INTERACTIVE_HANDSHAKES_SELECTOR,\n args,\n );\n HandshakePage::deserialize(response)\n}\n\nmod test {\n use crate::ephemeral::EphemeralArray;\n use crate::messages::delivery::handshake::{\n DiscoveredHandshake, get_handshake_secrets, HandshakePage, MAX_HANDSHAKES_PER_PAGE,\n };\n use crate::messages::delivery::OnchainDeliveryMode;\n use crate::protocol::{address::AztecAddress, traits::{FromField, Serialize}};\n use crate::test::helpers::test_environment::TestEnvironment;\n use crate::utils::point::point_from_x_coord;\n use std::test::OracleMock;\n\n #[test]\n unconstrained fn get_handshake_secrets_returns_secrets_from_single_page() {\n let env = TestEnvironment::new();\n let scope = AztecAddress::from_field(1);\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n let pk_a = point_from_x_coord(1).unwrap();\n let pk_b = point_from_x_coord(2).unwrap();\n\n let mut items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE> = BoundedVec::new();\n items.push(DiscoveredHandshake { eph_pk: pk_a });\n items.push(DiscoveredHandshake { eph_pk: pk_b });\n let page = HandshakePage { items, total_count: 2 };\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page.serialize());\n\n let secret_a: Field = 111;\n let secret_b: Field = 222;\n mock_get_shared_secrets([secret_a, secret_b]);\n\n let secrets = get_handshake_secrets(contract_address, scope);\n\n assert_eq(secrets.len(), 4);\n assert_eq(secrets.get(0).secret, secret_a);\n assert(secrets.get(0).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(1).secret, secret_a);\n assert(secrets.get(1).mode == OnchainDeliveryMode::onchain_constrained());\n assert_eq(secrets.get(2).secret, secret_b);\n assert(secrets.get(2).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(3).secret, secret_b);\n assert(secrets.get(3).mode == OnchainDeliveryMode::onchain_constrained());\n });\n }\n\n #[test]\n unconstrained fn get_handshake_secrets_fetches_multiple_pages() {\n let env = TestEnvironment::new();\n let scope = AztecAddress::from_field(1);\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n let pk_a = point_from_x_coord(1).unwrap();\n let pk_b = point_from_x_coord(2).unwrap();\n let pk_c = point_from_x_coord(8).unwrap();\n\n let mut page_1_items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE> = BoundedVec::new();\n page_1_items.push(DiscoveredHandshake { eph_pk: pk_a });\n page_1_items.push(DiscoveredHandshake { eph_pk: pk_b });\n let page_1 = HandshakePage { items: page_1_items, total_count: 3 };\n\n let mut page_2_items: BoundedVec<DiscoveredHandshake, MAX_HANDSHAKES_PER_PAGE> = BoundedVec::new();\n page_2_items.push(DiscoveredHandshake { eph_pk: pk_c });\n let page_2 = HandshakePage { items: page_2_items, total_count: 3 };\n\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page_1.serialize()).times(1);\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page_2.serialize()).times(1);\n\n mock_get_shared_secrets([111, 222, 333]);\n\n let secrets = get_handshake_secrets(contract_address, scope);\n assert_eq(secrets.len(), 6);\n assert_eq(secrets.get(0).secret, 111);\n assert(secrets.get(0).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(1).secret, 111);\n assert(secrets.get(1).mode == OnchainDeliveryMode::onchain_constrained());\n assert_eq(secrets.get(2).secret, 222);\n assert(secrets.get(2).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(3).secret, 222);\n assert(secrets.get(3).mode == OnchainDeliveryMode::onchain_constrained());\n assert_eq(secrets.get(4).secret, 333);\n assert(secrets.get(4).mode == OnchainDeliveryMode::onchain_unconstrained());\n assert_eq(secrets.get(5).secret, 333);\n assert(secrets.get(5).mode == OnchainDeliveryMode::onchain_constrained());\n });\n }\n\n #[test]\n unconstrained fn get_handshake_secrets_returns_empty_when_scope_keys_not_held() {\n let env = TestEnvironment::new();\n let scope = AztecAddress::from_field(1);\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n let mut items = BoundedVec::new();\n items.push(DiscoveredHandshake { eph_pk: point_from_x_coord(1).unwrap() });\n let page = HandshakePage { items, total_count: 1 };\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(page.serialize());\n\n let empty: [Field; 0] = [];\n mock_get_shared_secrets(empty);\n\n let secrets = get_handshake_secrets(contract_address, scope);\n assert_eq(secrets.len(), 0);\n });\n }\n\n unconstrained fn mock_get_shared_secrets<let N: u32>(response_values: [Field; N]) {\n let response_slot: Field = 99;\n let response_array: EphemeralArray<Field> = EphemeralArray::at(response_slot);\n for value in response_values {\n response_array.push(value);\n }\n let _ = OracleMock::mock(\"aztec_utl_getSharedSecrets\").returns(response_slot);\n }\n}\n"
|
|
434
180
|
},
|
|
435
181
|
"140": {
|
|
436
182
|
"function_locations": [
|
|
@@ -459,7 +205,7 @@
|
|
|
459
205
|
"start": 13875
|
|
460
206
|
}
|
|
461
207
|
],
|
|
462
|
-
"path": "/home/
|
|
208
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/discovery/mod.nr",
|
|
463
209
|
"source": "use crate::ephemeral::EphemeralArray;\nuse crate::logging::{aztecnr_debug_log, aztecnr_debug_log_format, aztecnr_warn_log_format};\nuse crate::messages::{\n delivery::handshake::{get_handshake_secrets, PROVIDED_SECRETS_ARRAY_BASE_SLOT},\n processing::provided_secret::ProvidedSecret,\n};\nuse crate::partial_notes;\nuse crate::protocol::address::AztecAddress;\n\npub(crate) mod nonce_discovery;\npub(crate) mod private_events;\npub mod private_notes;\npub mod process_message;\n\nuse crate::{\n messages::{\n discovery::process_message::process_message_ciphertext,\n encoding::MAX_MESSAGE_CONTENT_LEN,\n logs::note::MAX_NOTE_PACKED_LEN,\n processing::{\n offchain::OffchainInboxSync, OffchainMessageWithTx, pending_tagged_log::PendingTaggedLog, ResolvedTx,\n validate_and_store_enqueued_notes_and_events,\n },\n },\n oracle::message_processing,\n utils::array,\n};\n\npub struct NoteHashAndNullifier {\n /// The result of [`crate::note::note_interface::NoteHash::compute_note_hash`].\n pub note_hash: Field,\n /// The result of [`crate::note::note_interface::NoteHash::compute_nullifier_unconstrained`].\n ///\n /// This value is unconstrained, as all of message discovery is unconstrained. It is `None` if the nullifier\n /// cannot be computed (e.g. because the nullifier hiding key is not available).\n pub inner_nullifier: Option<Field>,\n}\n\n/// A contract's way of computing note hashes.\n///\n/// Each contract in the network is free to compute their note's hash as they see fit - the hash function itself is not\n/// enshrined or standardized. Some aztec-nr functions however do need to know the details of this computation (e.g.\n/// when finding new notes), which is what this type represents.\n///\n/// This function takes a note's packed content, storage slot, note type ID, address of the emitting contract and\n/// randomness, and attempts to compute its inner note hash (not siloed by address nor uniqued by nonce).\n///\n/// ## Transient Notes\n///\n/// This function is meant to always be used on **settled** notes, i.e. those that have been inserted into the trees\n/// and for which the nonce is known. It is never invoked in the context of a transient note, as those are not involved\n/// in message processing.\n///\n/// ## Automatic Implementation\n///\n/// The [`[#aztec]`](crate::macros::aztec::aztec) macro automatically creates a correct implementation of this function\n/// for each contract by inspecting all note types in use and the storage layout. This injected function is a\n/// `#[contract_library_method]` called `_compute_note_hash`, and it looks something like this:\n///\n/// ```noir\n/// |packed_note, owner, storage_slot, note_type_id, _contract_address, randomness| {\n/// if note_type_id == MyNoteType::get_id() {\n/// if packed_note.len() != MY_NOTE_TYPE_SERIALIZATION_LENGTH {\n/// Option::none()\n/// } else {\n/// let note = MyNoteType::unpack(aztec::utils::array::subarray(packed_note.storage(), 0));\n/// Option::some(note.compute_note_hash(owner, storage_slot, randomness))\n/// }\n/// } else if note_type_id == MyOtherNoteType::get_id() {\n/// ... // Similar to above but calling MyOtherNoteType::unpack\n/// } else {\n/// Option::none() // Unknown note type ID\n/// };\n/// }\n/// ```\npub type ComputeNoteHash = unconstrained fn(/* packed_note */BoundedVec<Field, MAX_NOTE_PACKED_LEN>, /*\n owner */ AztecAddress, /* storage_slot */ Field, /* note_type_id */ Field, /* contract_address */ AztecAddress, /*\nrandomness */ Field) -> Option<Field>;\n\n/// A contract's way of computing note nullifiers.\n///\n/// Like [`ComputeNoteHash`], each contract is free to derive nullifiers as they see fit. This function takes the\n/// unique note hash (used as the note hash for nullification for settled notes), plus the note's packed content and\n/// metadata, and attempts to compute the inner nullifier (not siloed by address).\n///\n/// ## Automatic Implementation\n///\n/// The [`[#aztec]`](crate::macros::aztec::aztec) macro automatically creates a correct implementation of this function\n/// for each contract called `_compute_note_nullifier`. It dispatches on `note_type_id` similarly to\n/// [`ComputeNoteHash`], then calls the note's\n/// [`compute_nullifier_unconstrained`](crate::note::note_interface::NoteHash::compute_nullifier_unconstrained) method.\npub type ComputeNoteNullifier = unconstrained fn(/* unique_note_hash */Field, /* packed_note */ BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n/* owner */ AztecAddress, /* storage_slot */ Field, /* note_type_id */ Field, /* contract_address */ AztecAddress,\n/* randomness */ Field) -> Option<Field>;\n\n/// Deprecated: use [`ComputeNoteHash`] and [`ComputeNoteNullifier`] instead.\npub type ComputeNoteHashAndNullifier<Env> = unconstrained fn[Env](/* packed_note */BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n/* owner */ AztecAddress, /* storage_slot */ Field, /* note_type_id */ Field, /* contract_address */ AztecAddress,\n/*randomness */ Field, /* note nonce */ Field) -> Option<NoteHashAndNullifier>;\n\n/// A handler for custom messages.\n///\n/// Contracts that emit custom messages (i.e. any with a message type that is not in [`crate::messages::msg_type`])\n/// need to use [`crate::macros::AztecConfig::custom_message_handler`] with a function of this type in order to\n/// process them. They will otherwise be **silently ignored**.\npub type CustomMessageHandler = unconstrained fn(\n/* contract_address */AztecAddress,\n/* msg_type_id */ u64,\n/* msg_metadata */ u64,\n/* msg_content */ BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n/* resolved_tx */ ResolvedTx,\n/* scope */ AztecAddress);\n\n/// Custom state synchronization handler.\n///\n/// When set via [`crate::macros::AztecConfig::custom_sync_state`], the generated `sync_state` function will call\n/// this handler instead of [`do_sync_state`]. It receives all of the same parameters, so it can run custom logic\n/// (e.g. fetching and decrypting custom logs) before, after, or instead of calling [`do_sync_state`].\npub type CustomSyncHandler = unconstrained fn(\n/* contract_address */AztecAddress,\n/* compute_note_hash */ ComputeNoteHash,\n/* compute_note_nullifier */ ComputeNoteNullifier,\n/* process_custom_message */ Option<CustomMessageHandler>,\n/* offchain_inbox_sync */ Option<OffchainInboxSync>,\n/* scope */ AztecAddress);\n\n/// Synchronizes the contract's private state with the network.\n///\n/// As blocks are mined, it is possible for a contract's private state to change (e.g. with new notes being created),\n/// but because these changes are private they will be invisible to most actors. This is the function that processes\n/// new transactions in order to discover new notes, events, and other kinds of private state changes.\n///\n/// The private state will be synchronized up to the block that will be used for private transactions (i.e. the anchor\n/// block. This will typically be close to the tip of the chain.\npub unconstrained fn do_sync_state(\n contract_address: AztecAddress,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n process_custom_message: Option<CustomMessageHandler>,\n offchain_inbox_sync: Option<OffchainInboxSync>,\n scope: AztecAddress,\n) {\n let provided_secrets = get_handshake_secrets(contract_address, scope);\n sync_state_with_secrets(\n contract_address,\n compute_note_hash,\n compute_note_nullifier,\n process_custom_message,\n offchain_inbox_sync,\n scope,\n provided_secrets,\n );\n}\n\n/// Variant of [`do_sync_state`] that skips handshake secret discovery. Used by the HandshakeRegistry to avoid\n/// infinite recursion (the registry discovers handshakes for other contracts, not for itself).\npub unconstrained fn do_sync_state_without_handshake_discovery(\n contract_address: AztecAddress,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n process_custom_message: Option<CustomMessageHandler>,\n offchain_inbox_sync: Option<OffchainInboxSync>,\n scope: AztecAddress,\n) {\n let provided_secrets = EphemeralArray::<ProvidedSecret>::empty_at(PROVIDED_SECRETS_ARRAY_BASE_SLOT);\n sync_state_with_secrets(\n contract_address,\n compute_note_hash,\n compute_note_nullifier,\n process_custom_message,\n offchain_inbox_sync,\n scope,\n provided_secrets,\n );\n}\n\nunconstrained fn sync_state_with_secrets(\n contract_address: AztecAddress,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n process_custom_message: Option<CustomMessageHandler>,\n offchain_inbox_sync: Option<OffchainInboxSync>,\n scope: AztecAddress,\n provided_secrets: EphemeralArray<ProvidedSecret>,\n) {\n aztecnr_debug_log!(\"Performing state synchronization\");\n\n let logs = message_processing::get_pending_tagged_logs(scope, provided_secrets);\n logs.for_each(|_i, pending_tagged_log: PendingTaggedLog| {\n if pending_tagged_log.log.len() == 0 {\n aztecnr_warn_log_format!(\"Skipping empty log from tx {0}\")([pending_tagged_log.context.tx_hash]);\n } else {\n aztecnr_debug_log_format!(\"Processing log with tag {0}\")([pending_tagged_log.log.get(0)]);\n\n // We remove the tag from the pending tagged log and process the message ciphertext contained in it.\n let message_ciphertext = array::subbvec(pending_tagged_log.log, 1);\n\n process_message_ciphertext(\n contract_address,\n compute_note_hash,\n compute_note_nullifier,\n process_custom_message,\n message_ciphertext,\n pending_tagged_log.context,\n scope,\n );\n }\n });\n\n if offchain_inbox_sync.is_some() {\n let msgs = offchain_inbox_sync.unwrap()(contract_address, scope);\n msgs.for_each(|_i, msg: OffchainMessageWithTx| {\n process_message_ciphertext(\n contract_address,\n compute_note_hash,\n compute_note_nullifier,\n process_custom_message,\n msg.message_ciphertext,\n msg.resolved_tx,\n scope,\n );\n });\n }\n\n // Then we process all pending partial notes, regardless of whether they were found in the current or previous\n // executions.\n partial_notes::sync(\n contract_address,\n compute_note_hash,\n compute_note_nullifier,\n scope,\n );\n\n // Finally we validate all notes and events that were found as part of the previous processes, resulting in them\n // being added to PXE's database and retrievable via oracles (get_notes) and our TS API (PXE::getPrivateEvents).\n validate_and_store_enqueued_notes_and_events(scope);\n}\n\nmod test {\n use crate::ephemeral::EphemeralArray;\n use crate::messages::{\n delivery::handshake::HandshakePage,\n discovery::{CustomMessageHandler, do_sync_state},\n logs::note::MAX_NOTE_PACKED_LEN,\n processing::{offchain::OffchainInboxSync, pending_tagged_log::PendingTaggedLog},\n };\n use crate::protocol::{address::AztecAddress, traits::Serialize};\n use crate::test::helpers::test_environment::TestEnvironment;\n use std::test::OracleMock;\n\n #[test]\n unconstrained fn do_sync_state_does_not_panic_on_empty_logs() {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n\n let contract_address = AztecAddress { inner: 0xdeadbeef };\n\n env.utility_context_at(contract_address, |_| {\n // get_handshake_secrets calls the HandshakeRegistry during sync; return an empty page so\n // no tagging secrets are produced.\n let empty_page = HandshakePage { items: BoundedVec::new(), total_count: 0 };\n let _ = OracleMock::mock(\"aztec_utl_callUtilityFunction\").returns(empty_page.serialize());\n\n // Mock the oracle call to return a known base slot, then populate an ephemeral\n // array at that slot so do_sync_state processes a non-empty log list.\n let base_slot = 42;\n let mock = std::test::OracleMock::mock(\"aztec_utl_getPendingTaggedLogsV2\");\n let _ = mock.returns(base_slot);\n\n let logs: EphemeralArray<PendingTaggedLog> = EphemeralArray::at(base_slot);\n logs.push(PendingTaggedLog { log: BoundedVec::new(), context: std::mem::zeroed() });\n assert_eq(logs.len(), 1);\n\n let no_handler: Option<CustomMessageHandler> = Option::none();\n let no_inbox_sync: Option<OffchainInboxSync> = Option::none();\n do_sync_state(\n contract_address,\n dummy_compute_note_hash,\n dummy_compute_note_nullifier,\n no_handler,\n no_inbox_sync,\n scope,\n );\n\n // Guards against the mocked oracle name going stale: if sync stops calling it, the crafted empty log\n // above is never consumed and the test silently stops covering the empty-payload path.\n assert_eq(mock.times_called(), 1);\n });\n }\n\n unconstrained fn dummy_compute_note_hash(\n _packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n _owner: AztecAddress,\n _storage_slot: Field,\n _note_type_id: Field,\n _contract_address: AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n Option::none()\n }\n\n unconstrained fn dummy_compute_note_nullifier(\n _unique_note_hash: Field,\n _packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n _owner: AztecAddress,\n _storage_slot: Field,\n _note_type_id: Field,\n _contract_address: AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n Option::none()\n }\n}\n"
|
|
464
210
|
},
|
|
465
211
|
"141": {
|
|
@@ -517,7 +263,7 @@
|
|
|
517
263
|
"start": 18937
|
|
518
264
|
}
|
|
519
265
|
],
|
|
520
|
-
"path": "/home/
|
|
266
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/discovery/nonce_discovery.nr",
|
|
521
267
|
"source": "use crate::messages::{discovery::{ComputeNoteHash, ComputeNoteNullifier}, logs::note::MAX_NOTE_PACKED_LEN};\n\nuse crate::logging::{aztecnr_debug_log_format, aztecnr_warn_log_format};\nuse crate::protocol::{\n address::AztecAddress,\n constants::MAX_NOTE_HASHES_PER_TX,\n hash::{compute_note_hash_nonce, compute_siloed_note_hash, compute_unique_note_hash},\n traits::ToField,\n};\n\n/// A struct with the discovered information of a complete note, required for delivery to PXE. Note that this is *not*\n/// the complete note information, since it does not include content, storage slot, etc.\npub(crate) struct DiscoveredNoteInfo {\n pub(crate) note_nonce: Field,\n pub(crate) note_hash: Field,\n pub(crate) inner_nullifier: Field,\n}\n\n/// Searches for note nonces that will result in a note that was emitted in a transaction. While rare, it is possible\n/// for multiple notes to have the exact same packed content and storage slot but different nonces, resulting in\n/// different unique note hashes. Because of this this function returns a *vector* of discovered notes, though in most\n/// cases it will contain a single element.\n///\n/// Due to how nonces are computed, this function requires knowledge of the transaction in which the note was created,\n/// more specifically the list of all unique note hashes in it plus the value of its first nullifier.\npub(crate) unconstrained fn attempt_note_nonce_discovery(\n unique_note_hashes_in_tx: BoundedVec<Field, MAX_NOTE_HASHES_PER_TX>,\n first_nullifier_in_tx: Field,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n contract_address: AztecAddress,\n owner: AztecAddress,\n storage_slot: Field,\n randomness: Field,\n note_type_id: Field,\n packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n) -> BoundedVec<DiscoveredNoteInfo, MAX_NOTE_HASHES_PER_TX> {\n let discovered_notes = &mut BoundedVec::new();\n\n aztecnr_debug_log_format!(\n \"Attempting nonce discovery on {0} potential notes on contract {1} for storage slot {2}\",\n )(\n [unique_note_hashes_in_tx.len() as Field, contract_address.to_field(), storage_slot],\n );\n\n let maybe_note_hash = compute_note_hash(\n packed_note,\n owner,\n storage_slot,\n note_type_id,\n contract_address,\n randomness,\n );\n\n if maybe_note_hash.is_none() {\n aztecnr_warn_log_format!(\n \"Unable to compute note hash for note of id {0} with packed length {1}, skipping nonce discovery\",\n )(\n [note_type_id, packed_note.len() as Field],\n );\n } else {\n let note_hash = maybe_note_hash.unwrap();\n let siloed_note_hash = compute_siloed_note_hash(contract_address, note_hash);\n\n // We need to find nonces (typically just one) that result in the siloed note hash that being uniqued into one\n // of the transaction's effects.\n // The nonce is meant to be derived from the index of the note hash in the transaction effects array. However,\n // due to an issue in the kernels the nonce might actually use any of the possible note hash indices - not\n // necessarily the one that corresponds to the note hash. Hence, we need to try them all.\n for i in 0..MAX_NOTE_HASHES_PER_TX {\n let nonce_for_i = compute_note_hash_nonce(first_nullifier_in_tx, i);\n let unique_note_hash_for_i = compute_unique_note_hash(nonce_for_i, siloed_note_hash);\n\n let matching_notes = bvec_filter(\n unique_note_hashes_in_tx,\n |unique_note_hash_in_tx| unique_note_hash_in_tx == unique_note_hash_for_i,\n );\n if matching_notes.len() > 1 {\n let identical_note_hashes = matching_notes.len();\n // Note that we don't actually check that the note hashes array contains unique values, only that the\n // note we found is unique. We don't expect for this to ever happen (it'd indicate a malicious node or\n // PXE, which are both assumed to be cooperative) so testing for it just in case is unnecessary, but we\n // _do_ need to handle it if we find a duplicate.\n panic(\n f\"Received {identical_note_hashes} identical note hashes for a transaction - these should all be unique\",\n )\n } else if matching_notes.len() == 1 {\n let maybe_inner_nullifier_for_i = compute_note_nullifier(\n unique_note_hash_for_i,\n packed_note,\n owner,\n storage_slot,\n note_type_id,\n contract_address,\n randomness,\n );\n\n if maybe_inner_nullifier_for_i.is_none() {\n // TODO: down the line we want to be able to store notes for which we don't know their nullifier,\n // e.g. notes that belong to someone that is not us (and for which we therefore don't know their\n // associated app-siloed nullifer hiding secret key).\n // https://linear.app/aztec-labs/issue/F-265/store-external-notes\n aztecnr_warn_log_format!(\n \"Unable to compute nullifier of unique note {0} with note type id {1} and owner {2}, skipping PXE insertion\",\n )(\n [unique_note_hash_for_i, note_type_id, owner.to_field()],\n );\n } else {\n // Note that while we did check that the note hash is the preimage of a unique note hash, we\n // perform no validations on the nullifier - we fundamentally cannot, since only the application\n // knows how to compute nullifiers. We simply trust it to have provided the correct one: if it\n // hasn't, then PXE may fail to realize that a given note has been nullified already, and calls to\n // the application could result in invalid transactions (with duplicate nullifiers). This is not a\n // concern because an application already has more direct means of making a call to it fail the\n // transaction.\n discovered_notes.push(\n DiscoveredNoteInfo {\n note_nonce: nonce_for_i,\n note_hash,\n inner_nullifier: maybe_inner_nullifier_for_i.unwrap(),\n },\n );\n }\n // We don't exit the loop - it is possible (though rare) for the exact same note content to be present\n // multiple times in the same transaction with different nonces. This typically doesn't happen due to\n // notes containing random values in order to hide their contents.\n }\n }\n }\n\n *discovered_notes\n}\n\n// There is no BoundedVec::filter in the stdlib, so we use this until that is implemented.\nunconstrained fn bvec_filter<Env, T, let MAX_LEN: u32>(\n bvec: BoundedVec<T, MAX_LEN>,\n filter: fn[Env](T) -> bool,\n) -> BoundedVec<T, MAX_LEN> {\n let filtered = &mut BoundedVec::new();\n\n bvec.for_each(|value| {\n if filter(value) {\n filtered.push(value);\n }\n });\n\n *filtered\n}\n\nmod test {\n use crate::{\n messages::logs::note::MAX_NOTE_PACKED_LEN,\n note::{\n note_interface::{NoteHash, NoteType},\n note_metadata::SettledNoteMetadata,\n utils::compute_note_hash_for_nullification,\n },\n oracle::random::random,\n test::mocks::mock_note::MockNote,\n utils::array,\n };\n\n use crate::protocol::{\n address::AztecAddress,\n hash::{compute_note_hash_nonce, compute_siloed_note_hash, compute_unique_note_hash},\n traits::{FromField, Packable},\n };\n\n use super::attempt_note_nonce_discovery;\n\n // This implementation could be simpler, but this serves as a nice example of the expected flow in a real\n // implementation, and as a sanity check that the interface is sufficient.\n\n unconstrained fn compute_note_hash(\n packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n owner: AztecAddress,\n storage_slot: Field,\n note_type_id: Field,\n _contract_address: AztecAddress,\n randomness: Field,\n ) -> Option<Field> {\n if (note_type_id == MockNote::get_id()) & (packed_note.len() == <MockNote as Packable>::N) {\n let note = MockNote::unpack(array::subarray(packed_note.storage(), 0));\n Option::some(note.compute_note_hash(owner, storage_slot, randomness))\n } else {\n Option::none()\n }\n }\n\n unconstrained fn compute_note_nullifier(\n unique_note_hash: Field,\n packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n owner: AztecAddress,\n _storage_slot: Field,\n note_type_id: Field,\n _contract_address: AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n if (note_type_id == MockNote::get_id()) & (packed_note.len() == <MockNote as Packable>::N) {\n let note = MockNote::unpack(array::subarray(packed_note.storage(), 0));\n note.compute_nullifier_unconstrained(owner, unique_note_hash)\n } else {\n Option::none()\n }\n }\n\n global VALUE: Field = 7;\n global FIRST_NULLIFIER_IN_TX: Field = 47;\n global CONTRACT_ADDRESS: AztecAddress = AztecAddress::from_field(13);\n global OWNER: AztecAddress = AztecAddress::from_field(14);\n global STORAGE_SLOT: Field = 99;\n global RANDOMNESS: Field = 99;\n\n #[test]\n unconstrained fn no_note_hashes() {\n let unique_note_hashes_in_tx = BoundedVec::new();\n let packed_note = BoundedVec::new();\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n packed_note,\n );\n\n assert_eq(discovered_notes.len(), 0);\n }\n\n #[test]\n unconstrained fn failed_hash_computation_is_ignored() {\n let unique_note_hashes_in_tx = BoundedVec::from_array([random()]);\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n |_, _, _, _, _, _| Option::none(),\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::new(),\n );\n\n assert_eq(discovered_notes.len(), 0);\n }\n\n #[test]\n unconstrained fn failed_nullifier_computation_is_ignored() {\n let note_index_in_tx = 2;\n let note_and_data = construct_note(VALUE, note_index_in_tx);\n\n let mut unique_note_hashes_in_tx = BoundedVec::from_array([\n random(), random(), random(), random(), random(), random(), random(),\n ]);\n unique_note_hashes_in_tx.set(note_index_in_tx, note_and_data.unique_note_hash);\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n |_, _, _, _, _, _, _| Option::none(),\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::from_array(note_and_data.note.pack()),\n );\n\n assert_eq(discovered_notes.len(), 0);\n }\n\n struct NoteAndData {\n note: MockNote,\n note_nonce: Field,\n note_hash: Field,\n unique_note_hash: Field,\n inner_nullifier: Field,\n }\n\n unconstrained fn construct_note(value: Field, note_index_in_tx: u32) -> NoteAndData {\n let note_nonce = compute_note_hash_nonce(FIRST_NULLIFIER_IN_TX, note_index_in_tx);\n\n let hinted_note = MockNote::new(value)\n .contract_address(CONTRACT_ADDRESS)\n .owner(OWNER)\n .randomness(RANDOMNESS)\n .storage_slot(STORAGE_SLOT)\n .note_metadata(SettledNoteMetadata::new(note_nonce).into())\n .build_hinted_note();\n let note = hinted_note.note;\n\n let note_hash = note.compute_note_hash(OWNER, STORAGE_SLOT, RANDOMNESS);\n let unique_note_hash = compute_unique_note_hash(\n note_nonce,\n compute_siloed_note_hash(CONTRACT_ADDRESS, note_hash),\n );\n let inner_nullifier = note\n .compute_nullifier_unconstrained(OWNER, compute_note_hash_for_nullification(hinted_note))\n .expect(f\"Could not compute nullifier for note owned by {OWNER}\");\n\n NoteAndData { note, note_nonce, note_hash, unique_note_hash, inner_nullifier }\n }\n\n #[test]\n unconstrained fn single_note() {\n let note_index_in_tx = 2;\n let note_and_data = construct_note(VALUE, note_index_in_tx);\n\n let mut unique_note_hashes_in_tx = BoundedVec::from_array([\n random(), random(), random(), random(), random(), random(), random(),\n ]);\n unique_note_hashes_in_tx.set(note_index_in_tx, note_and_data.unique_note_hash);\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::from_array(note_and_data.note.pack()),\n );\n\n assert_eq(discovered_notes.len(), 1);\n let discovered_note = discovered_notes.get(0);\n\n assert_eq(discovered_note.note_nonce, note_and_data.note_nonce);\n assert_eq(discovered_note.note_hash, note_and_data.note_hash);\n assert_eq(discovered_note.inner_nullifier, note_and_data.inner_nullifier);\n }\n\n #[test]\n unconstrained fn multiple_notes_same_preimage() {\n let first_note_index_in_tx = 3;\n let first_note_and_data = construct_note(VALUE, first_note_index_in_tx);\n\n let second_note_index_in_tx = 5;\n let second_note_and_data = construct_note(VALUE, second_note_index_in_tx);\n\n // Both notes have the same preimage (and therefore packed representation), so both should be found in the same\n // call.\n assert_eq(first_note_and_data.note, second_note_and_data.note);\n let packed_note = first_note_and_data.note.pack();\n\n let mut unique_note_hashes_in_tx = BoundedVec::from_array([\n random(), random(), random(), random(), random(), random(), random(),\n ]);\n unique_note_hashes_in_tx.set(first_note_index_in_tx, first_note_and_data.unique_note_hash);\n unique_note_hashes_in_tx.set(second_note_index_in_tx, second_note_and_data.unique_note_hash);\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::from_array(packed_note),\n );\n\n assert_eq(discovered_notes.len(), 2);\n\n assert(discovered_notes.any(|discovered_note| {\n (discovered_note.note_nonce == first_note_and_data.note_nonce)\n & (discovered_note.note_hash == first_note_and_data.note_hash)\n & (discovered_note.inner_nullifier == first_note_and_data.inner_nullifier)\n }));\n\n assert(discovered_notes.any(|discovered_note| {\n (discovered_note.note_nonce == second_note_and_data.note_nonce)\n & (discovered_note.note_hash == second_note_and_data.note_hash)\n & (discovered_note.inner_nullifier == second_note_and_data.inner_nullifier)\n }));\n }\n\n #[test]\n unconstrained fn single_note_misaligned_nonce() {\n let note_index_in_tx = 2;\n let note_and_data = construct_note(VALUE, note_index_in_tx);\n\n let mut unique_note_hashes_in_tx = BoundedVec::from_array([\n random(), random(), random(), random(), random(), random(), random(),\n ]);\n\n // The note is not at the correct index\n unique_note_hashes_in_tx.set(note_index_in_tx + 1, note_and_data.unique_note_hash);\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::from_array(note_and_data.note.pack()),\n );\n\n assert_eq(discovered_notes.len(), 1);\n let discovered_note = discovered_notes.get(0);\n\n assert_eq(discovered_note.note_nonce, note_and_data.note_nonce);\n assert_eq(discovered_note.note_hash, note_and_data.note_hash);\n assert_eq(discovered_note.inner_nullifier, note_and_data.inner_nullifier);\n }\n\n #[test]\n unconstrained fn single_note_nonce_with_index_past_note_hashes_in_tx() {\n let mut unique_note_hashes_in_tx = BoundedVec::from_array([\n random(), random(), random(), random(), random(), random(), random(),\n ]);\n\n // The nonce is computed with an index that does not exist in the tx\n let note_index_in_tx = unique_note_hashes_in_tx.len() + 5;\n let note_and_data = construct_note(VALUE, note_index_in_tx);\n\n // The note is inserted at an arbitrary index - its true index is out of the array's bounds\n unique_note_hashes_in_tx.set(2, note_and_data.unique_note_hash);\n\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::from_array(note_and_data.note.pack()),\n );\n\n assert_eq(discovered_notes.len(), 1);\n let discovered_note = discovered_notes.get(0);\n\n assert_eq(discovered_note.note_nonce, note_and_data.note_nonce);\n assert_eq(discovered_note.note_hash, note_and_data.note_hash);\n assert_eq(discovered_note.inner_nullifier, note_and_data.inner_nullifier);\n }\n\n #[test(should_fail_with = \"identical note hashes for a transaction\")]\n unconstrained fn duplicate_unique_note_hashes() {\n let note_index_in_tx = 2;\n let note_and_data = construct_note(VALUE, note_index_in_tx);\n\n let mut unique_note_hashes_in_tx = BoundedVec::from_array([\n random(), random(), random(), random(), random(), random(), random(),\n ]);\n\n // The same unique note hash is present in two indices in the array, which is not allowed. Note that we don't\n // test all note hashes for uniqueness, only those that we actually find.\n unique_note_hashes_in_tx.set(note_index_in_tx, note_and_data.unique_note_hash);\n unique_note_hashes_in_tx.set(note_index_in_tx + 1, note_and_data.unique_note_hash);\n\n let _ = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n FIRST_NULLIFIER_IN_TX,\n compute_note_hash,\n compute_note_nullifier,\n CONTRACT_ADDRESS,\n OWNER,\n STORAGE_SLOT,\n RANDOMNESS,\n MockNote::get_id(),\n BoundedVec::from_array(note_and_data.note.pack()),\n );\n }\n}\n"
|
|
522
268
|
},
|
|
523
269
|
"142": {
|
|
@@ -527,7 +273,7 @@
|
|
|
527
273
|
"start": 547
|
|
528
274
|
}
|
|
529
275
|
],
|
|
530
|
-
"path": "/home/
|
|
276
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/discovery/private_events.nr",
|
|
531
277
|
"source": "use crate::{\n event::event_interface::compute_private_serialized_event_commitment,\n logging::aztecnr_warn_log_format,\n messages::{\n encoding::MAX_MESSAGE_CONTENT_LEN, logs::event::decode_private_event_message,\n processing::enqueue_event_for_validation,\n },\n};\nuse crate::protocol::{address::AztecAddress, traits::ToField};\n\npub(crate) unconstrained fn process_private_event_msg(\n contract_address: AztecAddress,\n msg_metadata: u64,\n msg_content: BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n tx_hash: Field,\n) {\n let decoded = decode_private_event_message(msg_metadata, msg_content);\n\n if decoded.is_some() {\n let (event_type_id, randomness, serialized_event) = decoded.unwrap();\n\n let event_commitment =\n compute_private_serialized_event_commitment(serialized_event, randomness, event_type_id.to_field());\n\n enqueue_event_for_validation(\n contract_address,\n event_type_id,\n randomness,\n serialized_event,\n event_commitment,\n tx_hash,\n );\n } else {\n aztecnr_warn_log_format!(\n \"Could not decode private event message from tx {0}, ignoring\",\n )(\n [tx_hash],\n );\n }\n}\n"
|
|
532
278
|
},
|
|
533
279
|
"143": {
|
|
@@ -541,7 +287,7 @@
|
|
|
541
287
|
"start": 3612
|
|
542
288
|
}
|
|
543
289
|
],
|
|
544
|
-
"path": "/home/
|
|
290
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/discovery/private_notes.nr",
|
|
545
291
|
"source": "use crate::{\n logging::{aztecnr_debug_log_format, aztecnr_warn_log_format},\n messages::{\n discovery::{ComputeNoteHash, ComputeNoteNullifier, nonce_discovery::attempt_note_nonce_discovery},\n encoding::MAX_MESSAGE_CONTENT_LEN,\n logs::note::{decode_private_note_message, MAX_NOTE_PACKED_LEN},\n processing::enqueue_note_for_validation,\n },\n protocol::{address::AztecAddress, constants::MAX_NOTE_HASHES_PER_TX, traits::ToField},\n};\n\n/// Processes a private note message, attempting to discover and enqueue any notes it contains.\n///\n/// For each note recovered from the message whose computed note hash matches a unique note hash in the transaction,\n/// a [`NoteValidationRequest`](crate::messages::processing::NoteValidationRequest) is pushed onto the ephemeral array\n/// at `NOTE_VALIDATION_REQUESTS_ARRAY_BASE_SLOT` via\n/// [`enqueue_note_for_validation`](crate::messages::processing::enqueue_note_for_validation). PXE later drains this\n/// array during `validate_and_store_enqueued_notes_and_events`, after which the notes are retrievable via `get_notes`.\n///\n/// Messages that fail to decode, or whose computed note hash matches nothing in the transaction, are discarded\n/// (with a debug or warning log respectively) and produce no validation requests. Decode failures are not treated\n/// as errors since messages may originate from malicious senders and we don't want them to be able to brick message\n/// processing.\n///\n/// ## Use Cases\n///\n/// This function is invoked automatically by aztec-nr when handling messages with the built-in private note type id,\n/// so contracts do not normally need to call it directly. It is exposed for use by custom message handlers (see\n/// [`CustomMessageHandler`](crate::messages::discovery::CustomMessageHandler)) that might want to use the standard\n/// note message processing pipeline while extending it with custom logic.\npub unconstrained fn process_private_note_msg(\n contract_address: AztecAddress,\n tx_hash: Field,\n unique_note_hashes_in_tx: BoundedVec<Field, MAX_NOTE_HASHES_PER_TX>,\n first_nullifier_in_tx: Field,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n msg_metadata: u64,\n msg_content: BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n) {\n let decoded = decode_private_note_message(msg_metadata, msg_content);\n\n if decoded.is_some() {\n let (note_type_id, owner, storage_slot, randomness, packed_note) = decoded.unwrap();\n\n attempt_note_discovery(\n contract_address,\n tx_hash,\n unique_note_hashes_in_tx,\n first_nullifier_in_tx,\n compute_note_hash,\n compute_note_nullifier,\n owner,\n storage_slot,\n randomness,\n note_type_id,\n packed_note,\n );\n } else {\n aztecnr_warn_log_format!(\n \"Could not decode private note message from tx {0}, ignoring\",\n )(\n [tx_hash],\n );\n }\n}\n\n/// Attempts discovery of a note given information about its contents and the transaction in which it is suspected the\n/// note was created.\nunconstrained fn attempt_note_discovery(\n contract_address: AztecAddress,\n tx_hash: Field,\n unique_note_hashes_in_tx: BoundedVec<Field, MAX_NOTE_HASHES_PER_TX>,\n first_nullifier_in_tx: Field,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n owner: AztecAddress,\n storage_slot: Field,\n randomness: Field,\n note_type_id: Field,\n packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n) {\n let discovered_notes = attempt_note_nonce_discovery(\n unique_note_hashes_in_tx,\n first_nullifier_in_tx,\n compute_note_hash,\n compute_note_nullifier,\n contract_address,\n owner,\n storage_slot,\n randomness,\n note_type_id,\n packed_note,\n );\n\n if discovered_notes.len() == 0 {\n // A private note message that results in no discovered notes means none of the computed note hashes matched\n // any unique note hash in the transaction. This could indicate a malformed or malicious message (e.g. a sender\n // providing bogus note content).\n aztecnr_warn_log_format!(\n \"Discarding private note message from tx {0} for contract {1}: no matching note hash found in the tx\",\n )(\n [tx_hash, contract_address.to_field()],\n );\n } else {\n aztecnr_debug_log_format!(\n \"Discovered {0} notes from a private message for contract {1}\",\n )(\n [discovered_notes.len() as Field, contract_address.to_field()],\n );\n }\n\n discovered_notes.for_each(|discovered_note| {\n enqueue_note_for_validation(\n contract_address,\n owner,\n storage_slot,\n randomness,\n discovered_note.note_nonce,\n packed_note,\n discovered_note.note_hash,\n discovered_note.inner_nullifier,\n tx_hash,\n );\n });\n}\n"
|
|
546
292
|
},
|
|
547
293
|
"144": {
|
|
@@ -555,7 +301,7 @@
|
|
|
555
301
|
"start": 2851
|
|
556
302
|
}
|
|
557
303
|
],
|
|
558
|
-
"path": "/home/
|
|
304
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/discovery/process_message.nr",
|
|
559
305
|
"source": "use crate::messages::{\n discovery::{\n ComputeNoteHash, ComputeNoteNullifier, CustomMessageHandler, private_events::process_private_event_msg,\n private_notes::process_private_note_msg,\n },\n encoding::{decode_message, MESSAGE_CIPHERTEXT_LEN, MESSAGE_PLAINTEXT_LEN},\n encryption::{aes128::AES128, message_encryption::MessageEncryption},\n msg_type::{\n MIN_CUSTOM_MSG_TYPE_ID, PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID, PRIVATE_EVENT_MSG_TYPE_ID, PRIVATE_NOTE_MSG_TYPE_ID,\n },\n processing::ResolvedTx,\n};\n\nuse crate::logging::{aztecnr_debug_log, aztecnr_warn_log_format};\nuse crate::partial_notes::process_partial_note_private_msg;\nuse crate::protocol::address::AztecAddress;\n\n/// Processes a message that can contain notes, partial notes, or events.\n///\n/// Notes result in nonce discovery being performed prior to delivery, which requires knowledge of the transaction hash\n/// in which the notes would've been created (typically the same transaction in which the log was emitted), along with\n/// the list of unique note hashes in said transaction and the `compute_note_hash` and `compute_note_nullifier`\n/// functions. Once discovered, the notes are enqueued for validation.\n///\n/// Partial notes result in a pending partial note entry being stored in a PXE capsule, which will later be retrieved\n/// to search for the note's completion public log.\n///\n/// Events are processed by computing an event commitment from the serialized event data and its randomness field, then\n/// enqueueing the event data and commitment for validation.\npub unconstrained fn process_message_ciphertext(\n contract_address: AztecAddress,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n process_custom_message: Option<CustomMessageHandler>,\n message_ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n resolved_tx: ResolvedTx,\n recipient: AztecAddress,\n) {\n let message_plaintext_option = AES128::decrypt(message_ciphertext, recipient, contract_address);\n\n if message_plaintext_option.is_some() {\n process_message_plaintext(\n contract_address,\n compute_note_hash,\n compute_note_nullifier,\n process_custom_message,\n message_plaintext_option.unwrap(),\n resolved_tx,\n recipient,\n );\n } else {\n aztecnr_warn_log_format!(\"Could not decrypt message ciphertext from tx {0}, ignoring\")([resolved_tx.tx_hash]);\n }\n}\n\npub(crate) unconstrained fn process_message_plaintext(\n contract_address: AztecAddress,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n process_custom_message: Option<CustomMessageHandler>,\n message_plaintext: BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>,\n resolved_tx: ResolvedTx,\n recipient: AztecAddress,\n) {\n // The first thing to do after decrypting the message is to determine what type of message we're processing. We\n // have 3 message types: private notes, partial notes and events.\n\n // We decode the message to obtain the message type id, metadata and content.\n let decoded = decode_message(message_plaintext);\n\n if decoded.is_some() {\n let (msg_type_id, msg_metadata, msg_content) = decoded.unwrap();\n\n if msg_type_id == PRIVATE_NOTE_MSG_TYPE_ID {\n aztecnr_debug_log!(\"Processing private note msg\");\n\n process_private_note_msg(\n contract_address,\n resolved_tx.tx_hash,\n resolved_tx.unique_note_hashes_in_tx,\n resolved_tx.first_nullifier_in_tx,\n compute_note_hash,\n compute_note_nullifier,\n msg_metadata,\n msg_content,\n );\n } else if msg_type_id == PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID {\n aztecnr_debug_log!(\"Processing partial note private msg\");\n\n process_partial_note_private_msg(\n contract_address,\n msg_metadata,\n msg_content,\n resolved_tx,\n recipient,\n );\n } else if msg_type_id == PRIVATE_EVENT_MSG_TYPE_ID {\n aztecnr_debug_log!(\"Processing private event msg\");\n\n process_private_event_msg(\n contract_address,\n msg_metadata,\n msg_content,\n resolved_tx.tx_hash,\n );\n } else if msg_type_id < MIN_CUSTOM_MSG_TYPE_ID {\n // The message type ID falls in the range reserved for aztec.nr built-in types but wasn't matched above.\n // This most likely means the message is malformed or a custom message was incorrectly assigned a reserved\n // ID. Custom message types must use IDs allocated via `custom_msg_type_id`.\n aztecnr_warn_log_format!(\n \"Message type ID {0} is in the reserved range but is not recognized, ignoring. See https://docs.aztec.network/errors/3\",\n )(\n [msg_type_id as Field],\n );\n } else if process_custom_message.is_some() {\n process_custom_message.unwrap()(\n contract_address,\n msg_type_id,\n msg_metadata,\n msg_content,\n resolved_tx,\n recipient,\n );\n } else {\n // A custom message was received but no handler is configured. This likely means the contract emits custom\n // messages but forgot to register a handler via `AztecConfig::custom_message_handler`.\n aztecnr_warn_log_format!(\n \"Received custom message with type id {0} but no handler is configured, ignoring. See https://docs.aztec.network/errors/2\",\n )(\n [msg_type_id as Field],\n );\n }\n } else {\n aztecnr_warn_log_format!(\"Could not decode message plaintext from tx {0}, ignoring\")([resolved_tx.tx_hash]);\n }\n}\n"
|
|
560
306
|
},
|
|
561
307
|
"145": {
|
|
@@ -617,7 +363,7 @@
|
|
|
617
363
|
"start": 13280
|
|
618
364
|
}
|
|
619
365
|
],
|
|
620
|
-
"path": "/home/
|
|
366
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/encoding.nr",
|
|
621
367
|
"source": "// TODO(#12750): don't make these values assume we're using AES.\nuse crate::protocol::constants::PRIVATE_LOG_CIPHERTEXT_LEN;\nuse crate::utils::array;\n\n// We reassign to the constant here to communicate the distinction between a log and a message. In Aztec.nr, unlike in\n// protocol circuits, we have a concept of a message that can be emitted either as a private log or as an offchain\n// message. Message is a piece of data that is to be eventually delivered to a contract via the `process_message(...)`\n// utility function function that is injected by the #[aztec] macro. Note: PRIVATE_LOG_CIPHERTEXT_LEN is an amount of\n// fields, so MESSAGE_CIPHERTEXT_LEN is the size of the message in fields.\npub global MESSAGE_CIPHERTEXT_LEN: u32 = PRIVATE_LOG_CIPHERTEXT_LEN;\n\n// TODO(#12750): The global variables below should not be here as they are AES128 specific.\n// The header plaintext is 2 bytes (ciphertext length), padded to the 16-byte AES block size by PKCS#7.\npub(crate) global HEADER_CIPHERTEXT_SIZE_IN_BYTES: u32 = 16;\n// AES PKCS#7 always adds at least one byte of padding. Since each plaintext field is 32 bytes (a multiple of the\n// 16-byte AES block size), a full 16-byte padding block is always appended.\npub(crate) global AES128_PKCS7_EXPANSION_IN_BYTES: u32 = 16;\n\npub global EPH_PK_X_SIZE_IN_FIELDS: u32 = 1;\n\n// (15 - 1) * 31 - 16 - 16 = 402. Note: We multiply by 31 because ciphertext bytes are stored in fields using\n// encode_bytes_as_fields, which packs 31 bytes per field (since a Field is ~254 bits and can safely store 31 whole\n// bytes).\npub(crate) global MESSAGE_PLAINTEXT_SIZE_IN_BYTES: u32 = (MESSAGE_CIPHERTEXT_LEN - EPH_PK_X_SIZE_IN_FIELDS) * 31\n - HEADER_CIPHERTEXT_SIZE_IN_BYTES\n - AES128_PKCS7_EXPANSION_IN_BYTES;\n// The plaintext bytes represent Field values that were originally serialized using encode_fields_as_bytes, which\n// converts each Field to 32 bytes. To convert the plaintext bytes back to fields, we divide by 32. 402 / 32 = 12\npub global MESSAGE_PLAINTEXT_LEN: u32 = MESSAGE_PLAINTEXT_SIZE_IN_BYTES / 32;\n\npub global MESSAGE_EXPANDED_METADATA_LEN: u32 = 1;\n\n// The standard message layout is composed of:\n// - an initial field called the 'expanded metadata'\n// - an arbitrary number of fields following that called the 'message content'\n//\n// ```\n// message: [ msg_expanded_metadata, ...msg_content ]\n// ```\n//\n// The expanded metadata itself is interpreted as a u128, of which:\n// - the upper 64 bits are the message type id\n// - the lower 64 bits are called the 'message metadata'\n//\n// ```\n// msg_expanded_metadata: [ msg_type_id | msg_metadata ]\n// <--- 64 bits --->|<--- 64 bits --->\n// ```\n//\n// The meaning of the message metadata and message content depend on the value of the message type id. Note that there\n// is nothing special about the message metadata, it _can_ be considered part of the content. It just has a different\n// name to make it distinct from the message content given that it is not a full field.\n\n/// The maximum length of a message's content, i.e. not including the expanded message metadata.\npub global MAX_MESSAGE_CONTENT_LEN: u32 = MESSAGE_PLAINTEXT_LEN - MESSAGE_EXPANDED_METADATA_LEN;\n\n/// Encodes a message following aztec-nr's standard message encoding. This message can later be decoded with\n/// `decode_message` to retrieve the original values.\n///\n/// - The `msg_type` is an identifier that groups types of messages that are all processed the same way, e.g. private\n/// notes or events. Possible values are defined in `aztec::messages::msg_type`.\n/// - The `msg_metadata` and `msg_content` are the values stored in the message, whose meaning depends on the\n/// `msg_type`. The only special thing about `msg_metadata` that separates it from `msg_content` is that it is a u64\n/// instead of a full Field (due to details of how messages are encoded), allowing applications that can fit values\n/// into this smaller variable to achieve higher data efficiency.\npub fn encode_message<let N: u32>(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; N],\n) -> [Field; (N + MESSAGE_EXPANDED_METADATA_LEN)] {\n std::static_assert(\n msg_content.len() <= MAX_MESSAGE_CONTENT_LEN,\n \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\",\n );\n\n // If MESSAGE_EXPANDED_METADATA_LEN is changed, causing the assertion below to fail, then the destructuring of the\n // message encoding below must be updated as well.\n std::static_assert(\n MESSAGE_EXPANDED_METADATA_LEN == 1,\n \"unexpected value for MESSAGE_EXPANDED_METADATA_LEN\",\n );\n let mut message: [Field; (N + MESSAGE_EXPANDED_METADATA_LEN)] = std::mem::zeroed();\n\n message[0] = to_expanded_metadata(msg_type, msg_metadata);\n for i in 0..msg_content.len() {\n message[MESSAGE_EXPANDED_METADATA_LEN + i] = msg_content[i];\n }\n\n message\n}\n\n/// Decodes a standard aztec-nr message, i.e. one created via `encode_message`, returning the original encoded values.\n///\n/// Returns `None` if the message is empty or has invalid (>128 bit) expanded metadata.\n///\n/// Note that `encode_message` returns a fixed size array while this function takes a `BoundedVec`: this is because\n/// prior to decoding the message type is unknown, and consequentially not known at compile time. If working with\n/// fixed-size messages, consider using `BoundedVec::from_array` to convert them.\npub unconstrained fn decode_message(\n message: BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>,\n) -> Option<(u64, u64, BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>)> {\n Option::some(message)\n .and_then(|message| {\n // If MESSAGE_EXPANDED_METADATA_LEN is changed, causing the assertion below to fail, then the destructuring\n // of the\n // message encoding below must be updated as well.\n std::static_assert(\n MESSAGE_EXPANDED_METADATA_LEN == 1,\n \"unexpected value for MESSAGE_EXPANDED_METADATA_LEN\",\n );\n if message.len() < MESSAGE_EXPANDED_METADATA_LEN {\n Option::none()\n } else {\n Option::some(message.get(0))\n }\n })\n .and_then(|msg_expanded_metadata| from_expanded_metadata(msg_expanded_metadata))\n .map(|(msg_type_id, msg_metadata)| {\n let msg_content = array::subbvec(message, MESSAGE_EXPANDED_METADATA_LEN);\n (msg_type_id, msg_metadata, msg_content)\n })\n}\n\nglobal U64_SHIFT_MULTIPLIER: Field = 2.pow_32(64);\n\nfn to_expanded_metadata(msg_type: u64, msg_metadata: u64) -> Field {\n // We use multiplication instead of bit shifting operations to shift the type bits as bit shift operations are\n // expensive in circuits.\n let type_field: Field = (msg_type as Field) * U64_SHIFT_MULTIPLIER;\n let msg_metadata_field = msg_metadata as Field;\n\n type_field + msg_metadata_field\n}\n\nglobal TWO_POW_128: Field = 2.pow_32(128);\n\n/// Unpacks expanded metadata into (msg_type, msg_metadata). Returns `None` if `input >= 2^128`.\nfn from_expanded_metadata(input: Field) -> Option<(u64, u64)> {\n if input.lt(TWO_POW_128) {\n let msg_metadata = (input as u64);\n let msg_type = ((input - (msg_metadata as Field)) / U64_SHIFT_MULTIPLIER) as u64;\n // Use division instead of bit shift since bit shifts are expensive in circuits\n Option::some((msg_type, msg_metadata))\n } else {\n Option::none()\n }\n}\n\nmod tests {\n use crate::utils::array::subarray::subarray;\n use super::{\n decode_message, encode_message, from_expanded_metadata, MAX_MESSAGE_CONTENT_LEN, to_expanded_metadata,\n TWO_POW_128,\n };\n\n global U64_MAX: u64 = (2.pow_32(64) - 1) as u64;\n global U128_MAX: Field = (2.pow_32(128) - 1);\n\n #[test]\n unconstrained fn encode_decode_empty_message(msg_type: u64, msg_metadata: u64) {\n let encoded = encode_message(msg_type, msg_metadata, []);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), 0);\n }\n\n #[test]\n unconstrained fn encode_decode_short_message(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; MAX_MESSAGE_CONTENT_LEN / 2],\n ) {\n let encoded = encode_message(msg_type, msg_metadata, msg_content);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), msg_content.len());\n assert_eq(subarray(decoded_msg_content.storage(), 0), msg_content);\n }\n\n #[test]\n unconstrained fn encode_decode_full_message(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; MAX_MESSAGE_CONTENT_LEN],\n ) {\n let encoded = encode_message(msg_type, msg_metadata, msg_content);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), msg_content.len());\n assert_eq(subarray(decoded_msg_content.storage(), 0), msg_content);\n }\n\n #[test]\n unconstrained fn to_expanded_metadata_packing() {\n // Test case 1: All bits set\n let packed = to_expanded_metadata(U64_MAX, U64_MAX);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 2: Only log type bits set\n let packed = to_expanded_metadata(U64_MAX, 0);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, 0);\n\n // Test case 3: Only msg_metadata bits set\n let packed = to_expanded_metadata(0, U64_MAX);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 4: No bits set\n let packed = to_expanded_metadata(0, 0);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, 0);\n }\n\n #[test]\n unconstrained fn from_expanded_metadata_packing() {\n // Test case 1: All bits set\n let input = U128_MAX as Field;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 2: Only log type bits set\n let input = (U128_MAX - U64_MAX as Field);\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, 0);\n\n // Test case 3: Only msg_metadata bits set\n let input = U64_MAX as Field;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 4: No bits set\n let input = 0;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, 0);\n }\n\n #[test]\n unconstrained fn to_from_expanded_metadata(original_msg_type: u64, original_msg_metadata: u64) {\n let packed = to_expanded_metadata(original_msg_type, original_msg_metadata);\n let (unpacked_msg_type, unpacked_msg_metadata) = from_expanded_metadata(packed).unwrap();\n\n assert_eq(original_msg_type, unpacked_msg_type);\n assert_eq(original_msg_metadata, unpacked_msg_metadata);\n }\n\n #[test]\n unconstrained fn encode_decode_max_size_message() {\n let msg_type_id: u64 = 42;\n let msg_metadata: u64 = 99;\n let mut msg_content = [0; MAX_MESSAGE_CONTENT_LEN];\n for i in 0..MAX_MESSAGE_CONTENT_LEN {\n msg_content[i] = i as Field;\n }\n\n let encoded = encode_message(msg_type_id, msg_metadata, msg_content);\n let (decoded_type_id, decoded_metadata, decoded_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_type_id, msg_type_id);\n assert_eq(decoded_metadata, msg_metadata);\n assert_eq(decoded_content, BoundedVec::from_array(msg_content));\n }\n\n #[test(should_fail_with = \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\")]\n fn encode_oversized_message_fails() {\n let msg_content = [0; MAX_MESSAGE_CONTENT_LEN + 1];\n let _ = encode_message(0, 0, msg_content);\n }\n\n #[test]\n unconstrained fn decode_empty_message_returns_none() {\n assert(decode_message(BoundedVec::new()).is_none());\n }\n\n #[test]\n unconstrained fn decode_message_with_oversized_metadata_returns_none() {\n let message = BoundedVec::from_array([TWO_POW_128]);\n assert(decode_message(message).is_none());\n }\n}\n"
|
|
622
368
|
},
|
|
623
369
|
"146": {
|
|
@@ -703,7 +449,7 @@
|
|
|
703
449
|
"start": 33413
|
|
704
450
|
}
|
|
705
451
|
],
|
|
706
|
-
"path": "/home/
|
|
452
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/encryption/aes128.nr",
|
|
707
453
|
"source": "use crate::protocol::{address::AztecAddress, public_keys::AddressPoint, traits::ToField};\n\nuse crate::{\n keys::{\n ecdh_shared_secret::{\n compute_app_siloed_shared_secret, derive_ecdh_shared_secret, derive_shared_secret_field_mask,\n derive_shared_secret_subkey,\n },\n ephemeral::generate_positive_ephemeral_key_pair,\n },\n logging::aztecnr_warn_log_format,\n messages::{\n encoding::{\n EPH_PK_X_SIZE_IN_FIELDS, HEADER_CIPHERTEXT_SIZE_IN_BYTES, MESSAGE_CIPHERTEXT_LEN, MESSAGE_PLAINTEXT_LEN,\n MESSAGE_PLAINTEXT_SIZE_IN_BYTES,\n },\n encryption::message_encryption::MessageEncryption,\n logs::arithmetic_generics_utils::{\n get_arr_of_size__message_bytes__from_PT, get_arr_of_size__message_bytes_padding__from_PT,\n },\n },\n oracle::{aes128_decrypt::try_aes128_decrypt, random::random, shared_secret::get_shared_secret},\n utils::{\n array,\n conversion::{\n bytes_as_fields::{decode_bytes_from_fields, encode_bytes_as_fields},\n fields_as_bytes::{encode_fields_as_bytes, try_decode_fields_from_bytes},\n },\n point::point_from_x_coord_and_sign,\n },\n};\n\nuse std::aes128::aes128_encrypt;\n\n/// Computes N close-to-uniformly-random 256 bits from a given app-siloed shared secret.\n///\n/// NEVER re-use the same iv and sym_key. DO NOT call this function more than once with the same s_app.\n///\n/// This function is only known to be safe if s_app is derived from combining a random ephemeral key with an\n/// address point and a contract address. See big comment within the body of the function.\nfn extract_many_close_to_uniformly_random_256_bits_using_poseidon2<let N: u32>(s_app: Field) -> [[u8; 32]; N] {\n /*\n * Unsafe because of https://eprint.iacr.org/2010/264.pdf Page 13, Lemma 2 (and the two paragraphs below it).\n *\n * If you call this function, you need to be careful and aware of how the arg `s_app` has been derived.\n *\n * The paper says that the way you derive aes keys and IVs should be fine with poseidon2 (modelled as a RO),\n * as long as you _don't_ use Poseidon2 as a PRG to generate the two exponents x & y which multiply to the\n * shared secret S:\n *\n * S = [x*y]*G.\n *\n * (Otherwise, you would have to \"key\" poseidon2, i.e. generate a uniformly string K which can be public and\n * compute Hash(x) as poseidon(K,x)).\n * In that lemma, k would be 2*254=508, and m would be the number of points on the grumpkin curve (which is\n * close to r according to the Hasse bound).\n *\n * Our shared secret S is [esk * address_sk] * G, and the question is: Can we compute hash(S) using poseidon2\n * instead of sha256?\n *\n * Well, esk is random and not generated with poseidon2, so that's good.\n * What about address_sk?\n * Well, address_sk = poseidon2(stuff) + ivsk, so there was some discussion about whether address_sk is\n * independent of poseidon2. Given that ivsk is random and independent of poseidon2, the address_sk is also\n * independent of poseidon2.\n *\n * Tl;dr: we believe it's safe to hash S = [esk * address_sk] * G using poseidon2, in order to derive a\n * symmetric key.\n *\n * If you're calling this function for a differently-derived `s_app`, be careful.\n */\n \n\n /* The output of this function needs to be 32 random bytes.\n * A single field won't give us 32 bytes of entropy. So we compute two \"random\" fields, by poseidon-hashing\n * with two different indices. We then extract the last 16 (big endian) bytes of each \"random\" field.\n * Note: we use to_be_bytes because it's slightly more efficient. But we have to be careful not to take bytes\n * from the \"big end\", because the \"big\" byte is not uniformly random over the byte: it only has < 6 bits of\n * randomness, because it's the big end of a 254-bit field element.\n */\n\n let mut all_bytes: [[u8; 32]; N] = std::mem::zeroed();\n std::static_assert(N < 256, \"N too large\");\n for k in 0..N {\n let rand1: Field = derive_shared_secret_subkey(s_app, 2 * k);\n let rand2: Field = derive_shared_secret_subkey(s_app, 2 * k + 1);\n\n let rand1_bytes: [u8; 32] = rand1.to_be_bytes();\n let rand2_bytes: [u8; 32] = rand2.to_be_bytes();\n\n let mut bytes: [u8; 32] = [0; 32];\n for i in 0..16 {\n // We take bytes from the \"little end\" of the be-bytes arrays:\n let j = 32 - i - 1;\n bytes[i] = rand1_bytes[j];\n bytes[16 + i] = rand2_bytes[j];\n }\n\n all_bytes[k] = bytes;\n }\n\n all_bytes\n}\n\nfn derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits<let N: u32>(\n many_random_256_bits: [[u8; 32]; N],\n) -> [([u8; 16], [u8; 16]); N] {\n // Many (sym_key, iv) pairs:\n let mut many_pairs: [([u8; 16], [u8; 16]); N] = std::mem::zeroed();\n for k in 0..N {\n let random_256_bits = many_random_256_bits[k];\n let mut sym_key = [0; 16];\n let mut iv = [0; 16];\n for i in 0..16 {\n sym_key[i] = random_256_bits[i];\n iv[i] = random_256_bits[i + 16];\n }\n many_pairs[k] = (sym_key, iv);\n }\n\n many_pairs\n}\n\npub fn derive_aes_symmetric_key_and_iv_from_shared_secret<let N: u32>(s_app: Field) -> [([u8; 16], [u8; 16]); N] {\n let many_random_256_bits: [[u8; 32]; N] = extract_many_close_to_uniformly_random_256_bits_using_poseidon2(s_app);\n\n derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits(many_random_256_bits)\n}\n\npub struct AES128 {}\n\nimpl MessageEncryption for AES128 {\n\n /// AES128-CBC encryption for Aztec protocol messages.\n ///\n /// ## Overview\n ///\n /// The plaintext is an array of up to `MESSAGE_PLAINTEXT_LEN` (12) fields. The output is always exactly\n /// `MESSAGE_CIPHERTEXT_LEN` (15) fields, regardless of plaintext size. All output fields except the\n /// ephemeral public key are uniformly random `Field` values to any observer without knowledge of the\n /// shared secret, making all encrypted messages indistinguishable by size or content.\n ///\n /// ## PKCS#7 Padding\n ///\n /// AES operates on 16-byte blocks, so the plaintext must be padded to a multiple of 16. PKCS#7 padding always\n /// adds at least 1 byte (so the receiver can always detect and strip it), which means:\n /// - 1 B plaintext -> 15 B padding -> 16 B total\n /// - 15 B plaintext -> 1 B padding -> 16 B total\n /// - 16 B plaintext -> 16 B padding -> 32 B total (full extra block)\n ///\n /// In general: if the plaintext is already a multiple of 16, a full 16-byte padding block is appended.\n ///\n /// ## Encryption Steps\n ///\n /// **1. Body encryption.** The plaintext fields are serialized to bytes (32 bytes per field) and AES-128-CBC\n /// encrypted. Since 32 is a multiple of 16, PKCS#7 always adds a full 16-byte padding block (see above):\n ///\n /// ```text\n /// +---------------------------------------------+\n /// | body ct |\n /// | PlaintextLen*32 + 16 B |\n /// +-------------------------------+--------------+\n /// | encrypted plaintext fields | PKCS#7 (16B) |\n /// | (serialized at 32 B each) | |\n /// +-------------------------------+--------------+\n /// ```\n ///\n /// **2. Header encryption.** The byte length of `body_ct` is stored as a 2-byte big-endian integer. This 2-byte\n /// header plaintext is then AES-encrypted; PKCS#7 pads the remaining 14 bytes to fill one 16-byte AES block,\n /// producing a 16-byte header ciphertext:\n ///\n /// ```text\n /// +---------------------------+\n /// | header ct |\n /// | 16 B |\n /// +--------+------------------+\n /// | body ct| PKCS#7 (14B) |\n /// | length | |\n /// | (2 B) | |\n /// +--------+------------------+\n /// ```\n ///\n /// ## Wire Format\n ///\n /// Messages are transmitted as fields, not bytes. A field is ~254 bits and can safely store 31 whole bytes, so\n /// we need to pack our byte data into 31-byte chunks. This packing drives the wire format.\n ///\n /// **Step 1 -- Assemble bytes.** The ciphertexts are laid out in a byte array, padded with zero bytes to a\n /// multiple of 31 so it divides evenly into fields:\n ///\n /// ```text\n /// +------------+-------------------------+---------+\n /// | header ct | body ct | byte pad|\n /// | 16 B | PlaintextLen*32 + 16 B | (zeros) |\n /// +------------+-------------------------+---------+\n /// |<-------- padded to a multiple of 31 B -------->|\n /// ```\n ///\n /// **Step 2 -- Pack and mask.** The byte array is split into 31-byte chunks, each stored in one field. A\n /// Poseidon2-derived mask (see `derive_shared_secret_field_mask`) is added to each so that the resulting\n /// fields appear as uniformly random `Field` values to any observer without knowledge of the shared secret,\n /// hiding the fact that the underlying ciphertext consists of 128-bit AES blocks.\n ///\n /// **Step 3 -- Assemble ciphertext.** The ephemeral public key x-coordinate is prepended and random field padding\n /// is appended to fill to 15 fields:\n ///\n /// ```text\n /// +----------+-------------------------+-------------------+\n /// | eph_pk.x | masked message fields | random field pad |\n /// | | (packed 31 B per field) | (fills to 15) |\n /// +----------+-------------------------+-------------------+\n /// |<---------- MESSAGE_CIPHERTEXT_LEN = 15 fields -------->|\n /// ```\n ///\n /// ## Key Derivation\n ///\n /// The raw ECDH shared secret point is first app-siloed into a scalar `s_app` by hashing with the contract\n /// address (see\n /// [`compute_app_siloed_shared_secret`](crate::keys::ecdh_shared_secret::compute_app_siloed_shared_secret)).\n /// Two (key, IV) pairs are then derived from `s_app` via indexed Poseidon2 hashing: one pair for the body\n /// ciphertext and one for the header ciphertext.\n fn encrypt<let PlaintextLen: u32>(\n plaintext: [Field; PlaintextLen],\n recipient: AztecAddress,\n contract_address: AztecAddress,\n ) -> [Field; MESSAGE_CIPHERTEXT_LEN] {\n std::static_assert(\n PlaintextLen <= MESSAGE_PLAINTEXT_LEN,\n \"Plaintext length exceeds MESSAGE_PLAINTEXT_LEN\",\n );\n\n // AES 128 operates on bytes, not fields, so we need to convert the fields to bytes. (This process is then\n // reversed when processing the message in `process_message_ciphertext`)\n let plaintext_bytes = encode_fields_as_bytes(plaintext);\n\n // Derive ECDH shared secret with recipient using a fresh ephemeral keypair.\n let (eph_sk, eph_pk) = generate_positive_ephemeral_key_pair();\n\n let raw_shared_secret = derive_ecdh_shared_secret(\n eph_sk,\n recipient\n .to_address_point()\n .unwrap_or_else(|| {\n aztecnr_warn_log_format!(\n \"Attempted to encrypt message for an invalid recipient ({0})\",\n )(\n [recipient.to_field()],\n );\n\n // Safety: if the recipient is an invalid address, then it is not possible to encrypt a message for\n // them because we cannot establish a shared secret. This is never expected to occur during normal\n // operation. However, it is technically possible for us to receive an invalid address, and we must\n // therefore handle it. We could simply fail, but that'd introduce a potential security issue in\n // which an attacker forces a contract to encrypt a message for an invalid address, resulting in an\n // impossible transaction - this is sometimes called a 'king of the hill' attack. We choose instead\n // to not fail and encrypt the plaintext regardless using the shared secret that results from a\n // random valid address. The sender is free to choose this address and hence shared secret, but\n // this has no security implications as they already know not only the full plaintext but also the\n // ephemeral private key anyway.\n unsafe {\n random_address_point()\n }\n })\n .inner,\n );\n\n let s_app = compute_app_siloed_shared_secret(raw_shared_secret, contract_address);\n\n // It is safe to derive AES keys from `s_app` using Poseidon2 because `s_app` was derived from an ECDH shared\n // secret using an AztecAddress (the recipient). See the block comment in\n // `extract_many_close_to_uniformly_random_256_bits_using_poseidon2` for more info.\n let pairs = derive_aes_symmetric_key_and_iv_from_shared_secret::<2>(s_app);\n let (body_sym_key, body_iv) = pairs[0];\n let (header_sym_key, header_iv) = pairs[1];\n\n let ciphertext_bytes = aes128_encrypt(plaintext_bytes, body_iv, body_sym_key);\n\n // Each plaintext field is 32 bytes (a multiple of the 16-byte AES block\n // size), so PKCS#7 always appends a full 16-byte padding block:\n // |ciphertext| = PlaintextLen*32 + 16 = 16 * (1 + PlaintextLen*32 / 16)\n std::static_assert(\n ciphertext_bytes.len() == 16 * (1 + (PlaintextLen * 32) / 16),\n \"unexpected ciphertext length\",\n );\n\n // Encrypt a 2-byte header containing the body ciphertext length.\n let header_plaintext = encode_header(ciphertext_bytes.len());\n\n // Note: the aes128_encrypt builtin fn automatically appends bytes to the input, according to pkcs#7; hence why\n // the output `header_ciphertext_bytes` is 16 bytes larger than the input in this case.\n let header_ciphertext_bytes = aes128_encrypt(header_plaintext, header_iv, header_sym_key);\n // Verify expected header ciphertext size at compile time.\n std::static_assert(\n header_ciphertext_bytes.len() == HEADER_CIPHERTEXT_SIZE_IN_BYTES,\n \"unexpected ciphertext header length\",\n );\n\n // Assemble the message byte array:\n // [header_ct (16B)] [body_ct] [padding to mult of 31]\n let message_bytes_padding_to_mult_31 = get_arr_of_size__message_bytes_padding__from_PT::<PlaintextLen * 32>();\n\n let mut message_bytes = get_arr_of_size__message_bytes__from_PT::<PlaintextLen * 32>();\n\n std::static_assert(\n message_bytes.len() % 31 == 0,\n \"Unexpected error: message_bytes.len() should be divisible by 31, by construction.\",\n );\n\n let mut offset = 0;\n for i in 0..header_ciphertext_bytes.len() {\n message_bytes[offset + i] = header_ciphertext_bytes[i];\n }\n offset += header_ciphertext_bytes.len();\n\n for i in 0..ciphertext_bytes.len() {\n message_bytes[offset + i] = ciphertext_bytes[i];\n }\n offset += ciphertext_bytes.len();\n\n for i in 0..message_bytes_padding_to_mult_31.len() {\n message_bytes[offset + i] = message_bytes_padding_to_mult_31[i];\n }\n offset += message_bytes_padding_to_mult_31.len();\n\n // Ideally we would be able to have a static assert where we check that the offset would be such that we've\n // written to the entire log_bytes array, but we cannot since Noir does not treat the offset as a comptime\n // value (despite the values that it goes through being known at each stage). We instead check that the\n // computation used to obtain the offset computes the expected value (which we _can_ do in a static check), and\n // then add a cheap runtime check to also validate that the offset matches this.\n std::static_assert(\n header_ciphertext_bytes.len() + ciphertext_bytes.len() + message_bytes_padding_to_mult_31.len()\n == message_bytes.len(),\n \"unexpected message length\",\n );\n assert(offset == message_bytes.len(), \"unexpected encrypted message length\");\n\n // Pack message bytes into fields (31 bytes per field) and prepend eph_pk.x.\n let message_bytes_as_fields = encode_bytes_as_fields(message_bytes);\n\n let mut ciphertext: [Field; MESSAGE_CIPHERTEXT_LEN] = [0; MESSAGE_CIPHERTEXT_LEN];\n\n ciphertext[0] = eph_pk.x;\n\n // Mask each content field with a Poseidon2-derived value, so that they appear as uniformly random `Field`\n // values\n let mut offset = 1;\n for i in 0..message_bytes_as_fields.len() {\n let mask = derive_shared_secret_field_mask(s_app, i as u32);\n ciphertext[offset + i] = message_bytes_as_fields[i] + mask;\n }\n offset += message_bytes_as_fields.len();\n\n // Pad with random fields so that padding is indistinguishable from masked data fields.\n for i in offset..MESSAGE_CIPHERTEXT_LEN {\n // Safety: we assume that the sender wants for the message to be private - a malicious one could simply\n // reveal its contents publicly. It is therefore fine to trust the sender to provide random padding.\n ciphertext[i] = unsafe { random() };\n }\n\n ciphertext\n }\n\n unconstrained fn decrypt(\n ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n recipient: AztecAddress,\n contract_address: AztecAddress,\n ) -> Option<BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>> {\n // Extract the ephemeral public key x-coordinate and masked fields, returning None for empty ciphertext.\n if ciphertext.len() > 0 {\n let masked_fields: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN - EPH_PK_X_SIZE_IN_FIELDS> =\n array::subbvec(ciphertext, EPH_PK_X_SIZE_IN_FIELDS);\n Option::some((ciphertext.get(0), masked_fields))\n } else {\n Option::none()\n }\n .and_then(|(eph_pk_x, masked_fields)| {\n // With the x-coordinate of the ephemeral public key we can reconstruct the point as we know that the\n // y-coordinate must be positive. This may fail however, as not all x-coordinates are on the curve. In\n // that case, we simply return `Option::none`. Secret derivation may also fail when the PXE does not\n // hold the recipient's keys (e.g. when syncing the scope of an address we don't control), in which\n // case the message is undecryptable and equally skipped.\n point_from_x_coord_and_sign(eph_pk_x, true)\n .and_then(|eph_pk| get_shared_secret(recipient, eph_pk, contract_address))\n .and_then(|s_app| {\n let unmasked_fields = masked_fields.mapi(|i, field| {\n let unmasked = unmask_field(s_app, i, field);\n // If we failed to unmask the field, we are dealing with the random padding. We'll ignore it\n // later, so we can simply set it to 0\n unmasked.unwrap_or(0)\n });\n let ciphertext_without_eph_pk_x = decode_bytes_from_fields(unmasked_fields);\n\n // Derive symmetric keys:\n let pairs = derive_aes_symmetric_key_and_iv_from_shared_secret::<2>(s_app);\n let (body_sym_key, body_iv) = pairs[0];\n let (header_sym_key, header_iv) = pairs[1];\n\n // Extract the header ciphertext\n let header_start = 0;\n let header_ciphertext: [u8; HEADER_CIPHERTEXT_SIZE_IN_BYTES] =\n array::subarray(ciphertext_without_eph_pk_x.storage(), header_start);\n // We need to convert the array to a BoundedVec because the oracle expects a BoundedVec as it's\n // designed to work with messages with unknown length at compile time. This would not be\n // necessary here as the header ciphertext length is fixed. But we do it anyway to not have to\n // have duplicate oracles.\n let header_ciphertext_bvec =\n BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::from_array(header_ciphertext);\n\n try_aes128_decrypt(header_ciphertext_bvec, header_iv, header_sym_key)\n // Extract ciphertext length from header (2 bytes, big-endian)\n .and_then(|header_plaintext| extract_ciphertext_length(header_plaintext))\n .filter(|ciphertext_length| ciphertext_length <= MESSAGE_PLAINTEXT_SIZE_IN_BYTES)\n .map(|ciphertext_length| {\n // Extract and decrypt main ciphertext\n let ciphertext_start = header_start + HEADER_CIPHERTEXT_SIZE_IN_BYTES;\n let ciphertext_with_padding: [u8; MESSAGE_PLAINTEXT_SIZE_IN_BYTES] =\n array::subarray(ciphertext_without_eph_pk_x.storage(), ciphertext_start);\n BoundedVec::from_parts(ciphertext_with_padding, ciphertext_length)\n })\n // Decrypt main ciphertext and return it\n .and_then(|ciphertext| try_aes128_decrypt(ciphertext, body_iv, body_sym_key))\n // Convert bytes back to fields (32 bytes per field). Returns None if the actual bytes are\n // not valid.\n .and_then(|plaintext_bytes| try_decode_fields_from_bytes(plaintext_bytes))\n })\n })\n }\n}\n\n/// Encodes the body ciphertext length into a 2-byte big-endian header.\nfn encode_header(ciphertext_length: u32) -> [u8; 2] {\n [(ciphertext_length >> 8) as u8, ciphertext_length as u8]\n}\n\n/// Extracts the body ciphertext length from a decrypted header as a 2-byte big-endian integer.\n///\n/// Returns `Option::none()` if the header has fewer than 2 bytes.\nunconstrained fn extract_ciphertext_length<let N: u32>(header: BoundedVec<u8, N>) -> Option<u32> {\n if header.len() >= 2 {\n Option::some(((header.get(0) as u32) << 8) | (header.get(1) as u32))\n } else {\n Option::none()\n }\n}\n\n/// 2^248: upper bound for values that fit in 31 bytes\nglobal TWO_POW_248: Field = 2.pow_32(248);\n\n/// Removes the Poseidon2-derived mask from a ciphertext field. Returns the unmasked value if it fits in 31 bytes\n/// (a content field), or `None` if it doesn't (random padding). Unconstrained to prevent accidental use in\n/// constrained context.\nunconstrained fn unmask_field(s_app: Field, index: u32, masked: Field) -> Option<Field> {\n let unmasked = masked - derive_shared_secret_field_mask(s_app, index);\n if unmasked.lt(TWO_POW_248) {\n Option::some(unmasked)\n } else {\n Option::none()\n }\n}\n\n/// Produces a random valid address point, i.e. one that is on the curve. This is equivalent to calling\n/// [`AztecAddress::to_address_point`] on a random valid address.\nunconstrained fn random_address_point() -> AddressPoint {\n let mut result = std::mem::zeroed();\n\n loop {\n // We simply produce random x coordinates until we find one that is on the curve. About half of the x\n // coordinates fulfill this condition, so this should only take a few iterations at most.\n let x_coord = random();\n let point = point_from_x_coord_and_sign(x_coord, true);\n if point.is_some() {\n result = AddressPoint { inner: point.unwrap() };\n break;\n }\n }\n\n result\n}\n\nmod test {\n use crate::{\n ephemeral::EphemeralArray,\n keys::ecdh_shared_secret::{compute_app_siloed_shared_secret, derive_ecdh_shared_secret},\n messages::{\n encoding::{HEADER_CIPHERTEXT_SIZE_IN_BYTES, MESSAGE_PLAINTEXT_LEN, MESSAGE_PLAINTEXT_SIZE_IN_BYTES},\n encryption::message_encryption::MessageEncryption,\n },\n test::helpers::test_environment::TestEnvironment,\n };\n use crate::protocol::{address::AztecAddress, traits::FromField};\n use super::{AES128, encode_header, random_address_point};\n use std::{embedded_curve_ops::EmbeddedCurveScalar, test::OracleMock};\n\n #[test]\n unconstrained fn encrypt_decrypt_deterministic() {\n let env = TestEnvironment::new();\n\n // Message decryption requires oracles that are only available during private execution\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n\n let recipient = AztecAddress::from_field(\n 0x25afb798ea6d0b8c1618e50fdeafa463059415013d3b7c75d46abf5e242be70c,\n );\n\n // Mock random values for deterministic test\n let eph_sk = 0x1358d15019d4639393d62b97e1588c095957ce74a1c32d6ec7d62fe6705d9538;\n let _ = OracleMock::mock(\"aztec_misc_getRandomField\").returns(eph_sk).times(1);\n\n let randomness = 0x0101010101010101010101010101010101010101010101010101010101010101;\n let _ = OracleMock::mock(\"aztec_misc_getRandomField\").returns(randomness).times(1000000);\n\n // Encrypt the message\n let encrypted_message = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n // Compute the same app-siloed shared secret that the oracle would return\n let raw_shared_secret = derive_ecdh_shared_secret(\n EmbeddedCurveScalar::from_field(eph_sk),\n recipient.to_address_point().unwrap().inner,\n );\n let s_app = compute_app_siloed_shared_secret(raw_shared_secret, contract_address);\n\n // The shared-secrets oracle is batched: it returns a slot pointing at an EphemeralArray\n // populated with the per-key results. Set up that array with the single expected `s_app`\n // and mock the oracle to return its slot.\n let response_slot: Field = 99;\n let response_array: EphemeralArray<Field> = EphemeralArray::at(response_slot);\n response_array.push(s_app);\n let _ = OracleMock::mock(\"aztec_utl_getSharedSecrets\").returns(response_slot);\n\n // Decrypt the message\n let decrypted = AES128::decrypt(encrypted_message, recipient, contract_address).unwrap();\n\n // The decryption function spits out a BoundedVec because it's designed to work with messages with unknown\n // length at compile time. For this reason we need to convert the original input to a BoundedVec.\n let plaintext_bvec = BoundedVec::<Field, MESSAGE_PLAINTEXT_LEN>::from_array(plaintext);\n\n // Verify decryption matches original plaintext\n assert_eq(decrypted, plaintext_bvec, \"Decrypted bytes should match original plaintext\");\n\n // The following is a workaround of \"struct is never constructed\" Noir compilation error (we only ever use\n // static methods of the struct).\n let _ = AES128 {};\n });\n }\n\n #[test]\n unconstrained fn encrypt_decrypt_random() {\n // Same as `encrypt_decrypt_deterministic`, except we don't mock any of the oracles and rely on\n // `TestEnvironment` instead.\n let mut env = TestEnvironment::new();\n\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n assert_eq(\n AES128::decrypt(\n BoundedVec::from_array(ciphertext),\n recipient,\n contract_address,\n )\n .unwrap(),\n BoundedVec::from_array(plaintext),\n );\n });\n }\n\n #[test]\n unconstrained fn encrypt_to_invalid_address() {\n // x = 3 is a non-residue for this curve, resulting in an invalid address\n let invalid_address = AztecAddress { inner: 3 };\n let contract_address = AztecAddress { inner: 42 };\n\n let _ = AES128::encrypt([1, 2, 3, 4], invalid_address, contract_address);\n }\n\n // Documents the PKCS#7 padding behavior that `encrypt` relies on (see its static_assert).\n #[test]\n fn pkcs7_padding_always_adds_at_least_one_byte() {\n let key = [0 as u8; 16];\n let iv = [0 as u8; 16];\n\n // 1 byte input + 15 bytes padding = 16 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 1], iv, key).len(), 16);\n\n // 15 bytes input + 1 byte padding = 16 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 15], iv, key).len(), 16);\n\n // 16 bytes input (block-aligned) + full 16-byte padding block = 32 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 16], iv, key).len(), 32);\n }\n\n #[test]\n unconstrained fn encrypt_decrypt_max_size_plaintext() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let mut plaintext = [0; MESSAGE_PLAINTEXT_LEN];\n for i in 0..MESSAGE_PLAINTEXT_LEN {\n plaintext[i] = i as Field;\n }\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n assert_eq(\n AES128::decrypt(\n BoundedVec::from_array(ciphertext),\n recipient,\n contract_address,\n )\n .unwrap(),\n BoundedVec::from_array(plaintext),\n );\n });\n }\n\n #[test(should_fail_with = \"Plaintext length exceeds MESSAGE_PLAINTEXT_LEN\")]\n unconstrained fn encrypt_oversized_plaintext() {\n let address = AztecAddress { inner: 3 };\n let contract_address = AztecAddress { inner: 42 };\n let plaintext: [Field; MESSAGE_PLAINTEXT_LEN + 1] = [0; MESSAGE_PLAINTEXT_LEN + 1];\n let _ = AES128::encrypt(plaintext, address, contract_address);\n }\n\n #[test]\n unconstrained fn random_address_point_produces_valid_points() {\n // About half of random addresses are invalid, so testing just a couple gives us high confidence that\n // `random_address_point` is indeed producing valid addresses.\n for _ in 0..10 {\n let random_address = AztecAddress { inner: random_address_point().inner.x };\n assert(random_address.to_address_point().is_some());\n }\n }\n\n #[test]\n unconstrained fn decrypt_invalid_ephemeral_public_key() {\n let mut env = TestEnvironment::new();\n\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3, 4];\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n // The first field of the ciphertext is the x-coordinate of the ephemeral public key. We set it to a known\n // non-residue (3), causing `decrypt` to fail to produce a decryption shared secret.\n let mut bad_ciphertext = BoundedVec::from_array(ciphertext);\n bad_ciphertext.set(0, 3);\n\n assert(AES128::decrypt(bad_ciphertext, recipient, contract_address).is_none());\n });\n }\n\n #[test]\n unconstrained fn decrypt_returns_none_on_empty_ciphertext() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n assert(AES128::decrypt(BoundedVec::new(), recipient, contract_address).is_none());\n });\n }\n\n // Mocks the header AES decrypt oracle to return an empty result. The TS oracle never throws on invalid\n // input: it decrypts to garbage bytes or returns empty\n #[test]\n unconstrained fn decrypt_returns_none_on_empty_header() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n let empty_header = BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::new();\n let _ = OracleMock::mock(\"aztec_utl_decryptAes128\").returns(Option::some(empty_header)).times(1);\n\n assert(AES128::decrypt(ciphertext, recipient, contract_address).is_none());\n });\n }\n\n // Mocks the header oracle to return a 2-byte header that decodes to a ciphertext_length one past the maximum\n // allowed value, verifying the edge case is handled correctly.\n #[test]\n unconstrained fn decrypt_returns_none_on_oversized_ciphertext_length() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n let bad_header = BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::from_array(encode_header(\n MESSAGE_PLAINTEXT_SIZE_IN_BYTES + 1,\n ));\n let _ = OracleMock::mock(\"aztec_utl_decryptAes128\").returns(Option::some(bad_header)).times(1);\n\n assert(AES128::decrypt(ciphertext, recipient, contract_address).is_none());\n });\n }\n\n}\n"
|
|
708
454
|
},
|
|
709
455
|
"15": {
|
|
@@ -807,7 +553,7 @@
|
|
|
807
553
|
"start": 6966
|
|
808
554
|
}
|
|
809
555
|
],
|
|
810
|
-
"path": "/home/
|
|
556
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/logs/event.nr",
|
|
811
557
|
"source": "use crate::{\n event::{event_interface::EventInterface, EventSelector},\n messages::{\n encoding::{encode_message, MAX_MESSAGE_CONTENT_LEN, MESSAGE_EXPANDED_METADATA_LEN},\n msg_type::PRIVATE_EVENT_MSG_TYPE_ID,\n },\n utils::array,\n};\nuse crate::protocol::traits::{FromField, Serialize, ToField};\n\n/// The number of fields in a private event message content that are not the event's serialized representation (1 field\n/// for randomness).\npub(crate) global PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN: u32 = 1;\npub(crate) global PRIVATE_EVENT_MSG_PLAINTEXT_RANDOMNESS_INDEX: u32 = 0;\n\n/// The maximum length of the packed representation of an event's contents. This is limited by private log size,\n/// encryption overhead and extra fields in the message (e.g. message type id, randomness, etc.).\npub global MAX_EVENT_SERIALIZED_LEN: u32 = MAX_MESSAGE_CONTENT_LEN - PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN;\n\n/// Creates the plaintext for a private event message (i.e. one of type [`PRIVATE_EVENT_MSG_TYPE_ID`]).\n///\n/// This plaintext is meant to be decoded via [`decode_private_event_message`].\npub fn encode_private_event_message<Event>(\n event: Event,\n randomness: Field,\n) -> [Field; PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <Event as Serialize>::N + MESSAGE_EXPANDED_METADATA_LEN]\nwhere\n Event: EventInterface + Serialize,\n{\n std::static_assert(\n <Event as Serialize>::N <= MAX_EVENT_SERIALIZED_LEN,\n \"event's serialized length exceeds the maximum allowed for private events\",\n );\n\n // We use `Serialize` because we want for events to be processable by off-chain actors, e.g. block explorers,\n // wallets and apps, without having to rely on contract invocation. If we used `Packable` we'd need to call utility\n // functions in order to unpack events, which would introduce a level of complexity we don't currently think is\n // worth the savings in DA (for public events) and proving time (when encrypting private event messages).\n let serialized_event = event.serialize();\n\n // If PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN is changed, causing the assertion below to fail, then the\n // encoding below must be updated as well.\n std::static_assert(\n PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN == 1,\n \"unexpected value for PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN\",\n );\n\n let mut msg_plaintext = [0; PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <Event as Serialize>::N];\n msg_plaintext[PRIVATE_EVENT_MSG_PLAINTEXT_RANDOMNESS_INDEX] = randomness;\n\n for i in 0..serialized_event.len() {\n msg_plaintext[PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + i] = serialized_event[i];\n }\n\n // The event type id is stored in the message metadata\n encode_message(\n PRIVATE_EVENT_MSG_TYPE_ID,\n Event::get_event_type_id().to_field() as u64,\n msg_plaintext,\n )\n}\n\n/// Decodes the plaintext from a private event message (i.e. one of type [`PRIVATE_EVENT_MSG_TYPE_ID`]).\n///\n/// Returns `None` if `msg_content` is too short to contain the reserved fields. This plaintext is meant to have\n/// originated from [`encode_private_event_message`].\n///\n/// Note that while [`encode_private_event_message`] returns a fixed-size array, this function takes a [`BoundedVec`]\n/// instead. This is because when decoding we're typically processing runtime-sized plaintexts, more specifically,\n/// those that originate from [`crate::messages::encryption::message_encryption::MessageEncryption::decrypt`].\npub(crate) unconstrained fn decode_private_event_message(\n msg_metadata: u64,\n msg_content: BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n) -> Option<(EventSelector, Field, BoundedVec<Field, MAX_EVENT_SERIALIZED_LEN>)> {\n if msg_content.len() < PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN {\n Option::none()\n } else {\n let event_type_id = EventSelector::from_field(msg_metadata as Field);\n\n // If PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN is changed, causing the assertion below to fail, then the\n // destructuring of the private event message encoding below must be updated as well.\n std::static_assert(\n PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN == 1,\n \"unexpected value for PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN\",\n );\n\n let randomness = msg_content.get(PRIVATE_EVENT_MSG_PLAINTEXT_RANDOMNESS_INDEX);\n let serialized_event = array::subbvec(msg_content, PRIVATE_EVENT_MSG_PLAINTEXT_RESERVED_FIELDS_LEN);\n\n Option::some((event_type_id, randomness, serialized_event))\n }\n}\n\nmod test {\n use crate::{\n event::{event_interface::EventInterface, EventSelector},\n messages::{\n encoding::decode_message,\n logs::event::{decode_private_event_message, encode_private_event_message},\n msg_type::PRIVATE_EVENT_MSG_TYPE_ID,\n },\n };\n use crate::protocol::traits::{FromField, Serialize};\n use crate::test::mocks::mock_event::MockEvent;\n\n global VALUE: Field = 7;\n global RANDOMNESS: Field = 10;\n\n #[test]\n unconstrained fn encode_decode() {\n let event = MockEvent::new(VALUE).build_event();\n\n let message_plaintext = encode_private_event_message(event, RANDOMNESS);\n\n let (msg_type_id, msg_metadata, msg_content) =\n decode_message(BoundedVec::from_array(message_plaintext)).unwrap();\n\n assert_eq(msg_type_id, PRIVATE_EVENT_MSG_TYPE_ID);\n\n let (event_type_id, randomness, serialized_event) =\n decode_private_event_message(msg_metadata, msg_content).unwrap();\n\n assert_eq(event_type_id, MockEvent::get_event_type_id());\n assert_eq(randomness, RANDOMNESS);\n assert_eq(serialized_event, BoundedVec::from_array(event.serialize()));\n }\n\n #[derive(Serialize)]\n struct EmptyEvent {}\n\n impl EventInterface for EmptyEvent {\n fn get_event_type_id() -> EventSelector {\n EventSelector::from_field(90)\n }\n }\n\n #[test]\n unconstrained fn encode_decode_empty_event() {\n let message_plaintext = encode_private_event_message(EmptyEvent {}, RANDOMNESS);\n\n let (msg_type_id, msg_metadata, msg_content) =\n decode_message(BoundedVec::from_array(message_plaintext)).unwrap();\n\n assert_eq(msg_type_id, PRIVATE_EVENT_MSG_TYPE_ID);\n\n let (event_type_id, randomness, serialized_event) =\n decode_private_event_message(msg_metadata, msg_content).unwrap();\n\n assert_eq(event_type_id, EmptyEvent::get_event_type_id());\n assert_eq(randomness, RANDOMNESS);\n assert_eq(serialized_event.len(), 0);\n }\n\n #[test]\n unconstrained fn decode_empty_content_returns_none() {\n let empty = BoundedVec::new();\n assert(decode_private_event_message(0, empty).is_none());\n }\n\n #[test]\n unconstrained fn decode_succeeds_with_only_reserved_fields() {\n let content = BoundedVec::from_array([RANDOMNESS]);\n\n let (_, randomness, serialized_event) = decode_private_event_message(0, content).unwrap();\n\n assert_eq(randomness, RANDOMNESS);\n assert_eq(serialized_event.len(), 0);\n }\n}\n"
|
|
812
558
|
},
|
|
813
559
|
"153": {
|
|
@@ -865,7 +611,7 @@
|
|
|
865
611
|
"start": 9509
|
|
866
612
|
}
|
|
867
613
|
],
|
|
868
|
-
"path": "/home/
|
|
614
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/logs/note.nr",
|
|
869
615
|
"source": "use crate::{\n messages::{\n encoding::{encode_message, MAX_MESSAGE_CONTENT_LEN, MESSAGE_EXPANDED_METADATA_LEN},\n msg_type::PRIVATE_NOTE_MSG_TYPE_ID,\n },\n note::note_interface::NoteType,\n utils::array,\n};\nuse crate::protocol::{address::AztecAddress, traits::{FromField, Packable, ToField}};\n\n/// The number of fields in a private note message content that are not the note's packed representation.\npub(crate) global PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN: u32 = 3;\n\npub(crate) global PRIVATE_NOTE_MSG_PLAINTEXT_OWNER_INDEX: u32 = 0;\npub(crate) global PRIVATE_NOTE_MSG_PLAINTEXT_STORAGE_SLOT_INDEX: u32 = 1;\npub(crate) global PRIVATE_NOTE_MSG_PLAINTEXT_RANDOMNESS_INDEX: u32 = 2;\n\n/// The maximum length of the packed representation of a note's contents. This is limited by private log size,\n/// encryption overhead and extra fields in the message (e.g. message type id, storage slot, randomness, etc.).\npub global MAX_NOTE_PACKED_LEN: u32 = MAX_MESSAGE_CONTENT_LEN - PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN;\n\n/// Creates the plaintext for a private note message with the given `msg_type_id`.\n///\n/// Shared encoder used by [`encode_private_note_message`] and by custom message handlers that use the same format as\n/// standard private note message but perform additional validation logic.\npub fn encode_private_note_message_with_msg_type_id<Note>(\n msg_type_id: u64,\n note: Note,\n owner: AztecAddress,\n storage_slot: Field,\n randomness: Field,\n) -> [Field; PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <Note as Packable>::N + MESSAGE_EXPANDED_METADATA_LEN]\nwhere\n Note: NoteType + Packable,\n{\n let packed_note = note.pack();\n\n // If PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN is changed, causing the assertion below to fail, then the\n // encoding below must be updated as well.\n std::static_assert(\n PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN == 3,\n \"unexpected value for PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN\",\n );\n\n let mut msg_content = [0; PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <Note as Packable>::N];\n msg_content[PRIVATE_NOTE_MSG_PLAINTEXT_OWNER_INDEX] = owner.to_field();\n msg_content[PRIVATE_NOTE_MSG_PLAINTEXT_STORAGE_SLOT_INDEX] = storage_slot;\n msg_content[PRIVATE_NOTE_MSG_PLAINTEXT_RANDOMNESS_INDEX] = randomness;\n for i in 0..packed_note.len() {\n msg_content[PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + i] = packed_note[i];\n }\n\n // Notes use the note type id for metadata\n encode_message(msg_type_id, Note::get_id() as u64, msg_content)\n}\n\n/// Creates the plaintext for a private note message (i.e. one of type [`PRIVATE_NOTE_MSG_TYPE_ID`]).\n///\n/// This plaintext is meant to be decoded via [`decode_private_note_message`].\npub fn encode_private_note_message<Note>(\n note: Note,\n owner: AztecAddress,\n storage_slot: Field,\n randomness: Field,\n) -> [Field; PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <Note as Packable>::N + MESSAGE_EXPANDED_METADATA_LEN]\nwhere\n Note: NoteType + Packable,\n{\n encode_private_note_message_with_msg_type_id(\n PRIVATE_NOTE_MSG_TYPE_ID,\n note,\n owner,\n storage_slot,\n randomness,\n )\n}\n\n/// Decodes the plaintext from a private note message (i.e. one of type [`PRIVATE_NOTE_MSG_TYPE_ID`]).\n///\n/// Returns `None` if `msg_content` is too short to contain the reserved fields. This plaintext is meant to have\n/// originated from [`encode_private_note_message`].\n///\n/// Note that while [`encode_private_note_message`] returns a fixed-size array, this function takes a [`BoundedVec`]\n/// instead. This is because when decoding we're typically processing runtime-sized plaintexts, more specifically,\n/// those that originate from [`crate::messages::encryption::message_encryption::MessageEncryption::decrypt`].\npub(crate) unconstrained fn decode_private_note_message(\n msg_metadata: u64,\n msg_content: BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n) -> Option<(Field, AztecAddress, Field, Field, BoundedVec<Field, MAX_NOTE_PACKED_LEN>)> {\n if msg_content.len() < PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN {\n Option::none()\n } else {\n let note_type_id = msg_metadata as Field; // TODO: make note type id not be a full field\n\n // If PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN is changed, causing the assertion below to fail, then the\n // decoding below must be updated as well.\n std::static_assert(\n PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN == 3,\n \"unexpected value for PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN\",\n );\n\n let owner = AztecAddress::from_field(msg_content.get(PRIVATE_NOTE_MSG_PLAINTEXT_OWNER_INDEX));\n let storage_slot = msg_content.get(PRIVATE_NOTE_MSG_PLAINTEXT_STORAGE_SLOT_INDEX);\n let randomness = msg_content.get(PRIVATE_NOTE_MSG_PLAINTEXT_RANDOMNESS_INDEX);\n let packed_note = array::subbvec(msg_content, PRIVATE_NOTE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN);\n\n Option::some((note_type_id, owner, storage_slot, randomness, packed_note))\n }\n}\n\nmod test {\n use crate::{\n messages::{\n encoding::decode_message,\n logs::note::{decode_private_note_message, encode_private_note_message, MAX_NOTE_PACKED_LEN},\n msg_type::PRIVATE_NOTE_MSG_TYPE_ID,\n },\n note::note_interface::NoteType,\n };\n use crate::protocol::{address::AztecAddress, traits::{FromField, Packable, ToField}};\n use crate::test::mocks::mock_note::MockNote;\n\n global VALUE: Field = 7;\n global OWNER: AztecAddress = AztecAddress::from_field(8);\n global STORAGE_SLOT: Field = 9;\n global RANDOMNESS: Field = 10;\n\n #[test]\n unconstrained fn encode_decode() {\n let note = MockNote::new(VALUE).build_note();\n\n let message_plaintext = encode_private_note_message(note, OWNER, STORAGE_SLOT, RANDOMNESS);\n\n let (msg_type_id, msg_metadata, msg_content) =\n decode_message(BoundedVec::from_array(message_plaintext)).unwrap();\n\n assert_eq(msg_type_id, PRIVATE_NOTE_MSG_TYPE_ID);\n\n let (note_type_id, owner, storage_slot, randomness, packed_note) =\n decode_private_note_message(msg_metadata, msg_content).unwrap();\n\n assert_eq(note_type_id, MockNote::get_id());\n assert_eq(owner, OWNER);\n assert_eq(storage_slot, STORAGE_SLOT);\n assert_eq(randomness, RANDOMNESS);\n assert_eq(packed_note, BoundedVec::from_array(note.pack()));\n }\n\n #[derive(Packable)]\n struct MaxSizeNote {\n data: [Field; MAX_NOTE_PACKED_LEN],\n }\n\n impl NoteType for MaxSizeNote {\n fn get_id() -> Field {\n 0\n }\n }\n\n #[test]\n unconstrained fn encode_decode_max_size_note() {\n let mut data = [0; MAX_NOTE_PACKED_LEN];\n for i in 0..MAX_NOTE_PACKED_LEN {\n data[i] = i as Field;\n }\n let note = MaxSizeNote { data };\n\n let encoded = encode_private_note_message(note, OWNER, STORAGE_SLOT, RANDOMNESS);\n let (msg_type_id, msg_metadata, msg_content) = decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(msg_type_id, PRIVATE_NOTE_MSG_TYPE_ID);\n\n let (note_type_id, owner, storage_slot, randomness, packed_note) =\n decode_private_note_message(msg_metadata, msg_content).unwrap();\n\n assert_eq(note_type_id, MaxSizeNote::get_id());\n assert_eq(owner, OWNER);\n assert_eq(storage_slot, STORAGE_SLOT);\n assert_eq(randomness, RANDOMNESS);\n assert_eq(packed_note, BoundedVec::from_array(data));\n }\n\n #[derive(Packable)]\n struct OversizedNote {\n data: [Field; MAX_NOTE_PACKED_LEN + 1],\n }\n\n impl NoteType for OversizedNote {\n fn get_id() -> Field {\n 0\n }\n }\n\n #[test(should_fail_with = \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\")]\n fn encode_oversized_note_fails() {\n let note = OversizedNote { data: [0; MAX_NOTE_PACKED_LEN + 1] };\n let _ = encode_private_note_message(note, OWNER, STORAGE_SLOT, RANDOMNESS);\n }\n\n #[derive(Packable)]\n struct EmptyNote {}\n\n impl NoteType for EmptyNote {\n fn get_id() -> Field {\n 0\n }\n }\n\n #[test]\n unconstrained fn encode_decode_empty_note() {\n let encoded = encode_private_note_message(EmptyNote {}, OWNER, STORAGE_SLOT, RANDOMNESS);\n let (msg_type_id, msg_metadata, msg_content) = decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(msg_type_id, PRIVATE_NOTE_MSG_TYPE_ID);\n\n let (note_type_id, owner, storage_slot, randomness, packed_note) =\n decode_private_note_message(msg_metadata, msg_content).unwrap();\n\n assert_eq(note_type_id, EmptyNote::get_id());\n assert_eq(owner, OWNER);\n assert_eq(storage_slot, STORAGE_SLOT);\n assert_eq(randomness, RANDOMNESS);\n assert_eq(packed_note.len(), 0);\n }\n\n #[test]\n unconstrained fn decode_empty_content_returns_none() {\n let empty = BoundedVec::new();\n assert(decode_private_note_message(0, empty).is_none());\n }\n\n #[test]\n unconstrained fn decode_with_fewer_than_reserved_fields_returns_none() {\n let content = BoundedVec::from_array([0, 0]);\n assert(decode_private_note_message(0, content).is_none());\n }\n\n #[test]\n unconstrained fn decode_succeeds_with_only_reserved_fields() {\n let content = BoundedVec::from_array([OWNER.to_field(), STORAGE_SLOT, RANDOMNESS]);\n\n let (_, owner, storage_slot, randomness, packed_note) = decode_private_note_message(0, content).unwrap();\n\n assert_eq(owner, OWNER);\n assert_eq(storage_slot, STORAGE_SLOT);\n assert_eq(randomness, RANDOMNESS);\n assert_eq(packed_note.len(), 0);\n }\n}\n"
|
|
870
616
|
},
|
|
871
617
|
"154": {
|
|
@@ -891,7 +637,7 @@
|
|
|
891
637
|
"start": 7197
|
|
892
638
|
}
|
|
893
639
|
],
|
|
894
|
-
"path": "/home/
|
|
640
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/logs/partial_note.nr",
|
|
895
641
|
"source": "use crate::{\n messages::{\n encoding::{encode_message, MAX_MESSAGE_CONTENT_LEN, MESSAGE_EXPANDED_METADATA_LEN},\n msg_type::PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID,\n },\n note::note_interface::NoteType,\n utils::array,\n};\nuse crate::protocol::{address::AztecAddress, traits::{FromField, Packable, ToField}};\n\n/// The number of fields in a private note message content that are not the note's packed representation.\npub(crate) global PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN: u32 = 3;\npub(crate) global PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_OWNER_INDEX: u32 = 0;\npub(crate) global PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RANDOMNESS_INDEX: u32 = 1;\npub(crate) global PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NOTE_COMPLETION_LOG_TAG_INDEX: u32 = 2;\n\n/// Partial notes have a maximum packed length of their private fields bound by extra content in their private message\n/// (e.g. the storage slot, note completion log tag, etc.).\npub global MAX_PARTIAL_NOTE_PRIVATE_PACKED_LEN: u32 =\n MAX_MESSAGE_CONTENT_LEN - PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN;\n\n/// Creates the plaintext for a partial note private message (i.e. one of type [`PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID`]).\n///\n/// This plaintext is meant to be decoded via [`decode_partial_note_private_message`].\npub fn encode_partial_note_private_message<PartialNotePrivateContent>(\n partial_note_private_content: PartialNotePrivateContent,\n owner: AztecAddress,\n randomness: Field,\n note_completion_log_tag: Field,\n ) -> [Field; PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <PartialNotePrivateContent as Packable>::N + MESSAGE_EXPANDED_METADATA_LEN]\nwhere\n PartialNotePrivateContent: NoteType + Packable,\n{\n let packed_private_content = partial_note_private_content.pack();\n\n // If PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NON_NOTE_FIELDS_LEN is changed, causing the assertion below to fail, then\n // the encoding below must be updated as well.\n std::static_assert(\n PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN == 3,\n \"unexpected value for PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NON_NOTE_FIELDS_LEN\",\n );\n\n let mut msg_content =\n [0; PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + <PartialNotePrivateContent as Packable>::N];\n msg_content[PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_OWNER_INDEX] = owner.to_field();\n msg_content[PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RANDOMNESS_INDEX] = randomness;\n msg_content[PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NOTE_COMPLETION_LOG_TAG_INDEX] = note_completion_log_tag;\n\n for i in 0..packed_private_content.len() {\n msg_content[PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN + i] = packed_private_content[i];\n }\n\n encode_message(\n PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID,\n // Notes use the note type id for metadata\n PartialNotePrivateContent::get_id() as u64,\n msg_content,\n )\n}\n\n/// Decodes the plaintext from a partial note private message (i.e. one of type\n/// [`PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID`]).\n///\n/// Returns `None` if `msg_content` has too few fields. This plaintext is meant to have originated\n/// from [`encode_partial_note_private_message`].\n///\n/// Note that while [`encode_partial_note_private_message`] returns a fixed-size array, this function takes a\n/// [`BoundedVec`] instead. This is because when decoding we're typically processing runtime-sized plaintexts, more\n/// specifically, those that originate from\n/// [`crate::messages::encryption::message_encryption::MessageEncryption::decrypt`].\npub(crate) unconstrained fn decode_partial_note_private_message(\n msg_metadata: u64,\n msg_content: BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n) -> Option<(AztecAddress, Field, Field, Field, BoundedVec<Field, MAX_PARTIAL_NOTE_PRIVATE_PACKED_LEN>)> {\n if msg_content.len() < PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN {\n Option::none()\n } else {\n let note_type_id: Field = msg_metadata as Field; // TODO: make note type id not be a full field\n\n // If PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NON_NOTE_FIELDS_LEN is changed, causing the assertion below to fail,\n // then the destructuring of the partial note private message encoding below must be updated as well.\n std::static_assert(\n PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN == 3,\n \"unexpected value for PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NON_NOTE_FIELDS_LEN\",\n );\n\n // We currently have three fields that are not the partial note's packed representation, which are the owner,\n // the randomness, and the note completion log tag.\n let owner = AztecAddress::from_field(\n msg_content.get(PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_OWNER_INDEX),\n );\n let randomness = msg_content.get(PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RANDOMNESS_INDEX);\n let note_completion_log_tag = msg_content.get(PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_NOTE_COMPLETION_LOG_TAG_INDEX);\n\n let packed_private_note_content: BoundedVec<Field, MAX_PARTIAL_NOTE_PRIVATE_PACKED_LEN> = array::subbvec(\n msg_content,\n PARTIAL_NOTE_PRIVATE_MSG_PLAINTEXT_RESERVED_FIELDS_LEN,\n );\n\n Option::some(\n (owner, randomness, note_completion_log_tag, note_type_id, packed_private_note_content),\n )\n }\n}\n\nmod test {\n use crate::{\n messages::{\n encoding::decode_message,\n logs::partial_note::{decode_partial_note_private_message, encode_partial_note_private_message},\n msg_type::PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID,\n },\n note::note_interface::NoteType,\n };\n use crate::protocol::{address::AztecAddress, traits::{FromField, Packable}};\n use crate::test::mocks::mock_note::MockNote;\n\n global VALUE: Field = 7;\n global OWNER: AztecAddress = AztecAddress::from_field(8);\n global RANDOMNESS: Field = 10;\n global NOTE_COMPLETION_LOG_TAG: Field = 11;\n\n #[test]\n unconstrained fn encode_decode() {\n // Note that here we use MockNote as the private fields of a partial note\n let note = MockNote::new(VALUE).build_note();\n\n let message_plaintext = encode_partial_note_private_message(note, OWNER, RANDOMNESS, NOTE_COMPLETION_LOG_TAG);\n\n let (msg_type_id, msg_metadata, msg_content) =\n decode_message(BoundedVec::from_array(message_plaintext)).unwrap();\n\n assert_eq(msg_type_id, PARTIAL_NOTE_PRIVATE_MSG_TYPE_ID);\n\n let (owner, randomness, note_completion_log_tag, note_type_id, packed_note) =\n decode_partial_note_private_message(msg_metadata, msg_content).unwrap();\n\n assert_eq(note_type_id, MockNote::get_id());\n assert_eq(owner, OWNER);\n assert_eq(randomness, RANDOMNESS);\n assert_eq(note_completion_log_tag, NOTE_COMPLETION_LOG_TAG);\n assert_eq(packed_note, BoundedVec::from_array(note.pack()));\n }\n\n #[test]\n unconstrained fn decode_empty_content_returns_none() {\n let empty = BoundedVec::new();\n assert(decode_partial_note_private_message(0, empty).is_none());\n }\n\n #[test]\n unconstrained fn decode_succeeds_with_only_reserved_fields() {\n let content = BoundedVec::from_array([0, 0, 0]);\n let (_, _, _, _, packed_note) = decode_partial_note_private_message(0, content).unwrap();\n assert_eq(packed_note.len(), 0);\n }\n}\n"
|
|
896
642
|
},
|
|
897
643
|
"16": {
|
|
@@ -1175,148 +921,140 @@
|
|
|
1175
921
|
"start": 7003
|
|
1176
922
|
}
|
|
1177
923
|
],
|
|
1178
|
-
"path": "/home/
|
|
924
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/processing/mod.nr",
|
|
1179
925
|
"source": "pub(crate) mod event_validation_request;\npub mod offchain;\n\npub use crate::oracle::tx_resolution::ResolvedTx;\n\nmod note_validation_request;\npub use note_validation_request::NoteValidationRequest;\n\npub mod log_retrieval_request;\npub mod log_retrieval_response;\npub(crate) mod pending_tagged_log;\npub(crate) mod provided_secret;\n\nuse crate::{\n ephemeral::EphemeralArray,\n event::EventSelector,\n messages::{\n encoding::MESSAGE_CIPHERTEXT_LEN,\n logs::{event::MAX_EVENT_SERIALIZED_LEN, note::MAX_NOTE_PACKED_LEN},\n processing::{log_retrieval_request::LogRetrievalRequest, log_retrieval_response::LogRetrievalResponse},\n },\n oracle::message_processing,\n partial_notes::DeliveredPendingPartialNote,\n};\nuse crate::protocol::{\n address::AztecAddress,\n constants::DOM_SEP__NOTE_COMPLETION_LOG_TAG,\n hash::{compute_log_tag, sha256_to_field},\n traits::{Deserialize, Serialize},\n};\nuse event_validation_request::EventValidationRequest;\n\nglobal NOTE_VALIDATION_REQUESTS_ARRAY_BASE_SLOT: Field = sha256_to_field(\n \"AZTEC_NR::NOTE_VALIDATION_REQUESTS_ARRAY_BASE_SLOT\".as_bytes(),\n);\n\nglobal EVENT_VALIDATION_REQUESTS_ARRAY_BASE_SLOT: Field = sha256_to_field(\n \"AZTEC_NR::EVENT_VALIDATION_REQUESTS_ARRAY_BASE_SLOT\".as_bytes(),\n);\n\nglobal LOG_RETRIEVAL_REQUESTS_ARRAY_BASE_SLOT: Field = sha256_to_field(\n \"AZTEC_NR::LOG_RETRIEVAL_REQUESTS_ARRAY_BASE_SLOT\".as_bytes(),\n);\n\n/// An offchain-delivered message with resolved context, ready for processing during sync.\n#[derive(Serialize, Deserialize)]\npub struct OffchainMessageWithTx {\n pub message_ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n pub resolved_tx: ResolvedTx,\n}\n\n/// Enqueues a note for validation and storage by PXE.\n///\n/// Once validated, the note becomes retrievable via the `get_notes` oracle. The note will be scoped to\n/// `contract_address`, meaning other contracts will not be able to access it unless authorized.\n///\n/// In order for the note validation and insertion to occur, `validate_and_store_enqueued_notes_and_events` must be\n/// later called. For optimal performance, accumulate as many note validation requests as possible and then validate\n/// them all at the end (which results in PXE minimizing the number of network round-trips).\n///\n/// The `packed_note` is what `getNotes` will later return. PXE indexes notes by `storage_slot`, so this value is\n/// typically used to filter notes that correspond to different state variables. `note_hash` and `nullifier` are the\n/// inner hashes, i.e. the raw hashes returned by `NoteHash::compute_note_hash` and `NoteHash::compute_nullifier`. PXE\n/// will verify that the siloed unique note hash was inserted into the tree at `tx_hash`, and will store the nullifier\n/// to later check for nullification.\n///\n/// `owner` is the address used in note hash and nullifier computation, often requiring knowledge of their nullifier\n/// secret key.\n///\n/// `scope` is the account to which the note message was delivered (i.e. the address the message was encrypted to).\n/// This determines which PXE account can see the note - other accounts will not be able to access it (e.g. other\n/// accounts will not be able to see one another's token balance notes, even in the same PXE) unless authorized. In\n/// most cases `recipient` equals `owner`, but they can differ in scenarios like delegated discovery.\npub unconstrained fn enqueue_note_for_validation(\n contract_address: AztecAddress,\n owner: AztecAddress,\n storage_slot: Field,\n randomness: Field,\n note_nonce: Field,\n packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n note_hash: Field,\n nullifier: Field,\n tx_hash: Field,\n) {\n EphemeralArray::at(NOTE_VALIDATION_REQUESTS_ARRAY_BASE_SLOT).push(NoteValidationRequest::new(\n contract_address,\n owner,\n storage_slot,\n randomness,\n note_nonce,\n packed_note,\n note_hash,\n nullifier,\n tx_hash,\n ))\n}\n\n/// Enqueues an event for validation and storage by PXE.\n///\n/// This is the primary way for custom message handlers (registered via\n/// [`crate::macros::AztecConfig::custom_message_handler`]) to deliver reassembled events back to PXE after processing\n/// application-specific message formats.\n///\n/// In order for the event validation and insertion to occur, `validate_and_store_enqueued_notes_and_events` must be\n/// later called. For optimal performance, accumulate as many event validation requests as possible and then validate\n/// them all at the end (which results in PXE minimizing the number of network round-trips).\n///\n/// Note that `validate_and_store_enqueued_notes_and_events` is called by Aztec.nr after processing messages, so custom\n/// message processors do not need to be concerned with this.\npub unconstrained fn enqueue_event_for_validation(\n contract_address: AztecAddress,\n event_type_id: EventSelector,\n randomness: Field,\n serialized_event: BoundedVec<Field, MAX_EVENT_SERIALIZED_LEN>,\n event_commitment: Field,\n tx_hash: Field,\n) {\n EphemeralArray::at(EVENT_VALIDATION_REQUESTS_ARRAY_BASE_SLOT).push(EventValidationRequest::new(\n contract_address,\n event_type_id,\n randomness,\n serialized_event,\n event_commitment,\n tx_hash,\n ))\n}\n\n/// Validates and stores all enqueued notes and events.\n///\n/// Processes all requests enqueued via [`enqueue_note_for_validation`] and [`enqueue_event_for_validation`], inserting\n/// them into the note database and event store respectively, making them queryable via `get_notes` oracle and our TS\n/// API (PXE::getPrivateEvents).\npub unconstrained fn validate_and_store_enqueued_notes_and_events(scope: AztecAddress) {\n message_processing::validate_and_store_enqueued_notes_and_events(\n EphemeralArray::at(NOTE_VALIDATION_REQUESTS_ARRAY_BASE_SLOT),\n EphemeralArray::at(EVENT_VALIDATION_REQUESTS_ARRAY_BASE_SLOT),\n scope,\n );\n\n // Defensive clearing: purge the queues after processing to prevent double-processing if this function is called\n // more than once in the same call frame. It is currently defensive because we only call this once per sync run.\n let _ = EphemeralArray::<NoteValidationRequest>::at(NOTE_VALIDATION_REQUESTS_ARRAY_BASE_SLOT).clear();\n let _ = EphemeralArray::<EventValidationRequest>::at(EVENT_VALIDATION_REQUESTS_ARRAY_BASE_SLOT).clear();\n}\n\n/// Efficiently queries the node for logs that result in the completion of all `DeliveredPendingPartialNote`s in an\n/// `EphemeralArray` by performing all node communication concurrently. Returns a nested `EphemeralArray`, one inner\n/// array per pending partial note, each containing all matching `LogRetrievalResponse`s (which may be empty if no\n/// logs were found).\npub(crate) unconstrained fn get_pending_partial_notes_completion_logs(\n contract_address: AztecAddress,\n pending_partial_notes: EphemeralArray<DeliveredPendingPartialNote>,\n) -> EphemeralArray<EphemeralArray<LogRetrievalResponse>> {\n let log_retrieval_requests = EphemeralArray::at(LOG_RETRIEVAL_REQUESTS_ARRAY_BASE_SLOT);\n\n pending_partial_notes.for_each(|_i, pending_partial_note| {\n // Partial note completion logs are emitted with a domain-separated tag. To find matching logs, we apply the\n // same domain separation to the stored raw tag.\n let log_tag = compute_log_tag(\n pending_partial_note.note_completion_log_tag,\n DOM_SEP__NOTE_COMPLETION_LOG_TAG,\n );\n log_retrieval_requests.push(LogRetrievalRequest::new(contract_address, log_tag));\n });\n\n let responses = message_processing::get_logs_by_tag(log_retrieval_requests);\n\n // Defensive clearing: prevent stale requests if this function is called more than once in the same call frame.\n let _ = log_retrieval_requests.clear();\n\n responses\n}\n"
|
|
1180
926
|
},
|
|
1181
927
|
"163": {
|
|
1182
928
|
"function_locations": [
|
|
1183
929
|
{
|
|
1184
930
|
"name": "receive",
|
|
1185
|
-
"start":
|
|
931
|
+
"start": 2673
|
|
1186
932
|
},
|
|
1187
933
|
{
|
|
1188
934
|
"name": "sync_inbox",
|
|
1189
|
-
"start":
|
|
935
|
+
"start": 3451
|
|
1190
936
|
},
|
|
1191
937
|
{
|
|
1192
938
|
"name": "test::setup",
|
|
1193
|
-
"start":
|
|
939
|
+
"start": 5230
|
|
1194
940
|
},
|
|
1195
941
|
{
|
|
1196
942
|
"name": "test::make_msg",
|
|
1197
|
-
"start":
|
|
943
|
+
"start": 5560
|
|
1198
944
|
},
|
|
1199
945
|
{
|
|
1200
946
|
"name": "test::advance_by",
|
|
1201
|
-
"start":
|
|
947
|
+
"start": 5843
|
|
1202
948
|
},
|
|
1203
949
|
{
|
|
1204
950
|
"name": "test::empty_inbox_returns_empty_result",
|
|
1205
|
-
"start":
|
|
951
|
+
"start": 6034
|
|
1206
952
|
},
|
|
1207
953
|
{
|
|
1208
954
|
"name": "test::multiple_messages_mixed_expiration",
|
|
1209
|
-
"start":
|
|
1210
|
-
},
|
|
1211
|
-
{
|
|
1212
|
-
"name": "test::accepts_messages_within_the_tolerated_future_skew",
|
|
1213
|
-
"start": 9172
|
|
1214
|
-
},
|
|
1215
|
-
{
|
|
1216
|
-
"name": "test::rejects_batch_with_implausible_future_anchor",
|
|
1217
|
-
"start": 10197
|
|
955
|
+
"start": 6422
|
|
1218
956
|
},
|
|
1219
957
|
{
|
|
1220
958
|
"name": "test::redelivery_is_idempotent",
|
|
1221
|
-
"start":
|
|
959
|
+
"start": 8404
|
|
1222
960
|
},
|
|
1223
961
|
{
|
|
1224
962
|
"name": "test::redelivery_after_processing_keeps_processed_guard",
|
|
1225
|
-
"start":
|
|
963
|
+
"start": 9269
|
|
1226
964
|
}
|
|
1227
965
|
],
|
|
1228
|
-
"path": "/home/
|
|
1229
|
-
"source": "use crate::{\n context::UtilityContext,\n ephemeral::EphemeralArray,\n messages::{encoding::MESSAGE_CIPHERTEXT_LEN, processing::OffchainMessageWithTx},\n oracle::{contract_sync::set_contract_sync_cache_invalid, tx_resolution::get_resolved_txs},\n protocol::{address::AztecAddress, traits::{Deserialize, Serialize}},\n};\n\nmod reception;\nuse reception::{MAX_ANCHOR_FUTURE_SKEW, OffchainReception};\n\n/// Maximum number of offchain messages accepted by `offchain_receive` in a single call.\npub global MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL: u32 = 16;\n\n/// A function that manages offchain-delivered messages for processing during sync.\n///\n/// Offchain messages are messages that are not broadcasted via onchain logs. They are instead delivered to the\n/// recipient by calling the `offchain_receive` utility function (injected by the `#[aztec]` macro). Message transport\n/// is the app's responsibility. Typical examples of transport methods are: messaging apps, email, QR codes, etc.\n///\n/// Once offchain messages are delivered to the recipient's private environment via `offchain_receive`, messages are\n/// locally stored in a persistent inbox.\n///\n/// This function determines when each message in said inbox is ready for processing, when it can be safely disposed\n/// of, etc.\n///\n/// The only current implementation of an [`OffchainInboxSync`] is [`sync_inbox`], which manages an inbox with\n/// expiration and finality-based eviction and automatic transaction context resolution.\npub type OffchainInboxSync = unconstrained fn(\n/* contract_address */AztecAddress, /* scope */ AztecAddress) -> EphemeralArray<OffchainMessageWithTx>;\n\n/// Delivers offchain messages to the given contract's offchain inbox for subsequent processing.\n///\n/// Offchain messages are transaction effects that are not broadcasted via onchain logs. Instead, the sender shares the\n/// message to the recipient through an external channel (e.g. a URL accessible by the recipient). The recipient then\n/// calls this function to hand the messages to the contract so they can be processed through the same mechanisms as\n/// onchain messages.\n///\n/// Messages are processed when their originating transaction is found onchain (providing the context needed to\n/// validate resulting notes and events).\n///\n/// Messages are eventually removed from the inbox: an unprocessed message once its TTL (`anchor_block_timestamp +\n/// MAX_MSG_TTL`) elapses, and a processed message once the block its transaction was found in finalizes.\n///\n/// Processing order is not guaranteed.\npub unconstrained fn receive(\n contract_address: AztecAddress,\n messages: BoundedVec<OffchainMessage, MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL>,\n) {\n // Offchain reception facts are scoped to the recipient. Note that because offchain messages have no integrity or\n // authenticity checks it is not possible to verify that this is indeed the intended recipient. In this case we're\n // assuming a cooperative environment, which is on par with other offchain delivery expectations.\n //\n // The sender-supplied anchor timestamp is the one field we bound: a message claiming to originate implausibly far\n // in our future (see MAX_ANCHOR_FUTURE_SKEW) cannot be genuine, and accepting it would let a malicious anchor evade\n // the TTL-based inbox eviction. We reject such a batch by panicking instead of silently dropping the message, so\n // the calling wallet can react to it (e.g. surface the error or distrust the sender).\n let now = UtilityContext::new().timestamp();\n messages.for_each(|msg| {\n assert(\n msg.anchor_block_timestamp <= now + MAX_ANCHOR_FUTURE_SKEW,\n \"offchain message anchor timestamp is implausibly far in the future\",\n );\n });\n\n messages.for_each(|msg| OffchainReception::init(contract_address, msg));\n\n // Clear cache for message recipients so the next sync runs.\n set_contract_sync_cache_invalid(contract_address, messages.map(|msg| msg.recipient));\n}\n\n/// Returns offchain-delivered messages to process during sync.\npub unconstrained fn sync_inbox(\n contract_address: AztecAddress,\n scope: AztecAddress,\n) -> EphemeralArray<OffchainMessageWithTx> {\n let active_receptions = OffchainReception::load_all(contract_address, scope);\n\n // Ask PXE to resolve each message's originating tx. We pass the tx hashes in reception order, so the resolved txs\n // come back aligned with the reception indices and can be matched back positionally.\n let resolved_txs = get_resolved_txs(active_receptions.map(|reception: OffchainReception| {\n reception.read_message().tx_hash.unwrap_or(0)\n }));\n\n let processable_messages: EphemeralArray<OffchainMessageWithTx> = EphemeralArray::empty();\n let now = UtilityContext::new().timestamp();\n\n active_receptions.for_each(|i, reception| {\n let maybe_message = reception.step(resolved_txs.get(i), now);\n if maybe_message.is_some() {\n processable_messages.push(maybe_message.unwrap());\n }\n });\n\n processable_messages\n}\n\n/// A message delivered via the `offchain_receive` utility function.\n#[derive(Serialize, Deserialize)]\npub struct OffchainMessage {\n /// The encrypted message payload.\n pub ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n /// The intended recipient of the message.\n pub recipient: AztecAddress,\n /// The hash of the transaction that produced this message. `Option::none` indicates a tx-less message.\n pub tx_hash: Option<Field>,\n /// Anchor block timestamp at message emission.\n pub anchor_block_timestamp: u64,\n}\n\nmod test {\n use crate::{\n oracle::random::random,\n protocol::{address::AztecAddress, constants::MAX_TX_LIFETIME},\n test::helpers::test_environment::TestEnvironment,\n };\n use super::{MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL, OffchainMessage, receive, sync_inbox};\n use super::reception::{MAX_ANCHOR_FUTURE_SKEW, MAX_MSG_TTL, OffchainReception};\n\n unconstrained fn setup() -> (TestEnvironment, AztecAddress) {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n (env, scope)\n }\n\n /// Creates an `OffchainMessage` with dummy ciphertext and the given scope as recipient.\n fn make_msg(recipient: AztecAddress, tx_hash: Option<Field>, anchor_block_timestamp: u64) -> OffchainMessage {\n OffchainMessage { ciphertext: BoundedVec::new(), recipient, tx_hash, anchor_block_timestamp }\n }\n\n /// Advances the TXE block timestamp by `offset` seconds and returns the resulting timestamp.\n unconstrained fn advance_by(env: TestEnvironment, offset: u64) -> u64 {\n env.advance_next_block_timestamp_by(offset);\n env.mine_block();\n env.last_block_timestamp()\n }\n\n #[test]\n unconstrained fn empty_inbox_returns_empty_result() {\n let (env, scope) = setup();\n env.utility_context(|context| {\n let address = context.this_address();\n let result = sync_inbox(address, scope);\n\n assert_eq(result.len(), 0);\n assert_eq(OffchainReception::load_all(address, scope).len(), 0);\n });\n }\n\n #[test]\n unconstrained fn multiple_messages_mixed_expiration() {\n let (env, scope) = setup();\n let anchor_ts = advance_by(env, 10);\n\n let expired_a_tx_hash = random();\n let survivor_tx_hash = random();\n\n let expired_a = make_msg(scope, Option::some(expired_a_tx_hash), 0);\n let survivor = make_msg(scope, Option::some(survivor_tx_hash), anchor_ts);\n let expired_b = make_msg(scope, Option::none(), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n let mut msgs: BoundedVec<OffchainMessage, MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL> = BoundedVec::new();\n // Message 0: tx-bound, anchor=0 so it expires quickly.\n msgs.push(expired_a);\n // Message 1: tx-bound, anchor_ts is recent so it survives.\n msgs.push(survivor);\n // Message 2: tx-less, anchor=0 so it also expires.\n msgs.push(expired_b);\n receive(address, msgs);\n });\n\n // Advance past MAX_MSG_TTL for anchor=0, but not for anchor_ts.\n let _now = advance_by(env, MAX_MSG_TTL);\n\n env.utility_context(|context| {\n let address = context.this_address();\n let result = sync_inbox(address, scope);\n\n assert_eq(result.len(), 0); // all contexts are None\n assert(\n !OffchainReception::is_active(address, scope, expired_a),\n \"expired tx-bound reception should be terminated\",\n );\n assert(\n !OffchainReception::is_active(address, scope, expired_b),\n \"expired tx-less reception should be terminated\",\n );\n assert(OffchainReception::is_active(address, scope, survivor), \"survivor reception should stay active\");\n assert_eq(OffchainReception::load_all(address, scope).len(), 1);\n });\n }\n\n #[test]\n unconstrained fn accepts_messages_within_the_tolerated_future_skew() {\n let (env, scope) = setup();\n let now = advance_by(env, 10);\n\n // A present-dated anchor and a 24h-future one both fall within the tolerated skew. The latter models a genuine\n // message whose sender anchored ahead of our lagging PXE, and must still be accepted.\n let present = make_msg(scope, Option::some(random()), now);\n let lagged = make_msg(scope, Option::some(random()), now + MAX_TX_LIFETIME);\n\n env.utility_context(|context| {\n let address = context.this_address();\n receive(address, BoundedVec::from_array([present, lagged]));\n\n assert(OffchainReception::is_active(address, scope, present));\n assert(OffchainReception::is_active(address, scope, lagged));\n assert_eq(OffchainReception::load_all(address, scope).len(), 2);\n });\n }\n\n #[test(should_fail_with = \"offchain message anchor timestamp is implausibly far in the future\")]\n unconstrained fn rejects_batch_with_implausible_future_anchor() {\n let (env, scope) = setup();\n let now = advance_by(env, 10);\n\n // Beyond `now + MAX_ANCHOR_FUTURE_SKEW`: our view would trail the tip by more than a tx lifetime, so this\n // cannot be genuine. Reception panics so the wallet can react rather than accept it.\n let too_future = make_msg(\n scope,\n Option::some(random()),\n now + MAX_ANCHOR_FUTURE_SKEW + 7200,\n );\n\n env.utility_context(|context| { receive(context.this_address(), BoundedVec::from_array([too_future])); });\n }\n\n // -- Idempotent re-delivery (first-write-wins fact recording) ---------\n\n #[test]\n unconstrained fn redelivery_is_idempotent() {\n let (env, scope) = setup();\n let anchor_ts = advance_by(env, 10);\n let msg = make_msg(scope, Option::some(random()), anchor_ts);\n\n // First delivery, committed as its own job.\n env.utility_context(|context| { receive(context.this_address(), BoundedVec::from_array([msg])); });\n\n // Re-delivering the same content-addressed message must not panic and must not create a second reception.\n env.utility_context(|context| {\n let address = context.this_address();\n receive(address, BoundedVec::from_array([msg]));\n\n assert(OffchainReception::is_active(address, scope, msg), \"reception should be active\");\n assert_eq(OffchainReception::load_all(address, scope).len(), 1);\n });\n }\n\n #[test]\n unconstrained fn redelivery_after_processing_keeps_processed_guard() {\n let (env, scope) = setup();\n let known_tx_hash: Field = 1;\n let anchor_ts = advance_by(env, 10);\n let msg = make_msg(scope, Option::some(known_tx_hash), anchor_ts);\n\n env.utility_context(|context| { receive(context.this_address(), BoundedVec::from_array([msg])); });\n\n let _now = advance_by(env, 100);\n\n // First sync resolves the message and marks it as processed.\n env.utility_context(|context| {\n let address = context.this_address();\n assert_eq(sync_inbox(address, scope).len(), 1);\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n });\n\n // Re-deliver the same message. The next sync recognizes it as already processed and does not re-push it.\n env.utility_context(|context| {\n let address = context.this_address();\n receive(address, BoundedVec::from_array([msg]));\n\n assert(\n OffchainReception::is_processed(address, scope, msg),\n \"re-delivery must preserve the processed guard\",\n );\n assert_eq(sync_inbox(address, scope).len(), 0);\n });\n }\n}\n"
|
|
966
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/processing/offchain/mod.nr",
|
|
967
|
+
"source": "use crate::{\n context::UtilityContext,\n ephemeral::EphemeralArray,\n messages::{encoding::MESSAGE_CIPHERTEXT_LEN, processing::OffchainMessageWithTx},\n oracle::{contract_sync::set_contract_sync_cache_invalid, tx_resolution::get_resolved_txs},\n protocol::{address::AztecAddress, traits::{Deserialize, Serialize}},\n};\n\nmod reception;\nuse reception::OffchainReception;\n\n/// Maximum number of offchain messages accepted by `offchain_receive` in a single call.\npub global MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL: u32 = 16;\n\n/// A function that manages offchain-delivered messages for processing during sync.\n///\n/// Offchain messages are messages that are not broadcasted via onchain logs. They are instead delivered to the\n/// recipient by calling the `offchain_receive` utility function (injected by the `#[aztec]` macro). Message transport\n/// is the app's responsibility. Typical examples of transport methods are: messaging apps, email, QR codes, etc.\n///\n/// Once offchain messages are delivered to the recipient's private environment via `offchain_receive`, messages are\n/// locally stored in a persistent inbox.\n///\n/// This function determines when each message in said inbox is ready for processing, when it can be safely disposed\n/// of, etc.\n///\n/// The only current implementation of an [`OffchainInboxSync`] is [`sync_inbox`], which manages an inbox with\n/// expiration and finality-based eviction and automatic transaction context resolution.\npub type OffchainInboxSync = unconstrained fn(\n/* contract_address */AztecAddress, /* scope */ AztecAddress) -> EphemeralArray<OffchainMessageWithTx>;\n\n/// Delivers offchain messages to the given contract's offchain inbox for subsequent processing.\n///\n/// Offchain messages are transaction effects that are not broadcasted via onchain logs. Instead, the sender shares the\n/// message to the recipient through an external channel (e.g. a URL accessible by the recipient). The recipient then\n/// calls this function to hand the messages to the contract so they can be processed through the same mechanisms as\n/// onchain messages.\n///\n/// Messages are processed when their originating transaction is found onchain (providing the context needed to\n/// validate resulting notes and events).\n///\n/// Messages are eventually removed from the inbox: an unprocessed message once its TTL (`anchor_block_timestamp +\n/// MAX_MSG_TTL`) elapses, and a processed message once the block its transaction was found in finalizes.\n///\n/// Processing order is not guaranteed.\npub unconstrained fn receive(\n contract_address: AztecAddress,\n messages: BoundedVec<OffchainMessage, MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL>,\n) {\n // Offchain reception facts are scoped to the recipient. Note that because offchain messages have no integrity or\n // authenticity checks it is not possible to verify that this is indeed the intended recipient. In this case we're\n // assuming a cooperative environment, which is on par with other offchain delivery expectations.\n messages.for_each(|msg| OffchainReception::init(contract_address, msg));\n\n // Clear cache for message recipients so the next sync runs.\n set_contract_sync_cache_invalid(contract_address, messages.map(|msg| msg.recipient));\n}\n\n/// Returns offchain-delivered messages to process during sync.\npub unconstrained fn sync_inbox(\n contract_address: AztecAddress,\n scope: AztecAddress,\n) -> EphemeralArray<OffchainMessageWithTx> {\n let active_receptions = OffchainReception::load_all(contract_address, scope);\n\n // Ask PXE to resolve each message's originating tx. We pass the tx hashes in reception order, so the resolved txs\n // come back aligned with the reception indices and can be matched back positionally.\n let resolved_txs = get_resolved_txs(active_receptions.map(|reception: OffchainReception| {\n reception.read_message().tx_hash.unwrap_or(0)\n }));\n\n let processable_messages: EphemeralArray<OffchainMessageWithTx> = EphemeralArray::empty();\n let now = UtilityContext::new().timestamp();\n\n active_receptions.for_each(|i, reception| {\n let maybe_message = reception.step(resolved_txs.get(i), now);\n if maybe_message.is_some() {\n processable_messages.push(maybe_message.unwrap());\n }\n });\n\n processable_messages\n}\n\n/// A message delivered via the `offchain_receive` utility function.\n#[derive(Serialize, Deserialize)]\npub struct OffchainMessage {\n /// The encrypted message payload.\n pub ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n /// The intended recipient of the message.\n pub recipient: AztecAddress,\n /// The hash of the transaction that produced this message. `Option::none` indicates a tx-less message.\n pub tx_hash: Option<Field>,\n /// Anchor block timestamp at message emission.\n pub anchor_block_timestamp: u64,\n}\n\nmod test {\n use crate::{\n oracle::random::random, protocol::address::AztecAddress, test::helpers::test_environment::TestEnvironment,\n };\n use super::{MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL, OffchainMessage, receive, sync_inbox};\n use super::reception::{MAX_MSG_TTL, OffchainReception};\n\n unconstrained fn setup() -> (TestEnvironment, AztecAddress) {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n (env, scope)\n }\n\n /// Creates an `OffchainMessage` with dummy ciphertext and the given scope as recipient.\n fn make_msg(recipient: AztecAddress, tx_hash: Option<Field>, anchor_block_timestamp: u64) -> OffchainMessage {\n OffchainMessage { ciphertext: BoundedVec::new(), recipient, tx_hash, anchor_block_timestamp }\n }\n\n /// Advances the TXE block timestamp by `offset` seconds and returns the resulting timestamp.\n unconstrained fn advance_by(env: TestEnvironment, offset: u64) -> u64 {\n env.advance_next_block_timestamp_by(offset);\n env.mine_block();\n env.last_block_timestamp()\n }\n\n #[test]\n unconstrained fn empty_inbox_returns_empty_result() {\n let (env, scope) = setup();\n env.utility_context(|context| {\n let address = context.this_address();\n let result = sync_inbox(address, scope);\n\n assert_eq(result.len(), 0);\n assert_eq(OffchainReception::load_all(address, scope).len(), 0);\n });\n }\n\n #[test]\n unconstrained fn multiple_messages_mixed_expiration() {\n let (env, scope) = setup();\n let anchor_ts = advance_by(env, 10);\n\n let expired_a_tx_hash = random();\n let survivor_tx_hash = random();\n\n let expired_a = make_msg(scope, Option::some(expired_a_tx_hash), 0);\n let survivor = make_msg(scope, Option::some(survivor_tx_hash), anchor_ts);\n let expired_b = make_msg(scope, Option::none(), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n let mut msgs: BoundedVec<OffchainMessage, MAX_OFFCHAIN_MESSAGES_PER_RECEIVE_CALL> = BoundedVec::new();\n // Message 0: tx-bound, anchor=0 so it expires quickly.\n msgs.push(expired_a);\n // Message 1: tx-bound, anchor_ts is recent so it survives.\n msgs.push(survivor);\n // Message 2: tx-less, anchor=0 so it also expires.\n msgs.push(expired_b);\n receive(address, msgs);\n });\n\n // Advance past MAX_MSG_TTL for anchor=0, but not for anchor_ts.\n let _now = advance_by(env, MAX_MSG_TTL);\n\n env.utility_context(|context| {\n let address = context.this_address();\n let result = sync_inbox(address, scope);\n\n assert_eq(result.len(), 0); // all contexts are None\n assert(\n !OffchainReception::is_active(address, scope, expired_a),\n \"expired tx-bound reception should be terminated\",\n );\n assert(\n !OffchainReception::is_active(address, scope, expired_b),\n \"expired tx-less reception should be terminated\",\n );\n assert(OffchainReception::is_active(address, scope, survivor), \"survivor reception should stay active\");\n assert_eq(OffchainReception::load_all(address, scope).len(), 1);\n });\n }\n\n // -- Idempotent re-delivery (first-write-wins fact recording) ---------\n\n #[test]\n unconstrained fn redelivery_is_idempotent() {\n let (env, scope) = setup();\n let anchor_ts = advance_by(env, 10);\n let msg = make_msg(scope, Option::some(random()), anchor_ts);\n\n // First delivery, committed as its own job.\n env.utility_context(|context| { receive(context.this_address(), BoundedVec::from_array([msg])); });\n\n // Re-delivering the same content-addressed message must not panic and must not create a second reception.\n env.utility_context(|context| {\n let address = context.this_address();\n receive(address, BoundedVec::from_array([msg]));\n\n assert(OffchainReception::is_active(address, scope, msg), \"reception should be active\");\n assert_eq(OffchainReception::load_all(address, scope).len(), 1);\n });\n }\n\n #[test]\n unconstrained fn redelivery_after_processing_keeps_processed_guard() {\n let (env, scope) = setup();\n let known_tx_hash: Field = 1;\n let anchor_ts = advance_by(env, 10);\n let msg = make_msg(scope, Option::some(known_tx_hash), anchor_ts);\n\n env.utility_context(|context| { receive(context.this_address(), BoundedVec::from_array([msg])); });\n\n let _now = advance_by(env, 100);\n\n // First sync resolves the message and marks it as processed.\n env.utility_context(|context| {\n let address = context.this_address();\n assert_eq(sync_inbox(address, scope).len(), 1);\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n });\n\n // Re-deliver the same message. The next sync recognizes it as already processed and does not re-push it.\n env.utility_context(|context| {\n let address = context.this_address();\n receive(address, BoundedVec::from_array([msg]));\n\n assert(\n OffchainReception::is_processed(address, scope, msg),\n \"re-delivery must preserve the processed guard\",\n );\n assert_eq(sync_inbox(address, scope).len(), 0);\n });\n }\n}\n"
|
|
1230
968
|
},
|
|
1231
969
|
"164": {
|
|
1232
970
|
"function_locations": [
|
|
1233
971
|
{
|
|
1234
972
|
"name": "OffchainReception::init",
|
|
1235
|
-
"start":
|
|
973
|
+
"start": 8657
|
|
1236
974
|
},
|
|
1237
975
|
{
|
|
1238
976
|
"name": "OffchainReception::load_all",
|
|
1239
|
-
"start":
|
|
977
|
+
"start": 9175
|
|
1240
978
|
},
|
|
1241
979
|
{
|
|
1242
980
|
"name": "OffchainReception::read_message",
|
|
1243
|
-
"start":
|
|
981
|
+
"start": 9524
|
|
1244
982
|
},
|
|
1245
983
|
{
|
|
1246
984
|
"name": "OffchainReception::id_for",
|
|
1247
|
-
"start":
|
|
985
|
+
"start": 10225
|
|
1248
986
|
},
|
|
1249
987
|
{
|
|
1250
988
|
"name": "OffchainReception::is_active",
|
|
1251
|
-
"start":
|
|
989
|
+
"start": 10544
|
|
1252
990
|
},
|
|
1253
991
|
{
|
|
1254
992
|
"name": "OffchainReception::step",
|
|
1255
|
-
"start":
|
|
993
|
+
"start": 11199
|
|
1256
994
|
},
|
|
1257
995
|
{
|
|
1258
996
|
"name": "OffchainReception::is_processed",
|
|
1259
|
-
"start":
|
|
997
|
+
"start": 12804
|
|
1260
998
|
},
|
|
1261
999
|
{
|
|
1262
1000
|
"name": "OffchainReception::mark_processed",
|
|
1263
|
-
"start":
|
|
1001
|
+
"start": 13372
|
|
1264
1002
|
},
|
|
1265
1003
|
{
|
|
1266
1004
|
"name": "OffchainReception::terminate",
|
|
1267
|
-
"start":
|
|
1005
|
+
"start": 13940
|
|
1268
1006
|
},
|
|
1269
1007
|
{
|
|
1270
1008
|
"name": "to_payload",
|
|
1271
|
-
"start":
|
|
1009
|
+
"start": 14314
|
|
1272
1010
|
},
|
|
1273
1011
|
{
|
|
1274
1012
|
"name": "test::setup",
|
|
1275
|
-
"start":
|
|
1013
|
+
"start": 14871
|
|
1276
1014
|
},
|
|
1277
1015
|
{
|
|
1278
1016
|
"name": "test::make_msg",
|
|
1279
|
-
"start":
|
|
1017
|
+
"start": 15201
|
|
1280
1018
|
},
|
|
1281
1019
|
{
|
|
1282
1020
|
"name": "test::resolved_tx_at_block",
|
|
1283
|
-
"start":
|
|
1021
|
+
"start": 15485
|
|
1284
1022
|
},
|
|
1285
1023
|
{
|
|
1286
1024
|
"name": "test::resolved_tx",
|
|
1287
|
-
"start":
|
|
1025
|
+
"start": 15876
|
|
1288
1026
|
},
|
|
1289
1027
|
{
|
|
1290
1028
|
"name": "test::expired_reception_is_terminated",
|
|
1291
|
-
"start":
|
|
1029
|
+
"start": 15993
|
|
1292
1030
|
},
|
|
1293
1031
|
{
|
|
1294
1032
|
"name": "test::unresolved_reception_stays_active",
|
|
1295
|
-
"start":
|
|
1033
|
+
"start": 16675
|
|
1296
1034
|
},
|
|
1297
1035
|
{
|
|
1298
1036
|
"name": "test::resolved_reception_is_ready_to_process",
|
|
1299
|
-
"start":
|
|
1037
|
+
"start": 17470
|
|
1300
1038
|
},
|
|
1301
1039
|
{
|
|
1302
1040
|
"name": "test::already_processed_reception_is_not_re_pushed",
|
|
1303
|
-
"start":
|
|
1041
|
+
"start": 18516
|
|
1304
1042
|
},
|
|
1305
1043
|
{
|
|
1306
1044
|
"name": "test::processed_reception_terminates_once_its_origin_block_finalizes",
|
|
1307
|
-
"start":
|
|
1045
|
+
"start": 19890
|
|
1308
1046
|
},
|
|
1309
1047
|
{
|
|
1310
1048
|
"name": "test::unfinalized_processed_reception_survives_past_the_ttl",
|
|
1311
|
-
"start":
|
|
1049
|
+
"start": 21115
|
|
1312
1050
|
},
|
|
1313
1051
|
{
|
|
1314
1052
|
"name": "test::expired_reception_is_still_processed_when_its_tx_resolves",
|
|
1315
|
-
"start":
|
|
1053
|
+
"start": 22505
|
|
1316
1054
|
}
|
|
1317
1055
|
],
|
|
1318
|
-
"path": "/home/
|
|
1319
|
-
"source": "//! The state machine of a single offchain message reception process.\n//!\n//! Offchain processing needs to handle some complexity, including the possibility of reorgs reverting message effects,\n//! and the need to reprocess messages in that case. The state chart below summarizes the current behavior.\n//!\n//! ```text\n//! offchain_receive() (process starts)\n//! |\n//! v\n//! +-----------+ tx found onchain +-----------+\n//! ---- | | --------------------------> | |\n//! tx not found | | | | | discover notes,\n//! |--> | RECEIVED | | PROCESSED | ~~> events, etc\n//! | | <-------------------------- | |\n//! | | tx block re-orged | |\n//! +-----------+ +-----------+\n//! | |\n//! | TTL expired | tx block finalized\n//! v v\n//! +---------------------------------------------------------+\n//! | TERMINATED (process ends) |\n//! +---------------------------------------------------------+\n//! ```\n//!\n//! ## States\n//!\n//! - **Received**: the message is stored but its originating transaction has not been found onchain yet (or the\n//! message is tx-less; see below). While the reception process is in this state, it keeps looking for the\n// transaction onchain.\n//! - **Processed**: the message has been handed off for processing. If there weren't reorgs, reaching this state would\n//! be equivalent to terminating the reception process. Since reorgs are a possibility, this state is not terminal\n//! until the block the originating transaction was found in finalizes.\n//! - **Terminated**: nothing else can be done with the message, either because its originating transaction never\n//! appeared within the TTL, or because the block it was processed in has finalized. This is the terminal state of\n//! this process.\n//!\n//! ## Transitions (each evaluated by [`OffchainReception::step`])\n//!\n//! - **Received -> Processed**: the originating transaction is found onchain. The message (packaged with its\n//! transaction context) is queued to have its actual contents processed (which can lead for example to the discovery\n//! of notes and events).\n//! - **Processed -> Received**: the block where the message transaction was originally found is re-orged out.\n//! - **Received -> Terminated**: the message TTL has elapsed (see below), so the originating transaction can no longer\n//! appear and the message is no longer processable.\n//! - **Processed -> Terminated**: the block the originating transaction was found in has finalized, so the effects of\n//! its processing are permanent and reorg-proof.\n//!\n//! # Message reception lifecycle and the TTL\n//!\n//! A reception expires once `now > anchor_block_timestamp + MAX_MSG_TTL`, where `MAX_MSG_TTL = MAX_TX_LIFETIME + 2h`.\n//! A transaction anchored at a given block can only be mined within\n//! [`MAX_TX_LIFETIME`](crate::protocol::constants::MAX_TX_LIFETIME) of that block, so once that\n//! window (plus a safety margin of 2 hours) has elapsed the originating transaction can no longer appear, and it is\n//! safe to stop looking for it.\n//!\n//! The TTL only matters for unprocessed messages. Already-processed message receptions complete when the block that\n//! included the originating transaction finalizes, which is exactly when the processing becomes reorg-proof.\n//!\n//! # Current limitations, future plans\n//!\n//! - Tx-less messages never reach `Processed` and are only ever removed by expiry. This will be supported in the\n//! future.\n//!\n//! # Implementation\n//!\n//! [`OffchainReception::init`] creates a [fact collection](crate::facts::FactCollection) of type\n//! `OFFCHAIN_RECEPTION_TYPE_ID`. The fact collection is identified by a hash of the `OffchainMessage` it tracks, which\n//! makes duplicate calls to `init` idempotent.\n//!\n//! Upon reception, an `OFFCHAIN_MESSAGE_RECEIVED` [non-retractable fact](crate::facts::record_non_retractable_fact) is\n//! recorded. The fact's payload is the `OffchainMessage` itself, which persists it to be subsequently processed.\n//! A fact collection with just an `OFFCHAIN_MESSAGE_RECEIVED` fact represents an active reception process in the\n//! RECEIVED state from our state chart above.\n//!\n//! The message reception state machine is driven externally, advancing one step at a time each time\n//! [`OffchainReception::step`] is invoked. [`OffchainReception::step`] implements the rest of the reception state\n//! machine described above.\n//!\n//! When stepping, if the transaction to the message is found onchain, an `OFFCHAIN_MESSAGE_PROCESSED`\n//! [retractable fact](crate::facts::record_retractable_fact) associated to the block where the transaction was found is\n//! recorded.\n//! Note that since this fact is retractable, a reorg dropping said block would result in the fact being automatically\n//! removed by PXE, effectively pushing the reception process back to `RECEIVED` state.\n//!\n//! To determine in which state of the reception process we are we just analyze the recorded facts:\n//!\n//! - If there is an `OFFCHAIN_MESSAGE_PROCESSED` fact we are in PROCESSED state. Once that fact's origin block has\n//! finalized the processing is reorg-proof, so the [fact collection](crate::facts::FactCollection) can (and should)\n//! be deleted; until then there is nothing to do.\n//! - If there is only an `OFFCHAIN_MESSAGE_RECEIVED` fact we are in RECEIVED state, so we check if the message\n//! transaction is now available onchain, and if so, exercise the RECEIVED->PROCESSED transition. Otherwise, once the\n//! TTL has elapsed the originating transaction can no longer appear and the collection can (and should) be deleted.\n//!\n//! The PROCESSED->RECEIVED transition is transparently handled by PXE: if a re-org caused the message transaction to\n//! fall off the chain, the `OFFCHAIN_MESSAGE_PROCESSED` fact disappears, taking us back to the RECEIVED state.\n\nuse crate::{\n ephemeral::EphemeralArray,\n facts::{\n delete_fact_collection, Fact, FactCollection, get_fact_collection, get_fact_collections_by_type, OriginBlock,\n record_non_retractable_fact, record_retractable_fact,\n },\n messages::processing::OffchainMessageWithTx,\n oracle::tx_resolution::ResolvedTx,\n protocol::{\n address::AztecAddress,\n constants::MAX_TX_LIFETIME,\n hash::{poseidon2_hash, sha256_to_field},\n traits::{Deserialize, Serialize},\n },\n};\nuse super::OffchainMessage;\n\n/// Maximum time-to-live for a tx-bound offchain message.\n///\n/// After `anchor_block_timestamp + MAX_MSG_TTL`, the message is evicted from the inbox.\n/// (7200 == 2 hours)\npub(crate) global MAX_MSG_TTL: u64 = MAX_TX_LIFETIME + 7200;\n\n/// Maximum amount by which a received message's `anchor_block_timestamp` may exceed our current timestamp.\n///\n/// A message's anchor is the timestamp of the block the sender anchored its originating tx to, so for a genuine\n/// message it is at or before our own anchor timestamp. Our PXE may lag the chain tip though, which can make a\n/// legitimate anchor appear to be in our future, so we tolerate a forward skew of `MAX_TX_LIFETIME` (the longest a tx\n/// can wait to be mined after its anchor) plus a 2h margin. A larger skew would mean our view trails the tip by more\n/// than a tx lifetime -- so far behind that we could not even build a tx that wouldn't be immediately expired -- so\n/// such a message cannot be genuine and is rejected on reception. Bounding the anchor this way also keeps accepted\n/// values near the present, which prevents the `anchor_block_timestamp + MAX_MSG_TTL` eviction check from overflowing.\n/// (7200 == 2 hours)\npub(crate) global MAX_ANCHOR_FUTURE_SKEW: u64 = MAX_TX_LIFETIME + 7200;\n\n/// Fact type id of the fact that stores the offchain message body inside a reception collection.\nglobal OFFCHAIN_MESSAGE_RECEIVED: Field = sha256_to_field(\"AZTEC_NR::OFFCHAIN_MESSAGE_RECEIVED\".as_bytes());\n\n/// Fact type id to mark an offchain message as processed.\n///\n/// A reception is in \"processed state\" exactly when its collection carries a fact of this type.\npub(crate) global OFFCHAIN_MESSAGE_PROCESSED: Field =\n sha256_to_field(\"AZTEC_NR::OFFCHAIN_MESSAGE_PROCESSED\".as_bytes());\n\n/// Fact-collection type id shared by every offchain message reception in the [fact store](crate::facts).\npub(crate) global OFFCHAIN_RECEPTION_TYPE_ID: Field =\n sha256_to_field(\"AZTEC_NR::OFFCHAIN_RECEPTION_TYPE_ID\".as_bytes());\n\n/// A single offchain message reception machine, backed by a [`FactCollection`](crate::facts::FactCollection).\n///\n/// Wraps the fact collection that tracks one message's progress through the reception state machine (see the\n/// [module documentation](super)); the [`OffchainMessage`] it carries is decoded on demand.\n#[derive(Deserialize, Serialize)]\npub(crate) struct OffchainReception {\n collection: FactCollection,\n}\n\nimpl OffchainReception {\n /// Initializes a new reception for a freshly received message, in the `Received` state.\n ///\n /// Re-initializing the same message is a no-op, which makes redelivery idempotent.\n pub(crate) unconstrained fn init(contract_address: AztecAddress, message: OffchainMessage) {\n record_non_retractable_fact(\n contract_address,\n message.recipient,\n OFFCHAIN_RECEPTION_TYPE_ID,\n Self::id_for(message),\n OFFCHAIN_MESSAGE_RECEIVED,\n to_payload(message),\n );\n }\n\n /// Loads every active reception for the given contract and scope, decoding each message body.\n pub(crate) unconstrained fn load_all(\n contract_address: AztecAddress,\n scope: AztecAddress,\n ) -> EphemeralArray<OffchainReception> {\n get_fact_collections_by_type(contract_address, scope, OFFCHAIN_RECEPTION_TYPE_ID)\n .map(|collection: FactCollection| OffchainReception { collection })\n }\n\n /// Reads and returns the message this reception carries, decoding it from its fact collection.\n pub(crate) unconstrained fn read_message(self) -> OffchainMessage {\n let message_fact = self.collection.facts.find(|f: Fact| f.fact_type_id == OFFCHAIN_MESSAGE_RECEIVED).unwrap();\n let n = <OffchainMessage as Deserialize>::N;\n let mut fields = [0; <OffchainMessage as Deserialize>::N];\n for i in 0..n {\n fields[i] = message_fact.payload.get(i);\n }\n Deserialize::deserialize(fields)\n }\n\n /// Computes the fact-collection id that identifies a message's reception machine in the [fact store](crate::facts).\n ///\n /// The id is a hash of the message, which makes duplicate receptions of the same message collapse onto a single\n /// reception.\n pub(crate) fn id_for(message: OffchainMessage) -> Field {\n poseidon2_hash(message.serialize())\n }\n\n /// Returns `true` if a reception for `message` is currently active for the given contract and scope.\n pub(crate) unconstrained fn is_active(\n contract_address: AztecAddress,\n scope: AztecAddress,\n message: OffchainMessage,\n ) -> bool {\n get_fact_collection(\n contract_address,\n scope,\n OFFCHAIN_RECEPTION_TYPE_ID,\n Self::id_for(message),\n )\n .is_some()\n }\n\n /// Advances this reception by one step of its state machine. See the [module documentation](super) for the\n /// states, transitions, and expiry rules.\n ///\n /// Returns `Some` with the message and its resolved context when this step determines the message is ready to be\n /// processed.\n pub(crate) unconstrained fn step(\n self,\n maybe_resolved_tx: Option<ResolvedTx>,\n now: u64,\n ) -> Option<OffchainMessageWithTx> {\n let message = self.read_message();\n let processed_fact = self.collection.facts.find(|f: Fact| f.fact_type_id == OFFCHAIN_MESSAGE_PROCESSED);\n\n if processed_fact.is_none() & maybe_resolved_tx.is_some() {\n // Received -> Processed: the originating tx is onchain.\n let resolved = maybe_resolved_tx.unwrap();\n self.mark_processed(resolved.block_number, resolved.block_hash);\n Option::some(\n OffchainMessageWithTx { message_ciphertext: message.ciphertext, resolved_tx: resolved },\n )\n } else if processed_fact.is_some() {\n if processed_fact.unwrap().origin_block.unwrap().block_state.is_finalized() {\n // Processed -> Terminated: once the marker's origin block finalizes, the processing is reorg-proof and\n // the reception is complete. Until then we wait: a reorg dropping that block removes the retractable\n // marker and PXE pushes us back to Received.\n self.terminate();\n }\n Option::none()\n } else {\n // Received -> Terminated: the TTL caps how long we keep looking for the originating tx.\n if now > message.anchor_block_timestamp + MAX_MSG_TTL {\n self.terminate();\n }\n Option::none()\n }\n }\n\n /// Returns `true` if the reception for `message` has been marked processed.\n pub(crate) unconstrained fn is_processed(\n contract_address: AztecAddress,\n scope: AztecAddress,\n message: OffchainMessage,\n ) -> bool {\n let maybe_collection = get_fact_collection(\n contract_address,\n scope,\n OFFCHAIN_RECEPTION_TYPE_ID,\n Self::id_for(message),\n );\n if maybe_collection.is_some() {\n maybe_collection.unwrap().facts.any(|f: Fact| f.fact_type_id == OFFCHAIN_MESSAGE_PROCESSED)\n } else {\n false\n }\n }\n\n /// Records the retractable processed marker for this reception, originated at the resolved block.\n unconstrained fn mark_processed(self, block_number: u32, block_hash: Field) {\n let empty_payload: EphemeralArray<Field> = EphemeralArray::empty();\n record_retractable_fact(\n self.collection.contract_address,\n self.collection.scope,\n self.collection.fact_collection_type_id,\n self.collection.fact_collection_id,\n OFFCHAIN_MESSAGE_PROCESSED,\n empty_payload,\n OriginBlock { block_number, block_hash },\n );\n }\n\n /// Terminates this reception by deleting its [fact collection](crate::facts::FactCollection).\n unconstrained fn terminate(self) {\n delete_fact_collection(\n self.collection.contract_address,\n self.collection.scope,\n self.collection.fact_collection_type_id,\n self.collection.fact_collection_id,\n );\n }\n}\n\n/// Serializes an [`OffchainMessage`] into a fact payload.\nunconstrained fn to_payload(message: OffchainMessage) -> EphemeralArray<Field> {\n let fields = message.serialize();\n let payload: EphemeralArray<Field> = EphemeralArray::empty();\n for i in 0..fields.len() {\n payload.push(fields[i]);\n }\n payload\n}\n\nmod test {\n use crate::{\n messages::processing::offchain::OffchainMessage,\n oracle::{random::random, tx_resolution::ResolvedTx},\n protocol::address::AztecAddress,\n test::helpers::test_environment::TestEnvironment,\n };\n use super::{MAX_MSG_TTL, OffchainReception};\n\n unconstrained fn setup() -> (TestEnvironment, AztecAddress) {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n (env, scope)\n }\n\n /// Creates an `OffchainMessage` with dummy ciphertext and the given scope as recipient.\n fn make_msg(recipient: AztecAddress, tx_hash: Option<Field>, anchor_block_timestamp: u64) -> OffchainMessage {\n OffchainMessage { ciphertext: BoundedVec::new(), recipient, tx_hash, anchor_block_timestamp }\n }\n\n /// Builds the resolved-tx context PXE would return for `tx_hash`, found in `block_number`.\n fn resolved_tx_at_block(tx_hash: Field, block_number: u32) -> ResolvedTx {\n ResolvedTx {\n tx_hash,\n unique_note_hashes_in_tx: BoundedVec::new(),\n first_nullifier_in_tx: 0,\n block_number,\n block_hash: 0,\n }\n }\n\n /// Builds a resolved-tx context found in a low block, which TXE (proven == finalized == latest) reports as\n /// `Finalized`.\n fn resolved_tx(tx_hash: Field) -> ResolvedTx {\n resolved_tx_at_block(tx_hash, 1)\n }\n\n #[test]\n unconstrained fn expired_reception_is_terminated() {\n let (env, scope) = setup();\n let msg = make_msg(scope, Option::some(random()), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n let reception = OffchainReception::load_all(address, scope).get(0);\n\n // Past the TTL with no resolved tx: the reception is terminated.\n assert(reception.step(Option::none(), MAX_MSG_TTL + 1).is_none());\n assert(!OffchainReception::is_active(address, scope, msg), \"expired reception should be terminated\");\n });\n }\n\n #[test]\n unconstrained fn unresolved_reception_stays_active() {\n let (env, scope) = setup();\n let msg = make_msg(scope, Option::some(random()), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n let reception = OffchainReception::load_all(address, scope).get(0);\n\n // Within the TTL with no resolved tx: nothing to process, the reception stays.\n assert(reception.step(Option::none(), 100).is_none());\n assert(OffchainReception::is_active(address, scope, msg), \"unresolved reception should stay active\");\n assert(!OffchainReception::is_processed(address, scope, msg), \"should still be unprocessed\");\n });\n }\n\n #[test]\n unconstrained fn resolved_reception_is_ready_to_process() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n let reception = OffchainReception::load_all(address, scope).get(0);\n\n // A resolved tx within the TTL: the message is handed off with its tx context attached.\n let processable = reception.step(Option::some(resolved_tx(tx_hash)), 100);\n assert(processable.is_some());\n assert_eq(processable.unwrap().resolved_tx.tx_hash, tx_hash);\n\n // It stays active for reorg safety and is now marked processed.\n assert(OffchainReception::is_active(address, scope, msg), \"processed reception should stay active\");\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n });\n }\n\n #[test]\n unconstrained fn already_processed_reception_is_not_re_pushed() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n // A future origin block stays unfinalized, so the reception lingers in Processed across steps.\n let future_block = env.last_block_number() + 100;\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n // First step processes the message.\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), 100).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n\n // Second step (still resolved, not finalized) recognizes it as processed and does not re-push it.\n let reloaded = OffchainReception::load_all(address, scope).get(0);\n assert(\n reloaded.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), 100).is_none(),\n \"already processed\",\n );\n assert(OffchainReception::is_active(address, scope, msg), \"processed reception should still be active\");\n });\n }\n\n #[test]\n unconstrained fn processed_reception_terminates_once_its_origin_block_finalizes() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n // Process the message against a finalized block.\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx(tx_hash)), 100).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n\n // Next step, still well within the TTL: a finalized origin block makes the processing reorg-proof, so the\n // reception terminates regardless of the TTL.\n let reloaded = OffchainReception::load_all(address, scope).get(0);\n assert(reloaded.step(Option::some(resolved_tx(tx_hash)), 100).is_none());\n assert(\n !OffchainReception::is_active(address, scope, msg),\n \"finalized processed reception should be terminated\",\n );\n });\n }\n\n #[test]\n unconstrained fn unfinalized_processed_reception_survives_past_the_ttl() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n // A future origin block never finalizes here, so the reception must not be terminated by the TTL.\n let future_block = env.last_block_number() + 100;\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), 100).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n\n // Past the TTL, but the origin block has not finalized: the reception stays active. The TTL no longer\n // governs an already-processed reception.\n let reloaded = OffchainReception::load_all(address, scope).get(0);\n assert(reloaded.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), MAX_MSG_TTL + 1).is_none());\n assert(\n OffchainReception::is_active(address, scope, msg),\n \"unfinalized processed reception should survive past the TTL\",\n );\n });\n }\n\n #[test]\n unconstrained fn expired_reception_is_still_processed_when_its_tx_resolves() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n // Even past the TTL, a freshly resolved tx is still handed off: expiry only caps the search for the\n // originating tx, it does not pre-empt processing once that tx is found.\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx(tx_hash)), MAX_MSG_TTL + 1).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n assert(OffchainReception::is_active(address, scope, msg), \"just-processed reception should stay active\");\n });\n }\n}\n"
|
|
1056
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/messages/processing/offchain/reception.nr",
|
|
1057
|
+
"source": "//! The state machine of a single offchain message reception process.\n//!\n//! Offchain processing needs to handle some complexity, including the possibility of reorgs reverting message effects,\n//! and the need to reprocess messages in that case. The state chart below summarizes the current behavior.\n//!\n//! ```text\n//! offchain_receive() (process starts)\n//! |\n//! v\n//! +-----------+ tx found onchain +-----------+\n//! ---- | | --------------------------> | |\n//! tx not found | | | | | discover notes,\n//! |--> | RECEIVED | | PROCESSED | ~~> events, etc\n//! | | <-------------------------- | |\n//! | | tx block re-orged | |\n//! +-----------+ +-----------+\n//! | |\n//! | TTL expired | tx block finalized\n//! v v\n//! +---------------------------------------------------------+\n//! | TERMINATED (process ends) |\n//! +---------------------------------------------------------+\n//! ```\n//!\n//! ## States\n//!\n//! - **Received**: the message is stored but its originating transaction has not been found onchain yet (or the\n//! message is tx-less; see below). While the reception process is in this state, it keeps looking for the\n// transaction onchain.\n//! - **Processed**: the message has been handed off for processing. If there weren't reorgs, reaching this state would\n//! be equivalent to terminating the reception process. Since reorgs are a possibility, this state is not terminal\n//! until the block the originating transaction was found in finalizes.\n//! - **Terminated**: nothing else can be done with the message, either because its originating transaction never\n//! appeared within the TTL, or because the block it was processed in has finalized. This is the terminal state of\n//! this process.\n//!\n//! ## Transitions (each evaluated by [`OffchainReception::step`])\n//!\n//! - **Received -> Processed**: the originating transaction is found onchain. The message (packaged with its\n//! transaction context) is queued to have its actual contents processed (which can lead for example to the discovery\n//! of notes and events).\n//! - **Processed -> Received**: the block where the message transaction was originally found is re-orged out.\n//! - **Received -> Terminated**: the message TTL has elapsed (see below), so the originating transaction can no longer\n//! appear and the message is no longer processable.\n//! - **Processed -> Terminated**: the block the originating transaction was found in has finalized, so the effects of\n//! its processing are permanent and reorg-proof.\n//!\n//! # Message reception lifecycle and the TTL\n//!\n//! A reception expires once `now > anchor_block_timestamp + MAX_MSG_TTL`, where `MAX_MSG_TTL = MAX_TX_LIFETIME + 2h`.\n//! A transaction anchored at a given block can only be mined within\n//! [`MAX_TX_LIFETIME`](crate::protocol::constants::MAX_TX_LIFETIME) of that block, so once that\n//! window (plus a safety margin of 2 hours) has elapsed the originating transaction can no longer appear, and it is\n//! safe to stop looking for it.\n//!\n//! The TTL only matters for unprocessed messages. Already-processed message receptions complete when the block that\n//! included the originating transaction finalizes, which is exactly when the processing becomes reorg-proof.\n//!\n//! # Current limitations, future plans\n//!\n//! - Tx-less messages never reach `Processed` and are only ever removed by expiry. This will be supported in the\n//! future.\n//!\n//! # Implementation\n//!\n//! [`OffchainReception::init`] creates a [fact collection](crate::facts::FactCollection) of type\n//! `OFFCHAIN_RECEPTION_TYPE_ID`. The fact collection is identified by a hash of the `OffchainMessage` it tracks, which\n//! makes duplicate calls to `init` idempotent.\n//!\n//! Upon reception, an `OFFCHAIN_MESSAGE_RECEIVED` [non-retractable fact](crate::facts::record_non_retractable_fact) is\n//! recorded. The fact's payload is the `OffchainMessage` itself, which persists it to be subsequently processed.\n//! A fact collection with just an `OFFCHAIN_MESSAGE_RECEIVED` fact represents an active reception process in the\n//! RECEIVED state from our state chart above.\n//!\n//! The message reception state machine is driven externally, advancing one step at a time each time\n//! [`OffchainReception::step`] is invoked. [`OffchainReception::step`] implements the rest of the reception state\n//! machine described above.\n//!\n//! When stepping, if the transaction to the message is found onchain, an `OFFCHAIN_MESSAGE_PROCESSED`\n//! [retractable fact](crate::facts::record_retractable_fact) associated to the block where the transaction was found is\n//! recorded.\n//! Note that since this fact is retractable, a reorg dropping said block would result in the fact being automatically\n//! removed by PXE, effectively pushing the reception process back to `RECEIVED` state.\n//!\n//! To determine in which state of the reception process we are we just analyze the recorded facts:\n//!\n//! - If there is an `OFFCHAIN_MESSAGE_PROCESSED` fact we are in PROCESSED state. Once that fact's origin block has\n//! finalized the processing is reorg-proof, so the [fact collection](crate::facts::FactCollection) can (and should)\n//! be deleted; until then there is nothing to do.\n//! - If there is only an `OFFCHAIN_MESSAGE_RECEIVED` fact we are in RECEIVED state, so we check if the message\n//! transaction is now available onchain, and if so, exercise the RECEIVED->PROCESSED transition. Otherwise, once the\n//! TTL has elapsed the originating transaction can no longer appear and the collection can (and should) be deleted.\n//!\n//! The PROCESSED->RECEIVED transition is transparently handled by PXE: if a re-org caused the message transaction to\n//! fall off the chain, the `OFFCHAIN_MESSAGE_PROCESSED` fact disappears, taking us back to the RECEIVED state.\n\nuse crate::{\n ephemeral::EphemeralArray,\n facts::{\n delete_fact_collection, Fact, FactCollection, get_fact_collection, get_fact_collections_by_type, OriginBlock,\n record_non_retractable_fact, record_retractable_fact,\n },\n messages::processing::OffchainMessageWithTx,\n oracle::tx_resolution::ResolvedTx,\n protocol::{\n address::AztecAddress,\n constants::MAX_TX_LIFETIME,\n hash::{poseidon2_hash, sha256_to_field},\n traits::{Deserialize, Serialize},\n },\n};\nuse super::OffchainMessage;\n\n/// Maximum time-to-live for a tx-bound offchain message.\n///\n/// After `anchor_block_timestamp + MAX_MSG_TTL`, the message is evicted from the inbox.\n/// (7200 == 2 hours)\npub(crate) global MAX_MSG_TTL: u64 = MAX_TX_LIFETIME + 7200;\n\n/// Fact type id of the fact that stores the offchain message body inside a reception collection.\nglobal OFFCHAIN_MESSAGE_RECEIVED: Field = sha256_to_field(\"AZTEC_NR::OFFCHAIN_MESSAGE_RECEIVED\".as_bytes());\n\n/// Fact type id to mark an offchain message as processed.\n///\n/// A reception is in \"processed state\" exactly when its collection carries a fact of this type.\npub(crate) global OFFCHAIN_MESSAGE_PROCESSED: Field =\n sha256_to_field(\"AZTEC_NR::OFFCHAIN_MESSAGE_PROCESSED\".as_bytes());\n\n/// Fact-collection type id shared by every offchain message reception in the [fact store](crate::facts).\npub(crate) global OFFCHAIN_RECEPTION_TYPE_ID: Field =\n sha256_to_field(\"AZTEC_NR::OFFCHAIN_RECEPTION_TYPE_ID\".as_bytes());\n\n/// A single offchain message reception machine, backed by a [`FactCollection`](crate::facts::FactCollection).\n///\n/// Wraps the fact collection that tracks one message's progress through the reception state machine (see the\n/// [module documentation](super)); the [`OffchainMessage`] it carries is decoded on demand.\n#[derive(Deserialize, Serialize)]\npub(crate) struct OffchainReception {\n collection: FactCollection,\n}\n\nimpl OffchainReception {\n /// Initializes a new reception for a freshly received message, in the `Received` state.\n ///\n /// Re-initializing the same message is a no-op, which makes redelivery idempotent.\n pub(crate) unconstrained fn init(contract_address: AztecAddress, message: OffchainMessage) {\n record_non_retractable_fact(\n contract_address,\n message.recipient,\n OFFCHAIN_RECEPTION_TYPE_ID,\n Self::id_for(message),\n OFFCHAIN_MESSAGE_RECEIVED,\n to_payload(message),\n );\n }\n\n /// Loads every active reception for the given contract and scope, decoding each message body.\n pub(crate) unconstrained fn load_all(\n contract_address: AztecAddress,\n scope: AztecAddress,\n ) -> EphemeralArray<OffchainReception> {\n get_fact_collections_by_type(contract_address, scope, OFFCHAIN_RECEPTION_TYPE_ID)\n .map(|collection: FactCollection| OffchainReception { collection })\n }\n\n /// Reads and returns the message this reception carries, decoding it from its fact collection.\n pub(crate) unconstrained fn read_message(self) -> OffchainMessage {\n let message_fact = self.collection.facts.find(|f: Fact| f.fact_type_id == OFFCHAIN_MESSAGE_RECEIVED).unwrap();\n let n = <OffchainMessage as Deserialize>::N;\n let mut fields = [0; <OffchainMessage as Deserialize>::N];\n for i in 0..n {\n fields[i] = message_fact.payload.get(i);\n }\n Deserialize::deserialize(fields)\n }\n\n /// Computes the fact-collection id that identifies a message's reception machine in the [fact store](crate::facts).\n ///\n /// The id is a hash of the message, which makes duplicate receptions of the same message collapse onto a single\n /// reception.\n pub(crate) fn id_for(message: OffchainMessage) -> Field {\n poseidon2_hash(message.serialize())\n }\n\n /// Returns `true` if a reception for `message` is currently active for the given contract and scope.\n pub(crate) unconstrained fn is_active(\n contract_address: AztecAddress,\n scope: AztecAddress,\n message: OffchainMessage,\n ) -> bool {\n get_fact_collection(\n contract_address,\n scope,\n OFFCHAIN_RECEPTION_TYPE_ID,\n Self::id_for(message),\n )\n .is_some()\n }\n\n /// Advances this reception by one step of its state machine. See the [module documentation](super) for the\n /// states, transitions, and expiry rules.\n ///\n /// Returns `Some` with the message and its resolved context when this step determines the message is ready to be\n /// processed.\n pub(crate) unconstrained fn step(\n self,\n maybe_resolved_tx: Option<ResolvedTx>,\n now: u64,\n ) -> Option<OffchainMessageWithTx> {\n let message = self.read_message();\n let processed_fact = self.collection.facts.find(|f: Fact| f.fact_type_id == OFFCHAIN_MESSAGE_PROCESSED);\n\n if processed_fact.is_none() & maybe_resolved_tx.is_some() {\n // Received -> Processed: the originating tx is onchain.\n let resolved = maybe_resolved_tx.unwrap();\n self.mark_processed(resolved.block_number, resolved.block_hash);\n Option::some(\n OffchainMessageWithTx { message_ciphertext: message.ciphertext, resolved_tx: resolved },\n )\n } else if processed_fact.is_some() {\n if processed_fact.unwrap().origin_block.unwrap().block_state.is_finalized() {\n // Processed -> Terminated: once the marker's origin block finalizes, the processing is reorg-proof and\n // the reception is complete. Until then we wait: a reorg dropping that block removes the retractable\n // marker and PXE pushes us back to Received.\n self.terminate();\n }\n Option::none()\n } else {\n // Received -> Terminated: the TTL caps how long we keep looking for the originating tx.\n if now > message.anchor_block_timestamp + MAX_MSG_TTL {\n self.terminate();\n }\n Option::none()\n }\n }\n\n /// Returns `true` if the reception for `message` has been marked processed.\n pub(crate) unconstrained fn is_processed(\n contract_address: AztecAddress,\n scope: AztecAddress,\n message: OffchainMessage,\n ) -> bool {\n let maybe_collection = get_fact_collection(\n contract_address,\n scope,\n OFFCHAIN_RECEPTION_TYPE_ID,\n Self::id_for(message),\n );\n if maybe_collection.is_some() {\n maybe_collection.unwrap().facts.any(|f: Fact| f.fact_type_id == OFFCHAIN_MESSAGE_PROCESSED)\n } else {\n false\n }\n }\n\n /// Records the retractable processed marker for this reception, originated at the resolved block.\n unconstrained fn mark_processed(self, block_number: u32, block_hash: Field) {\n let empty_payload: EphemeralArray<Field> = EphemeralArray::empty();\n record_retractable_fact(\n self.collection.contract_address,\n self.collection.scope,\n self.collection.fact_collection_type_id,\n self.collection.fact_collection_id,\n OFFCHAIN_MESSAGE_PROCESSED,\n empty_payload,\n OriginBlock { block_number, block_hash },\n );\n }\n\n /// Terminates this reception by deleting its [fact collection](crate::facts::FactCollection).\n unconstrained fn terminate(self) {\n delete_fact_collection(\n self.collection.contract_address,\n self.collection.scope,\n self.collection.fact_collection_type_id,\n self.collection.fact_collection_id,\n );\n }\n}\n\n/// Serializes an [`OffchainMessage`] into a fact payload.\nunconstrained fn to_payload(message: OffchainMessage) -> EphemeralArray<Field> {\n let fields = message.serialize();\n let payload: EphemeralArray<Field> = EphemeralArray::empty();\n for i in 0..fields.len() {\n payload.push(fields[i]);\n }\n payload\n}\n\nmod test {\n use crate::{\n messages::processing::offchain::OffchainMessage,\n oracle::{random::random, tx_resolution::ResolvedTx},\n protocol::address::AztecAddress,\n test::helpers::test_environment::TestEnvironment,\n };\n use super::{MAX_MSG_TTL, OffchainReception};\n\n unconstrained fn setup() -> (TestEnvironment, AztecAddress) {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n (env, scope)\n }\n\n /// Creates an `OffchainMessage` with dummy ciphertext and the given scope as recipient.\n fn make_msg(recipient: AztecAddress, tx_hash: Option<Field>, anchor_block_timestamp: u64) -> OffchainMessage {\n OffchainMessage { ciphertext: BoundedVec::new(), recipient, tx_hash, anchor_block_timestamp }\n }\n\n /// Builds the resolved-tx context PXE would return for `tx_hash`, found in `block_number`.\n fn resolved_tx_at_block(tx_hash: Field, block_number: u32) -> ResolvedTx {\n ResolvedTx {\n tx_hash,\n unique_note_hashes_in_tx: BoundedVec::new(),\n first_nullifier_in_tx: 0,\n block_number,\n block_hash: 0,\n }\n }\n\n /// Builds a resolved-tx context found in a low block, which TXE (proven == finalized == latest) reports as\n /// `Finalized`.\n fn resolved_tx(tx_hash: Field) -> ResolvedTx {\n resolved_tx_at_block(tx_hash, 1)\n }\n\n #[test]\n unconstrained fn expired_reception_is_terminated() {\n let (env, scope) = setup();\n let msg = make_msg(scope, Option::some(random()), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n let reception = OffchainReception::load_all(address, scope).get(0);\n\n // Past the TTL with no resolved tx: the reception is terminated.\n assert(reception.step(Option::none(), MAX_MSG_TTL + 1).is_none());\n assert(!OffchainReception::is_active(address, scope, msg), \"expired reception should be terminated\");\n });\n }\n\n #[test]\n unconstrained fn unresolved_reception_stays_active() {\n let (env, scope) = setup();\n let msg = make_msg(scope, Option::some(random()), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n let reception = OffchainReception::load_all(address, scope).get(0);\n\n // Within the TTL with no resolved tx: nothing to process, the reception stays.\n assert(reception.step(Option::none(), 100).is_none());\n assert(OffchainReception::is_active(address, scope, msg), \"unresolved reception should stay active\");\n assert(!OffchainReception::is_processed(address, scope, msg), \"should still be unprocessed\");\n });\n }\n\n #[test]\n unconstrained fn resolved_reception_is_ready_to_process() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n let reception = OffchainReception::load_all(address, scope).get(0);\n\n // A resolved tx within the TTL: the message is handed off with its tx context attached.\n let processable = reception.step(Option::some(resolved_tx(tx_hash)), 100);\n assert(processable.is_some());\n assert_eq(processable.unwrap().resolved_tx.tx_hash, tx_hash);\n\n // It stays active for reorg safety and is now marked processed.\n assert(OffchainReception::is_active(address, scope, msg), \"processed reception should stay active\");\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n });\n }\n\n #[test]\n unconstrained fn already_processed_reception_is_not_re_pushed() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n // A future origin block stays unfinalized, so the reception lingers in Processed across steps.\n let future_block = env.last_block_number() + 100;\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n // First step processes the message.\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), 100).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n\n // Second step (still resolved, not finalized) recognizes it as processed and does not re-push it.\n let reloaded = OffchainReception::load_all(address, scope).get(0);\n assert(\n reloaded.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), 100).is_none(),\n \"already processed\",\n );\n assert(OffchainReception::is_active(address, scope, msg), \"processed reception should still be active\");\n });\n }\n\n #[test]\n unconstrained fn processed_reception_terminates_once_its_origin_block_finalizes() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n // Process the message against a finalized block.\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx(tx_hash)), 100).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n\n // Next step, still well within the TTL: a finalized origin block makes the processing reorg-proof, so the\n // reception terminates regardless of the TTL.\n let reloaded = OffchainReception::load_all(address, scope).get(0);\n assert(reloaded.step(Option::some(resolved_tx(tx_hash)), 100).is_none());\n assert(\n !OffchainReception::is_active(address, scope, msg),\n \"finalized processed reception should be terminated\",\n );\n });\n }\n\n #[test]\n unconstrained fn unfinalized_processed_reception_survives_past_the_ttl() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n // A future origin block never finalizes here, so the reception must not be terminated by the TTL.\n let future_block = env.last_block_number() + 100;\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), 100).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n\n // Past the TTL, but the origin block has not finalized: the reception stays active. The TTL no longer\n // governs an already-processed reception.\n let reloaded = OffchainReception::load_all(address, scope).get(0);\n assert(reloaded.step(Option::some(resolved_tx_at_block(tx_hash, future_block)), MAX_MSG_TTL + 1).is_none());\n assert(\n OffchainReception::is_active(address, scope, msg),\n \"unfinalized processed reception should survive past the TTL\",\n );\n });\n }\n\n #[test]\n unconstrained fn expired_reception_is_still_processed_when_its_tx_resolves() {\n let (env, scope) = setup();\n let tx_hash = random();\n let msg = make_msg(scope, Option::some(tx_hash), 0);\n\n env.utility_context(|context| {\n let address = context.this_address();\n OffchainReception::init(address, msg);\n\n // Even past the TTL, a freshly resolved tx is still handed off: expiry only caps the search for the\n // originating tx, it does not pre-empt processing once that tx is found.\n let reception = OffchainReception::load_all(address, scope).get(0);\n assert(reception.step(Option::some(resolved_tx(tx_hash)), MAX_MSG_TTL + 1).is_some());\n assert(OffchainReception::is_processed(address, scope, msg), \"should be processed\");\n assert(OffchainReception::is_active(address, scope, msg), \"just-processed reception should stay active\");\n });\n }\n}\n"
|
|
1320
1058
|
},
|
|
1321
1059
|
"17": {
|
|
1322
1060
|
"function_locations": [
|
|
@@ -1523,7 +1261,7 @@
|
|
|
1523
1261
|
"start": 3150
|
|
1524
1262
|
}
|
|
1525
1263
|
],
|
|
1526
|
-
"path": "/home/
|
|
1264
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/aes128_decrypt.nr",
|
|
1527
1265
|
"source": "#[oracle(aztec_utl_decryptAes128)]\nunconstrained fn aes128_decrypt_oracle<let N: u32>(\n ciphertext: BoundedVec<u8, N>,\n iv: [u8; 16],\n sym_key: [u8; 16],\n) -> Option<BoundedVec<u8, N>> {}\n\n/// Attempts to decrypt a ciphertext using AES128.\n///\n/// Returns `Option::some(plaintext)` on success, or `Option::none()` if decryption fails (e.g. due to malformed\n/// ciphertext or invalid PKCS#7 padding). Note that decryption with the wrong key will almost always return `None`\n/// because the decrypted garbage data will have invalid PKCS#7 padding.\n///\n/// Note that we accept ciphertext as a BoundedVec, not as an array. This is because this function is typically used\n/// when processing logs and at that point we don't have comptime information about the length of the ciphertext as\n/// the log is not specific to any individual note.\n// TODO(F-498): review naming consistency\npub unconstrained fn try_aes128_decrypt<let N: u32>(\n ciphertext: BoundedVec<u8, N>,\n iv: [u8; 16],\n sym_key: [u8; 16],\n) -> Option<BoundedVec<u8, N>> {\n aes128_decrypt_oracle(ciphertext, iv, sym_key)\n}\n\nmod test {\n use crate::{\n keys::ecdh_shared_secret::compute_app_siloed_shared_secret,\n messages::encryption::aes128::derive_aes_symmetric_key_and_iv_from_shared_secret,\n utils::{array::subarray::subarray, point::point_from_x_coord},\n };\n use crate::protocol::address::AztecAddress;\n use crate::test::helpers::test_environment::TestEnvironment;\n use super::try_aes128_decrypt;\n use std::aes128::aes128_encrypt;\n\n global CONTRACT_ADDRESS: AztecAddress = AztecAddress { inner: 42 };\n global TEST_PLAINTEXT_LENGTH: u32 = 10;\n global TEST_CIPHERTEXT_LENGTH: u32 = 16;\n global TEST_PADDING_LENGTH: u32 = TEST_CIPHERTEXT_LENGTH - TEST_PLAINTEXT_LENGTH;\n\n #[test]\n unconstrained fn aes_encrypt_then_decrypt() {\n let env = TestEnvironment::new();\n\n env.utility_context(|_| {\n let shared_secret_point = point_from_x_coord(1).unwrap();\n let s_app = compute_app_siloed_shared_secret(shared_secret_point, CONTRACT_ADDRESS);\n\n let (sym_key, iv) = derive_aes_symmetric_key_and_iv_from_shared_secret::<1>(s_app)[0];\n\n let plaintext: [u8; TEST_PLAINTEXT_LENGTH] = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9];\n\n let ciphertext: [u8; TEST_CIPHERTEXT_LENGTH] = aes128_encrypt(plaintext, iv, sym_key);\n\n let ciphertext_bvec = BoundedVec::<u8, TEST_CIPHERTEXT_LENGTH>::from_array(ciphertext);\n\n let received_plaintext = try_aes128_decrypt(ciphertext_bvec, iv, sym_key).unwrap();\n assert_eq(received_plaintext.len(), TEST_PLAINTEXT_LENGTH);\n assert_eq(received_plaintext.max_len(), TEST_CIPHERTEXT_LENGTH);\n assert_eq(subarray::<_, _, TEST_PLAINTEXT_LENGTH>(received_plaintext.storage(), 0), plaintext);\n assert_eq(\n subarray::<_, _, TEST_PADDING_LENGTH>(received_plaintext.storage(), TEST_PLAINTEXT_LENGTH),\n [0 as u8; TEST_PADDING_LENGTH],\n );\n })\n }\n\n #[test]\n unconstrained fn aes_encrypt_then_decrypt_with_bad_sym_key_is_caught() {\n let env = TestEnvironment::new();\n\n env.utility_context(|_| {\n // Decrypting with the wrong key results in garbage data with invalid PKCS#7 padding,\n // so the oracle returns None.\n let shared_secret_point = point_from_x_coord(1).unwrap();\n let s_app = compute_app_siloed_shared_secret(shared_secret_point, CONTRACT_ADDRESS);\n\n let (sym_key, iv) = derive_aes_symmetric_key_and_iv_from_shared_secret::<1>(s_app)[0];\n\n let plaintext: [u8; TEST_PLAINTEXT_LENGTH] = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9];\n let ciphertext: [u8; TEST_CIPHERTEXT_LENGTH] = aes128_encrypt(plaintext, iv, sym_key);\n\n let mut bad_sym_key = sym_key;\n bad_sym_key[0] = 0;\n\n let ciphertext_bvec = BoundedVec::<u8, TEST_CIPHERTEXT_LENGTH>::from_array(ciphertext);\n // Decryption with wrong key returns None because the garbage output has invalid PKCS#7 padding.\n let result = try_aes128_decrypt(ciphertext_bvec, iv, bad_sym_key);\n assert(result.is_none(), \"decryption with bad key should return None\");\n });\n }\n}\n"
|
|
1528
1266
|
},
|
|
1529
1267
|
"187": {
|
|
@@ -1537,7 +1275,7 @@
|
|
|
1537
1275
|
"start": 598
|
|
1538
1276
|
}
|
|
1539
1277
|
],
|
|
1540
|
-
"path": "/home/
|
|
1278
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/call_private_function.nr",
|
|
1541
1279
|
"source": "use crate::protocol::{abis::function_selector::FunctionSelector, address::AztecAddress};\n\n#[oracle(aztec_prv_callPrivateFunction)]\nunconstrained fn call_private_function_oracle(\n _contract_address: AztecAddress,\n _function_selector: FunctionSelector,\n _args_hash: Field,\n _start_side_effect_counter: u32,\n _is_static_call: bool,\n) -> (u32, Field) {}\n\npub unconstrained fn call_private_function_internal(\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args_hash: Field,\n start_side_effect_counter: u32,\n is_static_call: bool,\n) -> (u32, Field) {\n call_private_function_oracle(\n contract_address,\n function_selector,\n args_hash,\n start_side_effect_counter,\n is_static_call,\n )\n}\n"
|
|
1542
1280
|
},
|
|
1543
1281
|
"188": {
|
|
@@ -1551,7 +1289,7 @@
|
|
|
1551
1289
|
"start": 507
|
|
1552
1290
|
}
|
|
1553
1291
|
],
|
|
1554
|
-
"path": "/home/
|
|
1292
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/call_utility_function.nr",
|
|
1555
1293
|
"source": "use crate::protocol::{abis::function_selector::FunctionSelector, address::AztecAddress};\n\n#[oracle(aztec_utl_callUtilityFunction)]\nunconstrained fn call_utility_function_oracle<let M: u32, let N: u32>(\n _contract_address: AztecAddress,\n _function_selector: FunctionSelector,\n _args: [Field; M],\n) -> [Field; N] {}\n\npub unconstrained fn call_utility_function<let M: u32, let N: u32>(\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; M],\n) -> [Field; N] {\n call_utility_function_oracle(contract_address, function_selector, args)\n}\n"
|
|
1556
1294
|
},
|
|
1557
1295
|
"190": {
|
|
@@ -1565,7 +1303,7 @@
|
|
|
1565
1303
|
"start": 700
|
|
1566
1304
|
}
|
|
1567
1305
|
],
|
|
1568
|
-
"path": "/home/
|
|
1306
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/contract_sync.nr",
|
|
1569
1307
|
"source": "use crate::protocol::address::AztecAddress;\n\n#[oracle(aztec_utl_setContractSyncCacheInvalid)]\nunconstrained fn set_contract_sync_cache_invalid_oracle<let N: u32>(\n contract_address: AztecAddress,\n scopes: BoundedVec<AztecAddress, N>,\n) {}\n\n/// Forces the PXE to re-sync the given contract for a set of scopes on the next query.\n///\n/// Call this after writing data (e.g. offchain messages) that the contract's `sync_state` function needs to discover.\n/// Without invalidation, the sync cache would skip re-running `sync_state` until the next block.\npub unconstrained fn set_contract_sync_cache_invalid<let N: u32>(\n contract_address: AztecAddress,\n scopes: BoundedVec<AztecAddress, N>,\n) {\n set_contract_sync_cache_invalid_oracle(contract_address, scopes);\n}\n"
|
|
1570
1308
|
},
|
|
1571
1309
|
"192": {
|
|
@@ -1579,7 +1317,7 @@
|
|
|
1579
1317
|
"start": 786
|
|
1580
1318
|
}
|
|
1581
1319
|
],
|
|
1582
|
-
"path": "/home/
|
|
1320
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/execution.nr",
|
|
1583
1321
|
"source": "use crate::context::UtilityContext;\nuse crate::protocol::{abis::block_header::BlockHeader, address::AztecAddress};\n\n/// Wire shape of [`get_utility_context_oracle`]'s response. [`UtilityContext`] is built from it rather than returned\n/// directly so its fields stay private to its module.\n#[derive(Eq)]\npub(crate) struct UtilityContextData {\n pub(crate) block_header: BlockHeader,\n pub(crate) contract_address: AztecAddress,\n pub(crate) msg_sender: AztecAddress,\n}\n\n#[oracle(aztec_utl_getUtilityContext)]\nunconstrained fn get_utility_context_oracle() -> UtilityContextData {}\n\n/// Returns a utility context built from the global variables of anchor block and the contract address of the function\n/// being executed.\npub unconstrained fn get_utility_context() -> UtilityContext {\n UtilityContext::from(get_utility_context_oracle())\n}\n"
|
|
1584
1322
|
},
|
|
1585
1323
|
"203": {
|
|
@@ -1615,18 +1353,10 @@
|
|
|
1615
1353
|
{
|
|
1616
1354
|
"name": "get_tx_effect_oracle",
|
|
1617
1355
|
"start": 3000
|
|
1618
|
-
},
|
|
1619
|
-
{
|
|
1620
|
-
"name": "get_tx_effects",
|
|
1621
|
-
"start": 3193
|
|
1622
|
-
},
|
|
1623
|
-
{
|
|
1624
|
-
"name": "get_tx_effects_oracle",
|
|
1625
|
-
"start": 3378
|
|
1626
1356
|
}
|
|
1627
1357
|
],
|
|
1628
|
-
"path": "/home/
|
|
1629
|
-
"source": "use crate::ephemeral::EphemeralArray;\nuse crate::messages::processing::{\n event_validation_request::EventValidationRequest, log_retrieval_request::LogRetrievalRequest,\n log_retrieval_response::LogRetrievalResponse, NoteValidationRequest, pending_tagged_log::PendingTaggedLog,\n provided_secret::ProvidedSecret,\n};\nuse crate::protocol::address::AztecAddress;\nuse crate::protocol::blob_data::TxEffect;\n\n/// Finds new private logs that may have been sent to all registered accounts in PXE in the current contract and\n/// returns them in an ephemeral array with an oracle-allocated base slot.\n///\n/// # Arguments\n///\n/// * `scope` - The account scope to search under.\n/// * `provided_secrets` - Tagging secrets the app supplies explicitly, searched alongside the secrets PXE manages\n/// internally. Used for secrets PXE cannot derive itself (e.g. handshake-derived ones).\npub(crate) unconstrained fn get_pending_tagged_logs(\n scope: AztecAddress,\n provided_secrets: EphemeralArray<ProvidedSecret>,\n) -> EphemeralArray<PendingTaggedLog> {\n get_pending_tagged_logs_oracle(scope, provided_secrets)\n}\n\n#[oracle(aztec_utl_getPendingTaggedLogsV2)]\nunconstrained fn get_pending_tagged_logs_oracle(\n scope: AztecAddress,\n provided_secrets: EphemeralArray<ProvidedSecret>,\n) -> EphemeralArray<PendingTaggedLog> {}\n\n/// Validates note/event requests stored in ephemeral arrays.\npub(crate) unconstrained fn validate_and_store_enqueued_notes_and_events(\n note_validation_requests: EphemeralArray<NoteValidationRequest>,\n event_validation_requests: EphemeralArray<EventValidationRequest>,\n scope: AztecAddress,\n) {\n validate_and_store_enqueued_notes_and_events_oracle(note_validation_requests, event_validation_requests, scope);\n}\n\n#[oracle(aztec_utl_validateAndStoreEnqueuedNotesAndEvents)]\nunconstrained fn validate_and_store_enqueued_notes_and_events_oracle(\n note_validation_requests: EphemeralArray<NoteValidationRequest>,\n event_validation_requests: EphemeralArray<EventValidationRequest>,\n scope: AztecAddress,\n) {}\n\n/// Fetches all logs matching each request's tag and returns a nested ephemeral array.\n///\n/// Each element in the outer array is an inner `EphemeralArray<LogRetrievalResponse>` containing all matching logs for\n/// the request at the same index (which may be empty if no logs were found).\npub unconstrained fn get_logs_by_tag(\n requests: EphemeralArray<LogRetrievalRequest>,\n) -> EphemeralArray<EphemeralArray<LogRetrievalResponse>> {\n get_logs_by_tag_oracle(requests)\n}\n\n#[oracle(aztec_utl_getLogsByTagV2)]\nunconstrained fn get_logs_by_tag_oracle(\n requests: EphemeralArray<LogRetrievalRequest>,\n) -> EphemeralArray<EphemeralArray<LogRetrievalResponse>> {}\n\n/// Fetches all effects of a settled transaction by its hash.\npub unconstrained fn get_tx_effect(tx_hash: Field) -> Option<TxEffect> {\n get_tx_effect_oracle(tx_hash)\n}\n\n#[oracle(aztec_utl_getTxEffect)]\nunconstrained fn get_tx_effect_oracle(tx_hash: Field) -> Option<TxEffect> {}\n
|
|
1358
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/message_processing.nr",
|
|
1359
|
+
"source": "use crate::ephemeral::EphemeralArray;\nuse crate::messages::processing::{\n event_validation_request::EventValidationRequest, log_retrieval_request::LogRetrievalRequest,\n log_retrieval_response::LogRetrievalResponse, NoteValidationRequest, pending_tagged_log::PendingTaggedLog,\n provided_secret::ProvidedSecret,\n};\nuse crate::protocol::address::AztecAddress;\nuse crate::protocol::blob_data::TxEffect;\n\n/// Finds new private logs that may have been sent to all registered accounts in PXE in the current contract and\n/// returns them in an ephemeral array with an oracle-allocated base slot.\n///\n/// # Arguments\n///\n/// * `scope` - The account scope to search under.\n/// * `provided_secrets` - Tagging secrets the app supplies explicitly, searched alongside the secrets PXE manages\n/// internally. Used for secrets PXE cannot derive itself (e.g. handshake-derived ones).\npub(crate) unconstrained fn get_pending_tagged_logs(\n scope: AztecAddress,\n provided_secrets: EphemeralArray<ProvidedSecret>,\n) -> EphemeralArray<PendingTaggedLog> {\n get_pending_tagged_logs_oracle(scope, provided_secrets)\n}\n\n#[oracle(aztec_utl_getPendingTaggedLogsV2)]\nunconstrained fn get_pending_tagged_logs_oracle(\n scope: AztecAddress,\n provided_secrets: EphemeralArray<ProvidedSecret>,\n) -> EphemeralArray<PendingTaggedLog> {}\n\n/// Validates note/event requests stored in ephemeral arrays.\npub(crate) unconstrained fn validate_and_store_enqueued_notes_and_events(\n note_validation_requests: EphemeralArray<NoteValidationRequest>,\n event_validation_requests: EphemeralArray<EventValidationRequest>,\n scope: AztecAddress,\n) {\n validate_and_store_enqueued_notes_and_events_oracle(note_validation_requests, event_validation_requests, scope);\n}\n\n#[oracle(aztec_utl_validateAndStoreEnqueuedNotesAndEvents)]\nunconstrained fn validate_and_store_enqueued_notes_and_events_oracle(\n note_validation_requests: EphemeralArray<NoteValidationRequest>,\n event_validation_requests: EphemeralArray<EventValidationRequest>,\n scope: AztecAddress,\n) {}\n\n/// Fetches all logs matching each request's tag and returns a nested ephemeral array.\n///\n/// Each element in the outer array is an inner `EphemeralArray<LogRetrievalResponse>` containing all matching logs for\n/// the request at the same index (which may be empty if no logs were found).\npub unconstrained fn get_logs_by_tag(\n requests: EphemeralArray<LogRetrievalRequest>,\n) -> EphemeralArray<EphemeralArray<LogRetrievalResponse>> {\n get_logs_by_tag_oracle(requests)\n}\n\n#[oracle(aztec_utl_getLogsByTagV2)]\nunconstrained fn get_logs_by_tag_oracle(\n requests: EphemeralArray<LogRetrievalRequest>,\n) -> EphemeralArray<EphemeralArray<LogRetrievalResponse>> {}\n\n/// Fetches all effects of a settled transaction by its hash.\npub unconstrained fn get_tx_effect(tx_hash: Field) -> Option<TxEffect> {\n get_tx_effect_oracle(tx_hash)\n}\n\n#[oracle(aztec_utl_getTxEffect)]\nunconstrained fn get_tx_effect_oracle(tx_hash: Field) -> Option<TxEffect> {}\n"
|
|
1630
1360
|
},
|
|
1631
1361
|
"208": {
|
|
1632
1362
|
"function_locations": [
|
|
@@ -1643,7 +1373,7 @@
|
|
|
1643
1373
|
"start": 835
|
|
1644
1374
|
}
|
|
1645
1375
|
],
|
|
1646
|
-
"path": "/home/
|
|
1376
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/public_call.nr",
|
|
1647
1377
|
"source": "/// Validates public calldata by checking that the preimage exists and the cumulative size is within limits.\n///\n/// The check is unconstrained and the only purpose of it is to fail early in case of calldata overflow or a bug in\n/// calldata hashing.\npub(crate) fn assert_valid_public_call_data(calldata_hash: Field) {\n // Safety: This oracle call returns nothing: we only call it for its side effects (validating the calldata).\n // It is therefore always safe to call.\n unsafe {\n assert_valid_public_call_data_oracle_wrapper(calldata_hash)\n }\n}\n\nunconstrained fn assert_valid_public_call_data_oracle_wrapper(calldata_hash: Field) {\n assert_valid_public_call_data_oracle(calldata_hash)\n}\n\n#[oracle(aztec_prv_assertValidPublicCalldata)]\nunconstrained fn assert_valid_public_call_data_oracle(_calldata_hash: Field) {}\n"
|
|
1648
1378
|
},
|
|
1649
1379
|
"209": {
|
|
@@ -1657,7 +1387,7 @@
|
|
|
1657
1387
|
"start": 568
|
|
1658
1388
|
}
|
|
1659
1389
|
],
|
|
1660
|
-
"path": "/home/
|
|
1390
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/random.nr",
|
|
1661
1391
|
"source": "/// Returns an unconstrained random value. Note that it is not possible to constrain this value to prove that it is\n/// truly random: we assume that the oracle is cooperating and returning random values. In some applications this\n/// behavior might not be acceptable and other techniques might be more suitable, such as producing pseudo-random\n/// values by hashing values outside of user control (like block hashes) or secrets.\npub unconstrained fn random() -> Field {\n rand_oracle()\n}\n\n#[oracle(aztec_misc_getRandomField)]\nunconstrained fn rand_oracle() -> Field {}\n"
|
|
1662
1392
|
},
|
|
1663
1393
|
"212": {
|
|
@@ -1703,7 +1433,7 @@
|
|
|
1703
1433
|
"start": 7189
|
|
1704
1434
|
}
|
|
1705
1435
|
],
|
|
1706
|
-
"path": "/home/
|
|
1436
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/shared_secret.nr",
|
|
1707
1437
|
"source": "use crate::ephemeral::EphemeralArray;\nuse crate::protocol::{address::AztecAddress, hash::sha256_to_field, point::EmbeddedCurvePoint};\n\nglobal GET_SHARED_SECRET_SINGLE_SLOT: Field = sha256_to_field(\"AZTEC_NR::GET_SHARED_SECRET_SINGLE_SLOT\".as_bytes());\n\n#[oracle(aztec_utl_getSharedSecrets)]\nunconstrained fn get_shared_secrets_oracle(\n address: AztecAddress,\n eph_pks: EphemeralArray<EmbeddedCurvePoint>,\n contract_address: AztecAddress,\n) -> EphemeralArray<Field> {}\n\n/// Convenience wrapper around [`get_shared_secrets`] for a single ephemeral public key.\n///\n/// Returns `none` when the PXE does not hold `address`'s keys and therefore cannot derive the secret.\npub unconstrained fn get_shared_secret(\n address: AztecAddress,\n eph_pk: EmbeddedCurvePoint,\n contract_address: AztecAddress,\n) -> Option<Field> {\n let eph_pks: EphemeralArray<EmbeddedCurvePoint> = EphemeralArray::empty_at(GET_SHARED_SECRET_SINGLE_SLOT);\n eph_pks.push(eph_pk);\n let secrets = get_shared_secrets(address, eph_pks, contract_address);\n if secrets.len() == 1 {\n Option::some(secrets.get(0))\n } else {\n Option::none()\n }\n}\n\n/// Returns app-siloed shared secrets between `address` and someone who knows the secret keys behind the given\n/// ephemeral public keys.\n///\n/// Each returned Field `s_app` is computed as:\n///\n/// ```text\n/// S = address_secret * ephPk (raw ECDH point)\n/// s_app = h(DOM_SEP, S.x, S.y, contract) (app-siloed scalar)\n/// ```\n///\n/// where `contract` is the address of the calling contract. The oracle host validates this matches its execution\n/// context.\n///\n/// Without app-siloing, a malicious contract could call this oracle with public information (address, ephPk) and\n/// obtain the same raw secret as the legitimate contract, enabling cross-contract decryption. By including the\n/// contract address in the hash, each contract receives a different `s_app`, preventing this attack.\n///\n/// Callers derive indexed subkeys from `s_app` via\n/// [`derive_shared_secret_subkey`](crate::keys::ecdh_shared_secret::derive_shared_secret_subkey).\n///\n/// Returns an empty array when the PXE does not hold `address`'s keys and therefore cannot derive any secrets. This\n/// happens when syncing the scope of an address the PXE does not control, and is an expected outcome rather than an\n/// error. Any other response length mismatch is a malformed oracle response.\npub unconstrained fn get_shared_secrets(\n address: AztecAddress,\n eph_pks: EphemeralArray<EmbeddedCurvePoint>,\n contract_address: AztecAddress,\n) -> EphemeralArray<Field> {\n let response = get_shared_secrets_oracle(address, eph_pks, contract_address);\n assert(\n (response.len() == eph_pks.len()) | (response.len() == 0),\n \"get_shared_secrets: response length does not match request length\",\n );\n response\n}\n\nmod test {\n use crate::ephemeral::EphemeralArray;\n use crate::oracle::shared_secret::{get_shared_secret, get_shared_secrets};\n use crate::protocol::{address::AztecAddress, traits::FromField};\n use crate::test::helpers::test_environment::TestEnvironment;\n use crate::utils::point::point_from_x_coord;\n use std::test::OracleMock;\n\n #[test]\n unconstrained fn preserves_ephemeral_key_ordering() {\n let env = TestEnvironment::new();\n env.utility_context(|_| {\n let _ = mock_get_shared_secrets([100, 200, 300]);\n\n let pk_a = point_from_x_coord(1).unwrap();\n let pk_b = point_from_x_coord(2).unwrap();\n let pk_c = point_from_x_coord(8).unwrap();\n\n let eph_pks: EphemeralArray<_> = EphemeralArray::empty_at(200);\n eph_pks.push(pk_a);\n eph_pks.push(pk_b);\n eph_pks.push(pk_c);\n\n let _: EphemeralArray<Field> = get_shared_secrets(\n AztecAddress::from_field(1),\n eph_pks,\n AztecAddress::from_field(2),\n );\n\n assert_eq(eph_pks.get(0), pk_a);\n assert_eq(eph_pks.get(1), pk_b);\n assert_eq(eph_pks.get(2), pk_c);\n });\n }\n\n #[test]\n unconstrained fn returns_secrets_in_order() {\n let env = TestEnvironment::new();\n env.utility_context(|_| {\n let _ = mock_get_shared_secrets([111, 222, 333]);\n\n let pk = point_from_x_coord(1).unwrap();\n let eph_pks: EphemeralArray<_> = EphemeralArray::empty_at(200);\n eph_pks.push(pk);\n eph_pks.push(pk);\n eph_pks.push(pk);\n\n let results: EphemeralArray<Field> = get_shared_secrets(\n AztecAddress::from_field(1),\n eph_pks,\n AztecAddress::from_field(2),\n );\n\n assert_eq(results.get(0), 111);\n assert_eq(results.get(1), 222);\n assert_eq(results.get(2), 333);\n });\n }\n\n #[test]\n unconstrained fn returns_empty_when_pxe_does_not_hold_keys() {\n let env = TestEnvironment::new();\n env.utility_context(|_| {\n let empty: [Field; 0] = [];\n let _ = mock_get_shared_secrets(empty);\n\n let pk = point_from_x_coord(1).unwrap();\n let eph_pks: EphemeralArray<_> = EphemeralArray::empty_at(200);\n eph_pks.push(pk);\n\n let results: EphemeralArray<Field> = get_shared_secrets(\n AztecAddress::from_field(1),\n eph_pks,\n AztecAddress::from_field(2),\n );\n\n assert_eq(results.len(), 0);\n });\n }\n\n #[test]\n unconstrained fn single_secret_returns_the_secret() {\n let env = TestEnvironment::new();\n env.utility_context(|_| {\n let _ = mock_get_shared_secrets([111]);\n\n let pk = point_from_x_coord(1).unwrap();\n let secret = get_shared_secret(AztecAddress::from_field(1), pk, AztecAddress::from_field(2));\n\n assert_eq(secret.unwrap(), 111);\n });\n }\n\n #[test]\n unconstrained fn single_secret_returns_none_when_pxe_does_not_hold_keys() {\n let env = TestEnvironment::new();\n env.utility_context(|_| {\n let empty: [Field; 0] = [];\n let _ = mock_get_shared_secrets(empty);\n\n let pk = point_from_x_coord(1).unwrap();\n let secret = get_shared_secret(AztecAddress::from_field(1), pk, AztecAddress::from_field(2));\n\n assert(secret.is_none());\n });\n }\n\n #[test(should_fail_with = \"response length does not match request length\")]\n unconstrained fn cannot_return_mismatched_length() {\n let env = TestEnvironment::new();\n env.utility_context(|_| {\n let _ = mock_get_shared_secrets([111, 222]);\n\n let pk = point_from_x_coord(1).unwrap();\n let eph_pks: EphemeralArray<_> = EphemeralArray::empty_at(200);\n eph_pks.push(pk);\n\n let _: EphemeralArray<Field> = get_shared_secrets(\n AztecAddress::from_field(1),\n eph_pks,\n AztecAddress::from_field(2),\n );\n });\n }\n\n unconstrained fn mock_get_shared_secrets<let N: u32>(response_values: [Field; N]) -> Field {\n let response_slot: Field = 99;\n let response_array: EphemeralArray<Field> = EphemeralArray::at(response_slot);\n for value in response_values {\n response_array.push(value);\n }\n let _ = OracleMock::mock(\"aztec_utl_getSharedSecrets\").returns(response_slot);\n response_slot\n }\n}\n"
|
|
1708
1438
|
},
|
|
1709
1439
|
"216": {
|
|
@@ -1721,7 +1451,7 @@
|
|
|
1721
1451
|
"start": 991
|
|
1722
1452
|
}
|
|
1723
1453
|
],
|
|
1724
|
-
"path": "/home/
|
|
1454
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/tx_resolution.nr",
|
|
1725
1455
|
"source": "use crate::ephemeral::EphemeralArray;\nuse crate::protocol::{constants::MAX_NOTE_HASHES_PER_TX, traits::{Deserialize, Serialize}};\n\n/// The resolved on-chain context of a transaction.\n#[derive(Serialize, Deserialize, Eq)]\npub struct ResolvedTx {\n pub tx_hash: Field,\n pub unique_note_hashes_in_tx: BoundedVec<Field, MAX_NOTE_HASHES_PER_TX>,\n pub first_nullifier_in_tx: Field,\n pub block_number: u32,\n pub block_hash: Field,\n}\n\n/// Resolves the on-chain context of each tx hash.\npub(crate) unconstrained fn get_resolved_txs(requests: EphemeralArray<Field>) -> EphemeralArray<Option<ResolvedTx>> {\n get_resolved_txs_oracle(requests)\n}\n\n#[oracle(aztec_utl_getResolvedTxs)]\nunconstrained fn get_resolved_txs_oracle(requests: EphemeralArray<Field>) -> EphemeralArray<Option<ResolvedTx>> {}\n\nmod test {\n use crate::oracle::tx_resolution::ResolvedTx;\n use crate::protocol::traits::Deserialize;\n\n #[test]\n unconstrained fn resolved_tx_serialization_matches_typescript() {\n // Setup test data\n let tx_hash = 123;\n let unique_note_hashes = BoundedVec::from_array([4, 5]);\n let first_nullifier = 6;\n let block_number: u32 = 7;\n let block_hash = 8;\n\n // Create a ResolvedTx instance\n let resolved_tx = ResolvedTx {\n tx_hash,\n unique_note_hashes_in_tx: unique_note_hashes,\n first_nullifier_in_tx: first_nullifier,\n block_number,\n block_hash,\n };\n\n // Expected output generated from TypeScript's `ResolvedTx.toFields()`\n let serialized_resolved_tx_from_typescript = [\n 0x000000000000000000000000000000000000000000000000000000000000007b,\n 0x0000000000000000000000000000000000000000000000000000000000000004,\n 0x0000000000000000000000000000000000000000000000000000000000000005,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000000,\n 0x0000000000000000000000000000000000000000000000000000000000000002,\n 0x0000000000000000000000000000000000000000000000000000000000000006,\n 0x0000000000000000000000000000000000000000000000000000000000000007,\n 0x0000000000000000000000000000000000000000000000000000000000000008,\n ];\n\n let deserialized = ResolvedTx::deserialize(serialized_resolved_tx_from_typescript);\n\n assert_eq(deserialized, resolved_tx);\n }\n}\n"
|
|
1726
1456
|
},
|
|
1727
1457
|
"217": {
|
|
@@ -1747,8 +1477,8 @@
|
|
|
1747
1477
|
"start": 2136
|
|
1748
1478
|
}
|
|
1749
1479
|
],
|
|
1750
|
-
"path": "/home/
|
|
1751
|
-
"source": "/// The oracle version constants are used to check that the oracle interface is in sync between PXE and Aztec.nr.\n/// We version the oracle interface as `major.minor` where:\n/// - `major` = backward-breaking changes (must match exactly between PXE and Aztec.nr)\n/// - `minor` = oracle additions (non-breaking; PXE minor >= contract minor)\n///\n/// The TypeScript counterparts are in `oracle_version.ts`.\n///\n/// @dev Whenever a contract function or Noir test is run, the `aztec_misc_assertCompatibleOracleVersion` oracle is\n/// called. If the major version is incompatible, an error is thrown immediately. The minor version is recorded by\n/// the PXE and used to provide helpful error messages if a contract calls an oracle that doesn't exist. We don't throw\n/// immediately if AZTEC_NR_MINOR > PXE_MINOR because if a contract is updated to use a newer Aztec.nr dependency\n/// without actually using any of the new oracles then there is no reason to throw.\npub global ORACLE_VERSION_MAJOR: Field = 30;\npub global ORACLE_VERSION_MINOR: Field =
|
|
1480
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/oracle/version.nr",
|
|
1481
|
+
"source": "/// The oracle version constants are used to check that the oracle interface is in sync between PXE and Aztec.nr.\n/// We version the oracle interface as `major.minor` where:\n/// - `major` = backward-breaking changes (must match exactly between PXE and Aztec.nr)\n/// - `minor` = oracle additions (non-breaking; PXE minor >= contract minor)\n///\n/// The TypeScript counterparts are in `oracle_version.ts`.\n///\n/// @dev Whenever a contract function or Noir test is run, the `aztec_misc_assertCompatibleOracleVersion` oracle is\n/// called. If the major version is incompatible, an error is thrown immediately. The minor version is recorded by\n/// the PXE and used to provide helpful error messages if a contract calls an oracle that doesn't exist. We don't throw\n/// immediately if AZTEC_NR_MINOR > PXE_MINOR because if a contract is updated to use a newer Aztec.nr dependency\n/// without actually using any of the new oracles then there is no reason to throw.\npub global ORACLE_VERSION_MAJOR: Field = 30;\npub global ORACLE_VERSION_MINOR: Field = 5;\n\n/// Asserts that the version of the oracle is compatible with the version expected by the contract.\npub fn assert_compatible_oracle_version() {\n // Safety: This oracle call returns nothing: we only call it to check Aztec.nr and Oracle interface versions are\n // compatible. It is therefore always safe to call.\n unsafe {\n assert_compatible_oracle_version_wrapper();\n }\n}\n\nunconstrained fn assert_compatible_oracle_version_wrapper() {\n assert_compatible_oracle_version_oracle(ORACLE_VERSION_MAJOR, ORACLE_VERSION_MINOR);\n}\n\n#[oracle(aztec_misc_assertCompatibleOracleVersion)]\nunconstrained fn assert_compatible_oracle_version_oracle(major: Field, minor: Field) {}\n\nmod test {\n use super::{assert_compatible_oracle_version_oracle, ORACLE_VERSION_MAJOR, ORACLE_VERSION_MINOR};\n\n #[test]\n unconstrained fn compatible_oracle_version() {\n assert_compatible_oracle_version_oracle(ORACLE_VERSION_MAJOR, ORACLE_VERSION_MINOR);\n }\n\n #[test(should_fail_with = \"Incompatible aztec cli version:\")]\n unconstrained fn incompatible_oracle_version_major() {\n let arbitrary_incorrect_major = 318183437;\n assert_compatible_oracle_version_oracle(arbitrary_incorrect_major, ORACLE_VERSION_MINOR);\n }\n}\n"
|
|
1752
1482
|
},
|
|
1753
1483
|
"218": {
|
|
1754
1484
|
"function_locations": [
|
|
@@ -1861,7 +1591,7 @@
|
|
|
1861
1591
|
"start": 22505
|
|
1862
1592
|
}
|
|
1863
1593
|
],
|
|
1864
|
-
"path": "/home/
|
|
1594
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/partial_notes/fsm.nr",
|
|
1865
1595
|
"source": "//! The finite state machine to process a single partial note.\n//!\n//! A partial note arrives in two parts: a private part (delivered first, carrying the owner, randomness, completion-log\n//! tag, note type, and packed private content) and a public *completion log* (storage slot + packed public content).\n//! The note can only be discovered and stored once both are combined. The state chart below summarizes how a single\n//! partial note's process unfolds, including how reorgs cause it to rewind.\n//!\n//! ```text\n//! init() (partial note delivery message, including tx and block data)\n//! |\n//! v\n//! +-----------+ completion log found +-----------+\n//! ---- | | ------------------------------> | |\n//! log not found | | | | | discover note(s),\n//! |--> | PENDING | | COMPLETED | ~~> enqueue for storage, etc\n//! | | <------------------------------ | |\n//! | | completion log block re-orged | |\n//! +-----------+ +-----------+\n//! | |\n//! | delivery message block re-orged | completion log block finalized\n//! v v\n//! +---------------------------------------------------------+\n//! | TERMINATED (process ends) |\n//! +---------------------------------------------------------+\n//! ```\n//!\n//! ## States\n//!\n//! - **Pending**: the private part has been received but the completion log has not been found yet. While in this\n//! state, message discovery keeps searching for that log on each sync.\n//! - **Completed**: the completion log was found, so the note was completed and enqueued for storage. Because the\n//! block containing the completion log can be dropped by a reorg, this state is not terminal until the block\n//! finalizes: a reorg dropping it rewinds the FSM back to `Pending` state.\n//! - **Terminated**: nothing else can be done with the partial note, either because its delivery block was re-orged\n//! away (so the delivery itself was reverted) or because its completion block has finalized (so the discovered note\n//! is permanent and reorg-proof). This is the terminal state of this FSM.\n//!\n//! ## Transitions (each evaluated by [`step`](PartialNoteFsm::step))\n//!\n//! - **Pending -> Completed** ([`complete_with_log`](PartialNoteFsm::complete_with_log)): the completion log is\n//! found. Its public content is combined with the delivered private content, the resulting note(s) are discovered\n//! and enqueued for storage.\n//! - **Completed -> Pending**: the completion log block is re-orged out. The completion log is searched for again.\n//! - **Pending -> Terminated**: the delivery block is re-orged out, retracting the `delivered` birth fact. The\n//! delivery was reverted, so there is nothing left to do.\n//! - **Completed -> Terminated**: the completion log block finalizes, making the discovered note reorg-proof, so the\n//! reception is complete and its collection is deleted.\n//!\n//! ## Implementation\n//!\n//! Each pending partial note is tracked as a [fact collection](crate::facts::FactCollection) of type\n//! `PARTIAL_NOTE_RECEPTION_TYPE_ID`, identified by a hash of its [`DeliveredPendingPartialNote`] content (so\n//! re-delivery of the same partial note is idempotent). The collection holds:\n//!\n//! - a retractable `PARTIAL_NOTE_DELIVERED` birth fact tied to a delivery block (so a reorg of that block auto-prunes\n//! the pending note), whose payload is the serialized [`DeliveredPendingPartialNote`];\n//! - once the completion log is found, a retractable `PARTIAL_NOTE_COMPLETED` fact tied to the completion log block.\n//!\n//! Status folds from the canonical fact set:\n//! - `delivered` only ⇒ Pending\n//! - `delivered` + `completed` ⇒ Completed\n//!\n//! A reorg retracting either fact folds the reception back accordingly.\nuse crate::ephemeral::EphemeralArray;\nuse crate::facts::{\n delete_fact_collection, Fact, FactCollection, get_fact_collections_by_type, OriginBlock, record_retractable_fact,\n RetractableFactOrigin,\n};\nuse crate::logging::aztecnr_debug_log_format;\nuse crate::messages::{\n discovery::{ComputeNoteHash, ComputeNoteNullifier, nonce_discovery::attempt_note_nonce_discovery},\n processing::{enqueue_note_for_validation, log_retrieval_response::{LogRetrievalResponse, MAX_LOG_CONTENT_LEN}},\n};\nuse crate::protocol::{address::AztecAddress, hash::{poseidon2_hash, sha256_to_field}, traits::{Deserialize, Serialize}};\nuse crate::utils::array;\nuse super::DeliveredPendingPartialNote;\n\n/// Fact-collection type id shared by every partial-note reception in the [fact store](crate::facts).\nglobal PARTIAL_NOTE_RECEPTION_TYPE_ID: Field = sha256_to_field(\"AZTEC_NR::PARTIAL_NOTE_RECEPTION_TYPE_ID\".as_bytes());\n\n/// Fact type id of the birth fact carrying the delivered private partial note.\nglobal PARTIAL_NOTE_DELIVERED: Field = sha256_to_field(\"AZTEC_NR::PARTIAL_NOTE_DELIVERED\".as_bytes());\n\n/// Fact type id marking a partial note as completed (its note has been discovered and enqueued).\nglobal PARTIAL_NOTE_COMPLETED: Field = sha256_to_field(\"AZTEC_NR::PARTIAL_NOTE_COMPLETED\".as_bytes());\n\n/// A single partial note's finite state machine, backed by a [`FactCollection`](crate::facts::FactCollection).\n#[derive(Deserialize, Serialize)]\npub(crate) struct PartialNoteFsm {\n collection: FactCollection,\n}\n\nimpl PartialNoteFsm {\n /// Initializes an FSM for a freshly discovered partial note.\n ///\n /// The FSM existence is tied to `origin_block`: if `origin_block` is dropped by a reorg, the FSM is transparently\n /// deleted.\n pub(crate) unconstrained fn init(\n contract_address: AztecAddress,\n scope: AztecAddress,\n pending: DeliveredPendingPartialNote,\n origin_block: OriginBlock,\n ) {\n record_retractable_fact(\n contract_address,\n scope,\n PARTIAL_NOTE_RECEPTION_TYPE_ID,\n Self::id_for(pending),\n PARTIAL_NOTE_DELIVERED,\n to_payload(pending),\n origin_block,\n );\n }\n\n /// Loads every active partial-note FSM for the given contract and scope.\n pub(crate) unconstrained fn load_all(\n contract_address: AztecAddress,\n scope: AztecAddress,\n ) -> EphemeralArray<PartialNoteFsm> {\n get_fact_collections_by_type(contract_address, scope, PARTIAL_NOTE_RECEPTION_TYPE_ID)\n .map(|collection: FactCollection| PartialNoteFsm { collection })\n }\n\n /// The fact-collection id identifying a specific partial note.\n fn id_for(pending: DeliveredPendingPartialNote) -> Field {\n poseidon2_hash(pending.serialize())\n }\n\n /// Reads and decodes the delivered partial note this FSM processes.\n pub(crate) unconstrained fn read_pending_partial_note(self) -> DeliveredPendingPartialNote {\n let delivered = self.collection.facts.find(|f: Fact| f.fact_type_id == PARTIAL_NOTE_DELIVERED).unwrap();\n let mut fields = [0; <DeliveredPendingPartialNote as Deserialize>::N];\n for i in 0..fields.len() {\n fields[i] = delivered.payload.get(i);\n }\n Deserialize::deserialize(fields)\n }\n\n /// Whether the partial note FSM is in `completed` state, i.e. its note was completed and stored.\n unconstrained fn is_completed(self) -> bool {\n self.collection.facts.any(|f: Fact| f.fact_type_id == PARTIAL_NOTE_COMPLETED)\n }\n\n /// Whether the partial note FSM is in `pending` state, i.e. it hasn't been completed yet.\n pub(crate) unconstrained fn is_pending(self) -> bool {\n !self.is_completed()\n }\n\n /// Origin block of the partial note completion log, if available.\n unconstrained fn completion_log_origin(self) -> Option<RetractableFactOrigin> {\n let maybe_completed = self.collection.facts.find(|f: Fact| f.fact_type_id == PARTIAL_NOTE_COMPLETED);\n if maybe_completed.is_some() {\n maybe_completed.unwrap().origin_block\n } else {\n Option::none()\n }\n }\n\n /// Transition the partial note FSM as `completed`, conditional to `origin_block`.\n unconstrained fn mark_completed(self, origin_block: OriginBlock) {\n let empty_payload: EphemeralArray<Field> = EphemeralArray::empty();\n record_retractable_fact(\n self.collection.contract_address,\n self.collection.scope,\n self.collection.fact_collection_type_id,\n self.collection.fact_collection_id,\n PARTIAL_NOTE_COMPLETED,\n empty_payload,\n origin_block,\n );\n }\n\n /// Terminates this partial note FSM.\n unconstrained fn terminate(self) {\n delete_fact_collection(\n self.collection.contract_address,\n self.collection.scope,\n self.collection.fact_collection_type_id,\n self.collection.fact_collection_id,\n );\n }\n\n /// Advances this partial-note FSM by one step.\n ///\n /// Partial notes can only be completed if completion logs have been found for them. Log discovery and\n /// provisioning is responsibility of the caller.\n ///\n /// `compute_note_hash` and `compute_note_nullifier` are injected dependencies.\n pub(crate) unconstrained fn step(\n self,\n maybe_completion_logs: Option<EphemeralArray<LogRetrievalResponse>>,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n ) {\n if self.is_pending() {\n self.step_pending(maybe_completion_logs, compute_note_hash, compute_note_nullifier);\n } else {\n self.step_completed();\n }\n }\n\n /// Processes a partial note in pending state\n ///\n /// Completes the partial note if its completion log is given. If not, the partial note remains in pending state\n /// and its completion log is searched for again on future syncs.\n unconstrained fn step_pending(\n self,\n maybe_completion_logs: Option<EphemeralArray<LogRetrievalResponse>>,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n ) {\n if maybe_completion_logs.is_some() {\n let completion_logs = maybe_completion_logs.unwrap();\n let num_logs = completion_logs.len();\n if num_logs != 0 {\n assert(num_logs == 1, f\"Expected at most 1 completion log per partial note, got {num_logs}\");\n self.complete_with_log(completion_logs.get(0), compute_note_hash, compute_note_nullifier);\n }\n }\n }\n\n /// Advances partial note in `completed` state: terminates it once the completion log block finalizes, since the\n /// discovered note is then permanent and there is nothing left to track.\n unconstrained fn step_completed(self) {\n if self.completion_log_origin().unwrap().block_state.is_finalized() {\n self.terminate();\n }\n }\n\n /// Completes a partial note.\n ///\n /// Combines the delivered private content with the log's public content, discovers the resulting note(s), enqueues\n /// them for validation, and transitions the FSM to `completed` state conditional to the completion log's block.\n ///\n /// Because the completion fact is retractable, a reorg of the completion log's block rewinds the FSM back to\n /// `pending` state (which signals that completion log search should restart).\n unconstrained fn complete_with_log(\n self,\n log: LogRetrievalResponse,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n ) {\n let pending = self.read_pending_partial_note();\n\n // The first field in the completion log payload is the storage slot, followed by the public note content.\n let storage_slot = log.log_payload.get(0);\n let public_note_content: BoundedVec<Field, MAX_LOG_CONTENT_LEN - 1> = array::subbvec(log.log_payload, 1);\n\n // Public fields are placed at the end of the packed representation, so we combine the private and public\n // packed content to get the complete packed note.\n let complete_packed_note = array::append(pending.packed_private_note_content, public_note_content);\n\n let discovered_notes = attempt_note_nonce_discovery(\n log.unique_note_hashes_in_tx,\n log.first_nullifier_in_tx,\n compute_note_hash,\n compute_note_nullifier,\n self.collection.contract_address,\n pending.owner,\n storage_slot,\n pending.randomness,\n pending.note_type_id,\n complete_packed_note,\n );\n\n // TODO(#11627): is there anything reasonable we can do if we get a log but it doesn't result in a note being\n // found?\n if discovered_notes.len() == 0 {\n panic(\n f\"A partial note's completion log did not result in any notes being found - this should never happen\",\n );\n }\n\n aztecnr_debug_log_format!(\"Discovered {0} notes for partial note with tag {1}\")([\n discovered_notes.len() as Field,\n pending.note_completion_log_tag,\n ]);\n\n discovered_notes.for_each(|discovered_note| {\n enqueue_note_for_validation(\n self.collection.contract_address,\n pending.owner,\n storage_slot,\n pending.randomness,\n discovered_note.note_nonce,\n complete_packed_note,\n discovered_note.note_hash,\n discovered_note.inner_nullifier,\n log.tx_hash,\n );\n });\n\n self.mark_completed(OriginBlock { block_number: log.block_number, block_hash: log.block_hash });\n }\n}\n\n/// Serializes a [`DeliveredPendingPartialNote`] into a fact payload.\nunconstrained fn to_payload(pending: DeliveredPendingPartialNote) -> EphemeralArray<Field> {\n let fields = pending.serialize();\n let payload: EphemeralArray<Field> = EphemeralArray::empty();\n for i in 0..fields.len() {\n payload.push(fields[i]);\n }\n payload\n}\n\nmod test {\n use crate::ephemeral::EphemeralArray;\n use crate::facts::OriginBlock;\n use crate::messages::logs::note::MAX_NOTE_PACKED_LEN;\n use crate::messages::processing::log_retrieval_response::LogRetrievalResponse;\n use crate::partial_notes::DeliveredPendingPartialNote;\n use crate::protocol::address::AztecAddress;\n use crate::test::helpers::test_environment::TestEnvironment;\n use super::PartialNoteFsm;\n\n unconstrained fn setup() -> (TestEnvironment, AztecAddress) {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n (env, scope)\n }\n\n /// A delivered partial note with simple dummy content.\n unconstrained fn make_pending(owner: AztecAddress) -> DeliveredPendingPartialNote {\n DeliveredPendingPartialNote {\n owner,\n randomness: 0x11,\n note_completion_log_tag: 0x22,\n note_type_id: 0x33,\n packed_private_note_content: BoundedVec::new(),\n }\n }\n\n /// A low block, which TXE (proven == finalized == latest) reports as finalized.\n fn finalized_block() -> OriginBlock {\n OriginBlock { block_number: 1, block_hash: 0 }\n }\n\n #[test]\n unconstrained fn init_creates_a_partial_note_fsm_in_pending_state() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n\n let all = PartialNoteFsm::load_all(address, scope);\n assert_eq(all.len(), 1);\n assert(all.get(0).is_pending(), \"freshly delivered reception should be pending\");\n assert(all.get(0).completion_log_origin().is_none());\n });\n }\n\n #[test]\n unconstrained fn read_pending_round_trips_the_delivered_content() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n\n let pending = PartialNoteFsm::load_all(address, scope).get(0).read_pending_partial_note();\n assert_eq(pending.owner, scope);\n assert_eq(pending.randomness, 0x11);\n assert_eq(pending.note_completion_log_tag, 0x22);\n assert_eq(pending.note_type_id, 0x33);\n });\n }\n\n #[test]\n unconstrained fn mark_completed_moves_to_completed() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n\n PartialNoteFsm::load_all(address, scope).get(0).mark_completed(finalized_block());\n\n let reloaded = PartialNoteFsm::load_all(address, scope).get(0);\n assert(reloaded.is_completed(), \"should be completed after mark_completed\");\n assert(reloaded.completion_log_origin().unwrap().block_state.is_finalized());\n });\n }\n\n #[test]\n unconstrained fn terminate_deletes_the_collection() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n\n PartialNoteFsm::load_all(address, scope).get(0).terminate();\n assert_eq(PartialNoteFsm::load_all(address, scope).len(), 0);\n });\n }\n\n #[test]\n unconstrained fn re_init_is_idempotent() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n\n assert_eq(PartialNoteFsm::load_all(address, scope).len(), 1);\n });\n }\n\n #[test]\n unconstrained fn step_leaves_a_pending_reception_untouched_when_it_has_no_completion_log() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n\n // Neither an empty fetched-logs set (`Some(empty)`, the pass-1 \"searched, found nothing\" case) nor no\n // fetch at all (`None`, the pass-2 case) can complete a pending reception, so it stays pending.\n let no_logs: EphemeralArray<LogRetrievalResponse> = EphemeralArray::empty();\n PartialNoteFsm::load_all(address, scope).get(0).step(\n Option::some(no_logs),\n dummy_compute_note_hash,\n dummy_compute_note_nullifier,\n );\n PartialNoteFsm::load_all(address, scope).get(0).step(\n Option::none(),\n dummy_compute_note_hash,\n dummy_compute_note_nullifier,\n );\n\n let all = PartialNoteFsm::load_all(address, scope);\n assert_eq(all.len(), 1);\n assert(all.get(0).is_pending(), \"reception without a completion log should stay pending\");\n });\n }\n\n #[test]\n unconstrained fn step_terminates_a_completed_reception_once_its_block_is_finalized() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n PartialNoteFsm::load_all(address, scope).get(0).mark_completed(finalized_block());\n\n // Completed with a finalized completion block: the discovered note is reorg-proof, so step terminates the\n // FSM by deleting its collection.\n PartialNoteFsm::load_all(address, scope).get(0).step(\n Option::none(),\n dummy_compute_note_hash,\n dummy_compute_note_nullifier,\n );\n\n assert_eq(PartialNoteFsm::load_all(address, scope).len(), 0);\n });\n }\n\n #[test]\n unconstrained fn step_keeps_a_completed_reception_while_its_block_is_unfinalized() {\n let (env, scope) = setup();\n // A future block never finalizes here, so the completed reception must survive the step.\n let unfinalized_block = OriginBlock { block_number: env.last_block_number() + 100, block_hash: 0 };\n env.private_context(|context| {\n let address = context.this_address();\n PartialNoteFsm::init(address, scope, make_pending(scope), finalized_block());\n PartialNoteFsm::load_all(address, scope).get(0).mark_completed(unfinalized_block);\n\n // Completed but not yet finalized: step must not terminate it, since a reorg could still fold it back.\n PartialNoteFsm::load_all(address, scope).get(0).step(\n Option::none(),\n dummy_compute_note_hash,\n dummy_compute_note_nullifier,\n );\n\n let all = PartialNoteFsm::load_all(address, scope);\n assert_eq(all.len(), 1);\n assert(all.get(0).is_completed(), \"unfinalized completed reception should survive step\");\n });\n }\n\n unconstrained fn dummy_compute_note_hash(\n _packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n _owner: AztecAddress,\n _storage_slot: Field,\n _note_type_id: Field,\n _contract_address: AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n Option::none()\n }\n\n unconstrained fn dummy_compute_note_nullifier(\n _unique_note_hash: Field,\n _packed_note: BoundedVec<Field, MAX_NOTE_PACKED_LEN>,\n _owner: AztecAddress,\n _storage_slot: Field,\n _note_type_id: Field,\n _contract_address: AztecAddress,\n _randomness: Field,\n ) -> Option<Field> {\n Option::none()\n }\n}\n"
|
|
1866
1596
|
},
|
|
1867
1597
|
"219": {
|
|
@@ -1875,7 +1605,7 @@
|
|
|
1875
1605
|
"start": 2404
|
|
1876
1606
|
}
|
|
1877
1607
|
],
|
|
1878
|
-
"path": "/home/
|
|
1608
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/partial_notes/mod.nr",
|
|
1879
1609
|
"source": "mod fsm;\n\nuse crate::{\n facts::OriginBlock,\n messages::{\n discovery::{ComputeNoteHash, ComputeNoteNullifier},\n encoding::MAX_MESSAGE_CONTENT_LEN,\n logs::partial_note::{decode_partial_note_private_message, MAX_PARTIAL_NOTE_PRIVATE_PACKED_LEN},\n processing::{get_pending_partial_notes_completion_logs, ResolvedTx},\n },\n};\n\nuse crate::logging::{aztecnr_debug_log_format, aztecnr_warn_log_format};\nuse crate::protocol::{address::AztecAddress, traits::{Deserialize, Serialize}};\nuse fsm::PartialNoteFsm;\n\n/// A partial note that was delivered but is still pending completion. Contains the information necessary to find the\n/// log that will complete it and lead to a note being discovered and delivered.\n#[derive(Serialize, Deserialize)]\npub(crate) struct DeliveredPendingPartialNote {\n pub(crate) owner: AztecAddress,\n pub(crate) randomness: Field,\n pub(crate) note_completion_log_tag: Field,\n pub(crate) note_type_id: Field,\n pub(crate) packed_private_note_content: BoundedVec<Field, MAX_PARTIAL_NOTE_PRIVATE_PACKED_LEN>,\n}\n\npub(crate) unconstrained fn process_partial_note_private_msg(\n contract_address: AztecAddress,\n msg_metadata: u64,\n msg_content: BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>,\n resolved_tx: ResolvedTx,\n recipient: AztecAddress,\n) {\n let decoded = decode_partial_note_private_message(msg_metadata, msg_content);\n\n if decoded.is_some() {\n let (owner, randomness, note_completion_log_tag, note_type_id, packed_private_note_content) = decoded.unwrap();\n\n PartialNoteFsm::init(\n contract_address,\n recipient,\n DeliveredPendingPartialNote {\n owner,\n randomness,\n note_completion_log_tag,\n note_type_id,\n packed_private_note_content,\n },\n OriginBlock { block_number: resolved_tx.block_number, block_hash: resolved_tx.block_hash },\n );\n } else {\n aztecnr_warn_log_format!(\n \"Could not decode partial note private message from tx {0}, ignoring\",\n )(\n [resolved_tx.tx_hash],\n );\n }\n}\n\n/// Drives every active partial-note FSM forward.\npub(crate) unconstrained fn sync(\n contract_address: AztecAddress,\n compute_note_hash: ComputeNoteHash,\n compute_note_nullifier: ComputeNoteNullifier,\n scope: AztecAddress,\n) {\n // `load_all` is a relatively expensive oracle round-trip, so we call it once and reuse the result.\n let active_partial_note_fsms = PartialNoteFsm::load_all(contract_address, scope);\n\n // Fetching completion logs is the dominant cost of partial note contract sync (a node round-trip each) and only\n // pending notes need them, so we batch that fetch for the pending subset and then drive the FSMs in two passes:\n // 1. Step each pending FSM with its freshly-fetched completion logs, giving found logs a chance to complete notes.\n // 2. Step every active FSM with no logs, which is where completed-and-finalized FSMs terminate.\n // Keeping both the completion and termination logic inside `PartialNoteFsm::step` is what lets the orchestrator\n // stay this small, the price is the somewhat less elegant two-pass shape that the batched fetch forces on us.\n let pending_partial_note_fsms = active_partial_note_fsms.filter(|fsm: PartialNoteFsm| fsm.is_pending());\n let pending_partial_notes = pending_partial_note_fsms.map(|fsm: PartialNoteFsm| fsm.read_pending_partial_note());\n\n aztecnr_debug_log_format!(\"{} pending partial notes\")([pending_partial_notes.len() as Field]);\n\n let completion_logs = get_pending_partial_notes_completion_logs(contract_address, pending_partial_notes);\n assert_eq(completion_logs.len(), pending_partial_notes.len());\n\n pending_partial_note_fsms.for_each(|i, fsm: PartialNoteFsm| {\n fsm.step(Option::some(completion_logs.get(i)), compute_note_hash, compute_note_nullifier);\n });\n\n active_partial_note_fsms.for_each(|_i, fsm: PartialNoteFsm| {\n fsm.step(Option::none(), compute_note_hash, compute_note_nullifier);\n });\n}\n"
|
|
1880
1610
|
},
|
|
1881
1611
|
"272": {
|
|
@@ -1945,7 +1675,7 @@
|
|
|
1945
1675
|
"start": 7995
|
|
1946
1676
|
}
|
|
1947
1677
|
],
|
|
1948
|
-
"path": "/home/
|
|
1678
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/unconstrained_array/mod.nr",
|
|
1949
1679
|
"source": "pub(crate) mod test_helpers;\npub(crate) mod test_suite;\n\nuse crate::oracle::random::random;\nuse crate::protocol::traits::{Deserialize, Serialize};\n\n/// Oracle backend for an [`UnconstrainedArray`]: the set of PXE-side operations that implement its storage.\n///\n/// Each implementor routes these operations to a distinct family of oracles, and the oracle family determines the\n/// array's lifetime and visibility (e.g. [`EphemeralArray`](crate::ephemeral::EphemeralArray) arrays live for one\n/// contract call frame, while [`TransientArray`](crate::transient::TransientArray) arrays are shared across all frames\n/// of the same contract within one top-level PXE call).\npub(crate) trait ArrayOracles {\n /// Returns the number of elements in the array at `slot`.\n unconstrained fn len_oracle(slot: Field) -> u32;\n\n /// Appends a serialized element to the array at `slot` and returns the new length.\n unconstrained fn push_oracle<let N: u32>(slot: Field, values: [Field; N]) -> u32;\n\n /// Removes and returns the last serialized element of the array at `slot`. Implementors must panic if the\n /// array is empty.\n unconstrained fn pop_oracle<let N: u32>(slot: Field) -> [Field; N];\n\n /// Returns the serialized element at the given index of the array at `slot`. Implementors must panic if `index`\n /// is out of bounds.\n unconstrained fn get_oracle<let N: u32>(slot: Field, index: u32) -> [Field; N];\n\n /// Overwrites the serialized element at the given index of the array at `slot`. Implementors must panic if\n /// `index` is out of bounds.\n unconstrained fn set_oracle<let N: u32>(slot: Field, index: u32, values: [Field; N]);\n\n /// Removes the element at the given index of the array at `slot`, shifting subsequent elements backward.\n /// Implementors must panic if `index` is out of bounds.\n unconstrained fn remove_oracle(slot: Field, index: u32);\n\n /// Removes all elements from the array at `slot`.\n unconstrained fn clear_oracle(slot: Field);\n}\n\n/// A dynamically sized array backed by PXE-side in-memory storage via an [`ArrayOracles`] backend.\n///\n/// Arrays are identified by a slot, and each logical operation (push, pop, get, etc.) is a single oracle call. The\n/// `Oracle` backend determines the array's lifetime and visibility; contracts should not use this type directly but\n/// rather one of its aliases: [`EphemeralArray`](crate::ephemeral::EphemeralArray) (scoped to a single contract call\n/// frame) or [`TransientArray`](crate::transient::TransientArray) (shared across all frames of the same contract\n/// within one top-level PXE call).\npub struct UnconstrainedArray<T, Oracle> {\n pub(crate) slot: Field,\n}\n\nimpl<T, Oracle> UnconstrainedArray<T, Oracle>\nwhere\n Oracle: ArrayOracles,\n{\n /// Returns a handle to the array at the given slot, which may already contain data (e.g. populated by an oracle\n /// or by an earlier frame, depending on the backend's visibility).\n pub unconstrained fn at(slot: Field) -> Self {\n Self { slot }\n }\n\n /// Returns an empty array at the given slot, clearing any pre-existing data.\n ///\n /// For backends whose arrays are visible beyond a single call frame (e.g. transient arrays), this wipes data\n /// other frames of the same contract may have written at the slot.\n pub unconstrained fn empty_at(slot: Field) -> Self {\n Self::at(slot).clear()\n }\n\n /// Returns an empty array at a fresh, randomly allocated slot.\n ///\n /// Use this when the caller does not need a specific slot: the random slot is isolated from every other array of\n /// the same backend with overwhelming probability. Prefer [`UnconstrainedArray::empty_at`] when the slot must be a\n /// known value (e.g. one shared with an oracle or another call frame).\n pub unconstrained fn empty() -> Self {\n Self::at(random())\n }\n\n /// Returns the number of elements stored in the array.\n pub unconstrained fn len(self) -> u32 {\n Oracle::len_oracle(self.slot)\n }\n\n /// Stores a value at the end of the array.\n pub unconstrained fn push(self, value: T)\n where\n T: Serialize,\n {\n let serialized = value.serialize();\n let _ = Oracle::push_oracle(self.slot, serialized);\n }\n\n /// Removes and returns the last element. Implementors are required to panic if the array is empty.\n pub unconstrained fn pop(self) -> T\n where\n T: Deserialize,\n {\n let serialized = Oracle::pop_oracle(self.slot);\n Deserialize::deserialize(serialized)\n }\n\n /// Retrieves the value stored at `index`. Implementors are required to panic if the index is out of bounds.\n pub unconstrained fn get(self, index: u32) -> T\n where\n T: Deserialize,\n {\n let serialized = Oracle::get_oracle(self.slot, index);\n Deserialize::deserialize(serialized)\n }\n\n /// Overwrites the value stored at `index`. Implementors are required to panic if the index is out of bounds.\n pub unconstrained fn set(self, index: u32, value: T)\n where\n T: Serialize,\n {\n let serialized = value.serialize();\n Oracle::set_oracle(self.slot, index, serialized);\n }\n\n /// Removes the element at `index`, shifting subsequent elements backward. Implementors are required to panic if\n /// the index is out of bounds.\n pub unconstrained fn remove(self, index: u32) {\n Oracle::remove_oracle(self.slot, index);\n }\n\n /// Removes all elements from the array and returns self for chaining.\n pub unconstrained fn clear(self) -> Self {\n Oracle::clear_oracle(self.slot);\n self\n }\n\n /// Calls a function on each element of the array.\n ///\n /// The function `f` is called once with each array value and its corresponding index, in order (from the first\n /// element to the last).\n ///\n /// Structurally mutating the array from inside the callback (e.g. via `push`, `pop`, `remove` or `clear`) is\n /// **not** supported: it can cause elements to be skipped, visited more than once, or read out of bounds.\n pub unconstrained fn for_each<Env>(self, f: unconstrained fn[Env](u32, T) -> ())\n where\n T: Deserialize,\n {\n let n = self.len();\n for i in 0..n {\n f(i, self.get(i));\n }\n }\n\n /// Applies `f` to every element and collects the results into a fresh array.\n pub unconstrained fn map<U, Env>(self, f: unconstrained fn[Env](T) -> U) -> UnconstrainedArray<U, Oracle>\n where\n T: Deserialize,\n U: Serialize,\n {\n let dest: UnconstrainedArray<U, Oracle> = UnconstrainedArray::empty();\n let n = self.len();\n for i in 0..n {\n dest.push(f(self.get(i)));\n }\n dest\n }\n\n /// Collects every element satisfying the predicate `f` into a fresh array.\n pub unconstrained fn filter<Env>(self, f: unconstrained fn[Env](T) -> bool) -> Self\n where\n T: Serialize + Deserialize,\n {\n let dest: Self = UnconstrainedArray::empty();\n let n = self.len();\n for i in 0..n {\n let value = self.get(i);\n if f(value) {\n dest.push(value);\n }\n }\n dest\n }\n\n /// Returns `true` if at least one element satisfies the predicate `f`.\n pub unconstrained fn any<Env>(self, f: unconstrained fn[Env](T) -> bool) -> bool\n where\n T: Serialize + Deserialize,\n {\n self.filter(f).len() != 0\n }\n\n /// Returns `true` if every element satisfies the predicate `f` (vacuously `true` for an empty array).\n pub unconstrained fn all<Env>(self, f: unconstrained fn[Env](T) -> bool) -> bool\n where\n T: Serialize + Deserialize,\n {\n self.filter(f).len() == self.len()\n }\n\n /// Returns the first element satisfying the predicate `f`, or `Option::none` if none do.\n pub unconstrained fn find<Env>(self, f: unconstrained fn[Env](T) -> bool) -> Option<T>\n where\n T: Deserialize,\n {\n let n = self.len();\n let mut result: Option<T> = Option::none();\n let mut i = 0;\n while (i < n) & result.is_none() {\n let value = self.get(i);\n if f(value) {\n result = Option::some(value);\n }\n i += 1;\n }\n result\n }\n}\n"
|
|
1950
1680
|
},
|
|
1951
1681
|
"275": {
|
|
@@ -1967,7 +1697,7 @@
|
|
|
1967
1697
|
"start": 1387
|
|
1968
1698
|
}
|
|
1969
1699
|
],
|
|
1970
|
-
"path": "/home/
|
|
1700
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/utils/array/append.nr",
|
|
1971
1701
|
"source": "/// Appends the elements of the second `BoundedVec` to the end of the first one. The resulting `BoundedVec` can have\n/// any arbitrary maximum length, but it must be large enough to fit all of the elements of both the first and second\n/// vectors.\npub fn append<T, let ALen: u32, let BLen: u32, let DstLen: u32>(\n a: BoundedVec<T, ALen>,\n b: BoundedVec<T, BLen>,\n) -> BoundedVec<T, DstLen> {\n let mut dst = BoundedVec::new();\n\n dst.extend_from_bounded_vec(a);\n dst.extend_from_bounded_vec(b);\n\n dst\n}\n\nmod test {\n use super::append;\n\n #[test]\n unconstrained fn append_empty_vecs() {\n let a: BoundedVec<_, 3> = BoundedVec::new();\n let b: BoundedVec<_, 14> = BoundedVec::new();\n\n let result: BoundedVec<Field, 5> = append(a, b);\n\n assert_eq(result.len(), 0);\n assert_eq(result.storage(), std::mem::zeroed());\n }\n\n #[test]\n unconstrained fn append_non_empty_vecs() {\n let a: BoundedVec<_, 3> = BoundedVec::from_array([1, 2, 3]);\n let b: BoundedVec<_, 14> = BoundedVec::from_array([4, 5, 6]);\n\n let result: BoundedVec<Field, 8> = append(a, b);\n\n assert_eq(result.len(), 6);\n assert_eq(result.storage(), [1, 2, 3, 4, 5, 6, std::mem::zeroed(), std::mem::zeroed()]);\n }\n\n #[test(should_fail_with = \"out of bounds\")]\n unconstrained fn append_non_empty_vecs_insufficient_max_len() {\n let a: BoundedVec<_, 3> = BoundedVec::from_array([1, 2, 3]);\n let b: BoundedVec<_, 14> = BoundedVec::from_array([4, 5, 6]);\n\n let _: BoundedVec<Field, 5> = append(a, b);\n }\n}\n"
|
|
1972
1702
|
},
|
|
1973
1703
|
"278": {
|
|
@@ -1997,7 +1727,7 @@
|
|
|
1997
1727
|
"start": 1941
|
|
1998
1728
|
}
|
|
1999
1729
|
],
|
|
2000
|
-
"path": "/home/
|
|
1730
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/utils/array/subarray.nr",
|
|
2001
1731
|
"source": "/// Returns `DstLen` elements from a source array, starting at `offset`. `DstLen` must not be larger than the number of\n/// elements past `offset`.\n///\n/// Examples:\n/// ```\n/// let foo: [Field; 2] = subarray([1, 2, 3, 4, 5], 2);\n/// assert_eq(foo, [3, 4]);\n///\n/// let bar: [Field; 5] = subarray([1, 2, 3, 4, 5], 2); // fails - we can't return 5 elements since only 3 remain\n/// ```\npub fn subarray<T, let SrcLen: u32, let DstLen: u32>(src: [T; SrcLen], offset: u32) -> [T; DstLen] {\n assert(offset + DstLen <= SrcLen, \"DstLen too large for offset\");\n\n let mut dst: [T; DstLen] = std::mem::zeroed();\n for i in 0..DstLen {\n dst[i] = src[i + offset];\n }\n\n dst\n}\n\nmod test {\n use super::subarray;\n\n #[test]\n unconstrained fn subarray_into_empty() {\n // In all of these cases we're setting DstLen to be 0, so we always get back an empty array.\n assert_eq(subarray::<Field, _, _>([], 0), []);\n assert_eq(subarray([1, 2, 3, 4, 5], 0), []);\n assert_eq(subarray([1, 2, 3, 4, 5], 2), []);\n }\n\n #[test]\n unconstrained fn subarray_complete() {\n assert_eq(subarray::<Field, _, _>([], 0), []);\n assert_eq(subarray([1, 2, 3, 4, 5], 0), [1, 2, 3, 4, 5]);\n }\n\n #[test]\n unconstrained fn subarray_different_end_sizes() {\n // We implicitly select how many values to read in the size of the return array\n assert_eq(subarray([1, 2, 3, 4, 5], 1), [2, 3, 4, 5]);\n assert_eq(subarray([1, 2, 3, 4, 5], 1), [2, 3, 4]);\n assert_eq(subarray([1, 2, 3, 4, 5], 1), [2, 3]);\n assert_eq(subarray([1, 2, 3, 4, 5], 1), [2]);\n }\n\n #[test(should_fail_with = \"DstLen too large for offset\")]\n unconstrained fn subarray_offset_too_large() {\n // With an offset of 1 we can only request up to 4 elements\n let _: [_; 5] = subarray([1, 2, 3, 4, 5], 1);\n }\n\n #[test(should_fail)]\n unconstrained fn subarray_bad_return_value() {\n assert_eq(subarray([1, 2, 3, 4, 5], 1), [3, 3, 4, 5]);\n }\n}\n"
|
|
2002
1732
|
},
|
|
2003
1733
|
"279": {
|
|
@@ -2039,7 +1769,7 @@
|
|
|
2039
1769
|
"start": 3409
|
|
2040
1770
|
}
|
|
2041
1771
|
],
|
|
2042
|
-
"path": "/home/
|
|
1772
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/utils/array/subbvec.nr",
|
|
2043
1773
|
"source": "use crate::utils::array;\n\n/// Returns `DstMaxLen` elements from a source BoundedVec, starting at `offset`. `offset` must not be larger than the\n/// original length, and `DstLen` must not be larger than the total number of elements past `offset` (including the\n/// zeroed elements past `len()`).\n///\n/// Only elements at the beginning of the vector can be removed: it is not possible to also remove elements at the end\n/// of the vector by passing a value for `DstLen` that is smaller than `len() - offset`.\n///\n/// Examples:\n/// ```\n/// let foo = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n/// assert_eq(subbvec(foo, 2), BoundedVec::<_, 8>::from_array([3, 4, 5]));\n///\n/// let bar: BoundedVec<_, 1> = subbvec(foo, 2); // fails - we can't return just 1 element since 3 remain\n/// let baz: BoundedVec<_, 10> = subbvec(foo, 3); // fails - we can't return 10 elements since only 7 remain\n/// ```\npub fn subbvec<T, let SrcMaxLen: u32, let DstMaxLen: u32>(\n bvec: BoundedVec<T, SrcMaxLen>,\n offset: u32,\n) -> BoundedVec<T, DstMaxLen> {\n // The new storage array is a subarray of the original one (which has zeroed storage past len), so elements past\n // the new len remain zeroed: `subarray` does not allow extending arrays past their original length.\n BoundedVec::from_parts(array::subarray(bvec.storage(), offset), bvec.len() - offset)\n}\n\nmod test {\n use super::subbvec;\n\n #[test]\n unconstrained fn subbvec_empty() {\n let bvec = BoundedVec::<Field, 0>::from_array([]);\n assert_eq(subbvec(bvec, 0), bvec);\n }\n\n #[test]\n unconstrained fn subbvec_complete() {\n let bvec = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n assert_eq(subbvec(bvec, 0), bvec);\n\n let smaller_capacity = BoundedVec::<_, 5>::from_array([1, 2, 3, 4, 5]);\n assert_eq(subbvec(bvec, 0), smaller_capacity);\n }\n\n #[test]\n unconstrained fn subbvec_partial() {\n let bvec = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n\n assert_eq(subbvec(bvec, 2), BoundedVec::<_, 8>::from_array([3, 4, 5]));\n assert_eq(subbvec(bvec, 2), BoundedVec::<_, 3>::from_array([3, 4, 5]));\n }\n\n #[test]\n unconstrained fn subbvec_into_empty() {\n let bvec: BoundedVec<_, 10> = BoundedVec::from_array([1, 2, 3, 4, 5]);\n assert_eq(subbvec(bvec, 5), BoundedVec::<_, 5>::from_array([]));\n }\n\n #[test(should_fail)]\n unconstrained fn subbvec_offset_past_len() {\n let bvec = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n let _: BoundedVec<_, 1> = subbvec(bvec, 6);\n }\n\n #[test(should_fail)]\n unconstrained fn subbvec_insufficient_dst_len() {\n let bvec = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n\n // We're not providing enough space to hold all of the items inside the original BoundedVec. subbvec can cause\n // for the capacity to reduce, but not the length (other than by len - offset).\n let _: BoundedVec<_, 1> = subbvec(bvec, 2);\n }\n\n #[test(should_fail_with = \"DstLen too large for offset\")]\n unconstrained fn subbvec_dst_len_causes_enlarge() {\n let bvec = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n\n // subbvec does not support capacity increases\n let _: BoundedVec<_, 11> = subbvec(bvec, 0);\n }\n\n #[test(should_fail_with = \"DstLen too large for offset\")]\n unconstrained fn subbvec_dst_len_too_large_for_offset() {\n let bvec = BoundedVec::<_, 10>::from_array([1, 2, 3, 4, 5]);\n\n // This effectively requests a capacity increase, since there'd be just one element plus the 5 empty slots,\n // which is less than 7.\n let _: BoundedVec<_, 7> = subbvec(bvec, 4);\n }\n}\n"
|
|
2044
1774
|
},
|
|
2045
1775
|
"282": {
|
|
@@ -2065,7 +1795,7 @@
|
|
|
2065
1795
|
"start": 2454
|
|
2066
1796
|
}
|
|
2067
1797
|
],
|
|
2068
|
-
"path": "/home/
|
|
1798
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/utils/conversion/bytes_as_fields.nr",
|
|
2069
1799
|
"source": "use std::static_assert;\n\n/// Encodes an array of bytes as fields.\n///\n/// Use\n/// [`decode_bytes_from_fields`](crate::utils::conversion::bytes_as_fields::decode_bytes_from_fields) to recover\n/// the original bytes.\n///\n/// The `bytes` array length must be a multiple of 31. If padding is added, it will need to be manually removed\n/// after decoding.\n///\n/// ## Encoding\n///\n/// Each 31-byte chunk is interpreted as a big-endian integer and stored in a `Field`. For input `[1, 10, 3, ..., 0]`\n/// (31 bytes), the resulting `Field` is `1 * 256^30 + 10 * 256^29 + 3 * 256^28 + ... + 0`.\npub fn encode_bytes_as_fields<let N: u32>(bytes: [u8; N]) -> [Field; N / 31] {\n static_assert(N % 31 == 0, \"N must be a multiple of 31\");\n\n let mut fields = [0; N / 31];\n for i in 0..N / 31 {\n let mut field = 0;\n for j in 0..31 {\n field = field * 256 + bytes[i * 31 + j] as Field;\n }\n fields[i] = field;\n }\n\n fields\n}\n\n/// Decodes fields back into bytes.\n///\n/// Inverse of\n/// [`encode_bytes_as_fields`](crate::utils::conversion::bytes_as_fields::encode_bytes_as_fields).\n/// Each input `Field` must fit in 248 bits; `Field::to_be_bytes::<31>()` fails the proof otherwise.\npub fn decode_bytes_from_fields<let N: u32>(fields: BoundedVec<Field, N>) -> BoundedVec<u8, N * 31> {\n let mut bytes = BoundedVec::new();\n for i in 0..fields.len() {\n let chunk: [u8; 31] = fields.get(i).to_be_bytes();\n for j in 0..31 {\n bytes.push(chunk[j]);\n }\n }\n bytes\n}\n\nmod tests {\n use crate::utils::array::subarray;\n use super::{decode_bytes_from_fields, encode_bytes_as_fields};\n\n #[test]\n unconstrained fn round_trips_bytes(input: [u8; 93]) {\n let fields = encode_bytes_as_fields(input);\n\n // In production the fields fly through the system and arrive as a BoundedVec on the other end.\n let fields_bvec = BoundedVec::<_, 6>::from_array(fields);\n let bytes_back = decode_bytes_from_fields(fields_bvec);\n\n assert_eq(bytes_back.len(), input.len());\n assert_eq(subarray(bytes_back.storage(), 0), input);\n }\n\n #[test(should_fail_with = \"N must be a multiple of 31\")]\n unconstrained fn encode_rejects_length_not_multiple_of_31() {\n let _fields = encode_bytes_as_fields([0; 32]);\n }\n\n #[test(should_fail_with = \"Field failed to decompose into specified 31 limbs\")]\n unconstrained fn decode_rejects_oversized_field() {\n // `Field::to_be_bytes::<31>()` fails the proof when a field has any bit above position 247 set.\n let oversized: Field = (1 as Field) * 2.pow_32(249);\n let input = BoundedVec::<_, 1>::from_array([oversized]);\n let _bytes = decode_bytes_from_fields(input);\n }\n}\n"
|
|
2070
1800
|
},
|
|
2071
1801
|
"283": {
|
|
@@ -2115,7 +1845,7 @@
|
|
|
2115
1845
|
"start": 6544
|
|
2116
1846
|
}
|
|
2117
1847
|
],
|
|
2118
|
-
"path": "/home/
|
|
1848
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/utils/conversion/fields_as_bytes.nr",
|
|
2119
1849
|
"source": "/// Encodes an array of fields as bytes.\n///\n/// Losslessly preserves any field value; use\n/// [`try_decode_fields_from_bytes`](crate::utils::conversion::fields_as_bytes::try_decode_fields_from_bytes) to\n/// recover the original fields.\n///\n/// ## Encoding\n///\n/// Each field is written as 32 big-endian bytes and the chunks are concatenated. The field array `[5, 42]` becomes:\n///\n/// ```text\n/// [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5, // First field (32 bytes)\n/// 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42] // Second field (32 bytes)\n/// ```\n///\n/// ## Privacy\n///\n/// The BN254 modulus is `< 2^254`, so every 32-byte chunk has its top bit at zero and the next bit biased. The output\n/// is therefore distinguishable from uniform random bytes; take this into account when feeding it into anything that\n/// assumes uniform randomness (e.g. ciphertexts meant to look random).\npub fn encode_fields_as_bytes<let N: u32>(fields: [Field; N]) -> [u8; 32 * N] {\n let mut bytes = [0; 32 * N];\n for i in 0..N {\n let chunk: [u8; 32] = fields[i].to_be_bytes();\n for j in 0..32 {\n bytes[i * 32 + j] = chunk[j];\n }\n }\n bytes\n}\n\n/// Decodes bytes back into fields.\n///\n/// Panics if the input length is not a multiple of 32 or if any chunk exceeds the BN254 field modulus. See\n/// [`try_decode_fields_from_bytes`](crate::utils::conversion::fields_as_bytes::try_decode_fields_from_bytes)\n/// for a non-panicking variant.\npub fn decode_fields_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>) -> BoundedVec<Field, N / 32> {\n assert(bytes.len() % 32 == 0, \"Input length must be a multiple of 32\");\n try_decode_fields_from_bytes(bytes).expect(f\"Value does not fit in field\")\n}\n\n/// Decodes bytes back into fields, returning None on failure.\n///\n/// Inverse of\n/// [`encode_fields_as_bytes`](crate::utils::conversion::fields_as_bytes::encode_fields_as_bytes).\n/// Returns `Option::none()` if the input length is not a multiple of 32, or if any 32-byte chunk is `>=` the BN254\n/// field modulus.\npub fn try_decode_fields_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>) -> Option<BoundedVec<Field, N / 32>> {\n if bytes.len() % 32 == 0 {\n let num_chunks = bytes.len() / 32;\n let mut fields: BoundedVec<Field, N / 32> = BoundedVec::new();\n for i in 0..num_chunks {\n let maybe_field = try_decode_field_from_bytes(bytes, i * 32);\n if maybe_field.is_some() {\n fields.push(maybe_field.unwrap());\n }\n }\n if fields.len() == num_chunks {\n Option::some(fields)\n } else {\n Option::none()\n }\n } else {\n Option::none()\n }\n}\n\nfn try_decode_field_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>, offset: u32) -> Option<Field> {\n // Field arithmetic silently wraps values >= the modulus, so we compare each chunk against the modulus\n // byte-by-byte (big-endian) while building `field`. cmp: 0 = equal so far, 1 = less than modulus, 2 = exceeds.\n let p = std::field::modulus_be_bytes();\n let mut field = 0;\n let mut cmp: u8 = 0;\n for j in 0..32 {\n let byte = bytes.get(offset + j);\n field = field * 256 + byte as Field;\n if cmp == 0 {\n if byte < p[j] {\n cmp = 1;\n } else if byte > p[j] {\n cmp = 2;\n }\n }\n }\n\n if cmp == 1 {\n Option::some(field)\n } else {\n Option::none()\n }\n}\n\nmod tests {\n use crate::utils::array::subarray;\n use super::{decode_fields_from_bytes, encode_fields_as_bytes, try_decode_fields_from_bytes};\n\n #[test]\n unconstrained fn round_trips_fields(input: [Field; 3]) {\n let bytes = encode_fields_as_bytes(input);\n\n // In production the bytes fly through the system and arrive as a BoundedVec on the other end. 113 is an\n // arbitrary max length larger than the input length of 96.\n let bytes_bvec = BoundedVec::<_, 113>::from_array(bytes);\n let fields_back = try_decode_fields_from_bytes(bytes_bvec).unwrap();\n\n assert_eq(fields_back.len(), input.len());\n assert_eq(subarray(fields_back.storage(), 0), input);\n }\n\n #[test]\n unconstrained fn try_decode_returns_none_on_length_not_multiple_of_32() {\n let input = BoundedVec::<_, 64>::from_parts([0 as u8; 64], 33);\n assert(try_decode_fields_from_bytes(input).is_none());\n }\n\n #[test]\n unconstrained fn try_decode_accepts_max_field() {\n // -1 in field arithmetic wraps to `modulus - 1`, the largest valid field value.\n let max_field_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let input = BoundedVec::<_, 32>::from_array(max_field_as_bytes);\n\n let fields = try_decode_fields_from_bytes(input).unwrap();\n\n assert_eq(fields.get(0), -1);\n }\n\n // Verifies the overflow check: take the max allowed value, bump a random byte, feed it in.\n #[test]\n unconstrained fn try_decode_returns_none_on_chunk_above_modulus(random_value: u8) {\n let index_of_byte_to_bump = random_value % 32;\n let max_field_value_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let byte_to_bump = max_field_value_as_bytes[index_of_byte_to_bump as u32];\n\n // Skip if the selected byte is already 255. Acceptable under fuzz testing.\n if byte_to_bump != 255 {\n let mut input = BoundedVec::<_, 32>::from_array(max_field_value_as_bytes);\n input.set(index_of_byte_to_bump as u32, byte_to_bump + 1);\n\n assert(try_decode_fields_from_bytes(input).is_none());\n }\n }\n\n #[test]\n unconstrained fn try_decode_returns_none_on_chunk_equal_to_modulus() {\n // The field modulus itself is not a valid field value (it wraps to 0).\n let p: [u8; 32] = std::field::modulus_be_bytes().as_array();\n let input = BoundedVec::<u8, 32>::from_array(p);\n assert(try_decode_fields_from_bytes(input).is_none());\n }\n\n #[test(should_fail_with = \"Input length must be a multiple of 32\")]\n unconstrained fn decode_asserts_length_multiple_of_32() {\n let input = BoundedVec::<_, 143>::from_array([\n 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29,\n 30, 31, 32, 33,\n ]);\n let _fields = decode_fields_from_bytes(input);\n }\n\n #[test(should_fail_with = \"Value does not fit in field\")]\n unconstrained fn decode_panics_on_chunk_above_modulus(random_value: u8) {\n let index_of_byte_to_bump = random_value % 32;\n let max_field_value_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let byte_to_bump = max_field_value_as_bytes[index_of_byte_to_bump as u32];\n\n if byte_to_bump != 255 {\n let mut input = BoundedVec::<_, 32>::from_array(max_field_value_as_bytes);\n input.set(index_of_byte_to_bump as u32, byte_to_bump + 1);\n let _fields = decode_fields_from_bytes(input);\n }\n }\n}\n"
|
|
2120
1850
|
},
|
|
2121
1851
|
"286": {
|
|
@@ -2165,7 +1895,7 @@
|
|
|
2165
1895
|
"start": 6628
|
|
2166
1896
|
}
|
|
2167
1897
|
],
|
|
2168
|
-
"path": "/home/
|
|
1898
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/utils/point.nr",
|
|
2169
1899
|
"source": "use crate::protocol::{point::EmbeddedCurvePoint, utils::field::sqrt};\n\n// I am storing the modulus minus 1 divided by 2 here because full modulus would throw \"String literal too large\" error\n// Full modulus is 21888242871839275222246405745257275088548364400416034343698204186575808495617\nglobal BN254_FR_MODULUS_DIV_2: Field = 10944121435919637611123202872628637544274182200208017171849102093287904247808;\n\n/// Returns: true if p.y <= MOD_DIV_2, else false.\npub fn get_sign_of_point(p: EmbeddedCurvePoint) -> bool {\n // We store only a \"sign\" of the y coordinate because the rest can be derived from the x coordinate. To get the\n // sign we check if the y coordinate is less or equal than the field's modulus minus 1 divided by 2. Ideally we'd\n // do `y <= MOD_DIV_2`, but there's no `lte` function, so instead we do `!(y > MOD_DIV_2)`, which is equivalent,\n // and then rewrite that as `!(MOD_DIV_2 < y)`, since we also have no `gt` function.\n !BN254_FR_MODULUS_DIV_2.lt(p.y)\n}\n\n/// Returns an `EmbeddedCurvePoint` in the Grumpkin curve given its x coordinate.\n///\n/// Because not all values in the field are valid x coordinates of points in the curve (i.e. there is no corresponding\n/// y value in the field that satisfies the curve equation), it may not be possible to reconstruct a `Point`.\n/// `Option::none()` is returned in such cases.\npub fn point_from_x_coord(x: Field) -> Option<EmbeddedCurvePoint> {\n // y ^ 2 = x ^ 3 - 17\n let rhs = x * x * x - 17;\n sqrt(rhs).map(|y| EmbeddedCurvePoint { x, y })\n}\n\n/// Returns an `EmbeddedCurvePoint` in the Grumpkin curve given its x coordinate and sign for the y coordinate.\n///\n/// Because not all values in the field are valid x coordinates of points in the curve (i.e. there is no corresponding\n/// y value in the field that satisfies the curve equation), it may not be possible to reconstruct a `Point`.\n/// `Option::none()` is returned in such cases.\n///\n/// @param x - The x coordinate of the point @param sign - The \"sign\" of the y coordinate - determines whether y <=\n/// (Fr.MODULUS - 1) / 2\npub fn point_from_x_coord_and_sign(x: Field, sign: bool) -> Option<EmbeddedCurvePoint> {\n // y ^ 2 = x ^ 3 - 17\n let rhs = x * x * x - 17;\n\n sqrt(rhs).map(|y| {\n // If there is a square root, we need to ensure it has the correct \"sign\"\n let y_is_positive = !BN254_FR_MODULUS_DIV_2.lt(y);\n let final_y = if y_is_positive == sign { y } else { -y };\n EmbeddedCurvePoint { x, y: final_y }\n })\n}\n\nmod test {\n use crate::protocol::point::EmbeddedCurvePoint;\n use crate::utils::point::{\n BN254_FR_MODULUS_DIV_2, get_sign_of_point, point_from_x_coord, point_from_x_coord_and_sign,\n };\n\n #[test]\n unconstrained fn test_point_from_x_coord_and_sign() {\n // Test positive y coordinate\n let x = 0x1af41f5de96446dc3776a1eb2d98bb956b7acd9979a67854bec6fa7c2973bd73;\n let sign = true;\n let p = point_from_x_coord_and_sign(x, sign).unwrap();\n\n assert_eq(p.x, x);\n assert_eq(p.y, 0x07fc22c7f2c7057571f137fe46ea9c95114282bc95d37d71ec4bfb88de457d4a);\n assert_eq(p.is_infinite(), false);\n\n // Test negative y coordinate\n let x2 = 0x247371652e55dd74c9af8dbe9fb44931ba29a9229994384bd7077796c14ee2b5;\n let sign2 = false;\n let p2 = point_from_x_coord_and_sign(x2, sign2).unwrap();\n\n assert_eq(p2.x, x2);\n assert_eq(p2.y, 0x26441aec112e1ae4cee374f42556932001507ad46e255ffb27369c7e3766e5c0);\n assert_eq(p2.is_infinite(), false);\n }\n\n #[test]\n unconstrained fn test_point_from_x_coord_valid() {\n // x = 8 is a known quadratic residue - should give a valid point\n let result = point_from_x_coord(Field::from(8));\n assert(result.is_some());\n\n let point = result.unwrap();\n assert_eq(point.x, Field::from(8));\n // Check curve equation y^2 = x^3 - 17\n assert_eq(point.y * point.y, point.x * point.x * point.x - 17);\n }\n\n #[test]\n unconstrained fn test_point_from_x_coord_invalid() {\n // x = 3 is a non-residue for this curve - should give None\n let x = Field::from(3);\n let maybe_point = point_from_x_coord(x);\n assert(maybe_point.is_none());\n }\n\n #[test]\n unconstrained fn test_both_roots_satisfy_curve() {\n // Derive a point from x = 8 (known to be valid from test_point_from_x_coord_valid)\n let x: Field = 8;\n let point = point_from_x_coord(x).unwrap();\n\n // Check y satisfies curve equation\n assert_eq(point.y * point.y, x * x * x - 17);\n\n // Check -y also satisfies curve equation\n let neg_y = 0 - point.y;\n assert_eq(neg_y * neg_y, x * x * x - 17);\n\n // Verify they are different (unless y = 0)\n assert(point.y != neg_y);\n }\n\n #[test]\n unconstrained fn test_point_from_x_coord_and_sign_invalid() {\n // x = 3 has no valid point on the curve (from test_point_from_x_coord_invalid)\n let x = Field::from(3);\n let result_positive = point_from_x_coord_and_sign(x, true);\n let result_negative = point_from_x_coord_and_sign(x, false);\n\n assert(result_positive.is_none());\n assert(result_negative.is_none());\n }\n\n #[test]\n unconstrained fn test_get_sign_of_point() {\n // Derive a point from x = 8, then test both possible y values\n let point = point_from_x_coord(8).unwrap();\n let neg_point = EmbeddedCurvePoint { x: point.x, y: 0 - point.y };\n\n // One should be \"positive\" (y <= MOD_DIV_2) and one \"negative\"\n let sign1 = get_sign_of_point(point);\n let sign2 = get_sign_of_point(neg_point);\n assert(sign1 != sign2);\n\n // y = 0 should return true (0 <= MOD_DIV_2)\n let zero_y_point = EmbeddedCurvePoint { x: 0, y: 0 };\n assert(get_sign_of_point(zero_y_point) == true);\n\n // y = MOD_DIV_2 should return true (exactly at boundary)\n let boundary_point = EmbeddedCurvePoint { x: 0, y: BN254_FR_MODULUS_DIV_2 };\n assert(get_sign_of_point(boundary_point) == true);\n\n // y = MOD_DIV_2 + 1 should return false (just over boundary)\n let over_boundary_point = EmbeddedCurvePoint { x: 0, y: BN254_FR_MODULUS_DIV_2 + 1 };\n assert(get_sign_of_point(over_boundary_point) == false);\n }\n\n #[test]\n unconstrained fn test_point_from_x_coord_zero() {\n // x = 0: y^2 = 0^3 - 17 = -17, which is not a quadratic residue in BN254 scalar field\n let result = point_from_x_coord(0);\n assert(result.is_none());\n }\n\n #[test]\n unconstrained fn test_bn254_fr_modulus_div_2() {\n // Verify that BN254_FR_MODULUS_DIV_2 == (p - 1) / 2 This means: 2 * BN254_FR_MODULUS_DIV_2 + 1 == p == 0 (in\n // the field)\n assert_eq(2 * BN254_FR_MODULUS_DIV_2 + 1, 0);\n }\n\n}\n"
|
|
2170
1900
|
},
|
|
2171
1901
|
"296": {
|
|
@@ -2207,7 +1937,7 @@
|
|
|
2207
1937
|
"start": 4549
|
|
2208
1938
|
}
|
|
2209
1939
|
],
|
|
2210
|
-
"path": "/home/
|
|
1940
|
+
"path": "/home/aztec-dev/nargo/github.com/noir-lang/poseidon/v0.3.0/src/poseidon2.nr",
|
|
2211
1941
|
"source": "use std::default::Default;\nuse std::hash::Hasher;\n\nglobal RATE: u32 = 3;\n\npub struct Poseidon2 {\n cache: [Field; 3],\n state: [Field; 4],\n cache_size: u32,\n squeeze_mode: bool, // 0 => absorb, 1 => squeeze\n}\n\nimpl Poseidon2 {\n #[no_predicates]\n pub fn hash<let N: u32>(input: [Field; N], message_size: u32) -> Field {\n Poseidon2::hash_internal(input, message_size)\n }\n\n pub(crate) fn new(iv: Field) -> Poseidon2 {\n let mut result =\n Poseidon2 { cache: [0; 3], state: [0; 4], cache_size: 0, squeeze_mode: false };\n result.state[RATE] = iv;\n result\n }\n\n fn perform_duplex(&mut self) {\n // add the cache into sponge state\n self.state[0] += self.cache[0];\n self.state[1] += self.cache[1];\n self.state[2] += self.cache[2];\n self.state = crate::poseidon2_permutation(self.state);\n }\n\n fn absorb(&mut self, input: Field) {\n assert(!self.squeeze_mode);\n if self.cache_size == RATE {\n // If we're absorbing, and the cache is full, apply the sponge permutation to compress the cache\n self.perform_duplex();\n self.cache[0] = input;\n self.cache_size = 1;\n } else {\n // If we're absorbing, and the cache is not full, add the input into the cache\n self.cache[self.cache_size] = input;\n self.cache_size += 1;\n }\n }\n\n fn squeeze(&mut self) -> Field {\n assert(!self.squeeze_mode);\n // If we're in absorb mode, apply sponge permutation to compress the cache.\n self.perform_duplex();\n self.squeeze_mode = true;\n\n // Pop one item off the top of the permutation and return it.\n self.state[0]\n }\n\n fn hash_internal<let N: u32>(input: [Field; N], in_len: u32) -> Field {\n let two_pow_64 = 18446744073709551616;\n let iv: Field = (in_len as Field) * two_pow_64;\n let mut state = [0; 4];\n state[RATE] = iv;\n\n if std::runtime::is_unconstrained() {\n for i in 0..(in_len / RATE) {\n state[0] += input[i * RATE];\n state[1] += input[i * RATE + 1];\n state[2] += input[i * RATE + 2];\n state = crate::poseidon2_permutation(state);\n }\n\n // handle remaining elements after last full RATE-sized chunk\n let num_extra_fields = in_len % RATE;\n if num_extra_fields != 0 {\n let remainder_start = in_len - num_extra_fields;\n state[0] += input[remainder_start];\n if num_extra_fields > 1 {\n state[1] += input[remainder_start + 1];\n }\n }\n } else {\n let mut states: [[Field; 4]; N / RATE + 1] = [[0; 4]; N / RATE + 1];\n states[0] = state;\n\n // process all full RATE-sized chunks, storing state after each permutation\n for chunk_idx in 0..(N / RATE) {\n for i in 0..RATE {\n state[i] += input[chunk_idx * RATE + i];\n }\n state = crate::poseidon2_permutation(state);\n states[chunk_idx + 1] = state;\n }\n\n // get state at the last full block before in_len\n let first_partially_filled_chunk = in_len / RATE;\n state = states[first_partially_filled_chunk];\n\n // handle remaining elements after last full RATE-sized chunk\n let remainder_start = (in_len / RATE) * RATE;\n for j in 0..RATE {\n let idx = remainder_start + j;\n if idx < in_len {\n state[j] += input[idx];\n }\n }\n }\n\n // always run final permutation unless we just completed a full chunk\n // still need to permute once if in_len is 0\n if (in_len == 0) | (in_len % RATE != 0) {\n state = crate::poseidon2_permutation(state);\n };\n\n state[0]\n }\n}\n\npub struct Poseidon2Hasher {\n _state: [Field],\n}\n\nimpl Hasher for Poseidon2Hasher {\n fn finish(self) -> Field {\n let iv: Field = (self._state.len() as Field) * 18446744073709551616; // iv = (self._state.len() << 64)\n let mut sponge = Poseidon2::new(iv);\n for i in 0..self._state.len() {\n sponge.absorb(self._state[i]);\n }\n sponge.squeeze()\n }\n\n fn write(&mut self, input: Field) {\n self._state = self._state.push_back(input);\n }\n}\n\nimpl Default for Poseidon2Hasher {\n fn default() -> Self {\n Poseidon2Hasher { _state: @[] }\n }\n}\n"
|
|
2212
1942
|
},
|
|
2213
1943
|
"354": {
|
|
@@ -2297,7 +2027,7 @@
|
|
|
2297
2027
|
"start": 12908
|
|
2298
2028
|
}
|
|
2299
2029
|
],
|
|
2300
|
-
"path": "/home/
|
|
2030
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/types/src/address/aztec_address.nr",
|
|
2301
2031
|
"source": "use crate::{\n address::{\n partial_address::PartialAddress, salted_initialization_hash::SaltedInitializationHash,\n },\n constants::{AZTEC_ADDRESS_LENGTH, DOM_SEP__CONTRACT_ADDRESS_V2, MAX_FIELD_VALUE},\n contract_class_id::ContractClassId,\n hash::poseidon2_hash_with_separator,\n public_keys::{hash_public_key, IvpkM, PublicKeys, ToPoint},\n traits::{Deserialize, Empty, FromField, Packable, Serialize, ToField},\n utils::field::sqrt,\n};\n\nuse crate::point::EmbeddedCurvePoint;\n\nuse crate::public_keys::AddressPoint;\nuse std::{\n embedded_curve_ops::{EmbeddedCurveScalar, fixed_base_scalar_mul as derive_public_key},\n ops::Add,\n};\nuse std::meta::derive;\n\n// Aztec address\n#[derive(Deserialize, Eq, Packable, Serialize)]\npub struct AztecAddress {\n pub inner: Field,\n}\n\nimpl Empty for AztecAddress {\n fn empty() -> Self {\n Self { inner: 0 }\n }\n}\n\nimpl ToField for AztecAddress {\n fn to_field(self) -> Field {\n self.inner\n }\n}\n\nimpl FromField for AztecAddress {\n fn from_field(value: Field) -> AztecAddress {\n AztecAddress { inner: value }\n }\n}\n\nimpl AztecAddress {\n pub fn zero() -> Self {\n Self { inner: 0 }\n }\n\n /// Returns `true` if the address is valid.\n ///\n /// An invalid address is one that can be proven to not be correctly derived, meaning it contains no contract code,\n /// public keys, etc., and can therefore not receive messages nor execute calls.\n pub fn is_valid(self) -> bool {\n self.get_y().is_some()\n }\n\n /// Returns an address's [`AddressPoint`].\n ///\n /// This can be used to create shared secrets with the owner of the address. If the address is invalid (see\n /// [`AztecAddress::is_valid`]) then this returns `Option::none()`, and no shared secrets can be created.\n pub fn to_address_point(self) -> Option<AddressPoint> {\n self.get_y().map(|y| {\n // If we get a negative y coordinate (y > (r - 1) / 2), we swap it to the\n // positive one (where y <= (r - 1) / 2) by negating it.\n let final_y = if Self::is_positive(y) { y } else { -y };\n\n AddressPoint { inner: EmbeddedCurvePoint { x: self.inner, y: final_y } }\n })\n }\n\n /// Determines whether a y-coordinate is in the lower (positive) or upper (negative) \"half\" of the field.\n /// I.e.\n /// y <= (r - 1)/2 => positive.\n /// y > (r - 1)/2 => negative.\n /// An AddressPoint always uses the \"positive\" y.\n fn is_positive(y: Field) -> bool {\n // Note: The field modulus r is MAX_FIELD_VALUE + 1.\n let MID = MAX_FIELD_VALUE / 2; // (r - 1) / 2\n let MID_PLUS_1 = MID + 1; // (r - 1)/2 + 1\n // Note: y <= m implies y < m + 1.\n y.lt(MID_PLUS_1)\n }\n\n /// Returns one of the two possible y-coordinates.\n ///\n /// Not all `AztecAddresses` are valid, in which case there is no corresponding y-coordinate. This returns\n /// `Option::none()` for invalid addresses.\n ///\n /// An `AztecAddress` is defined by an x-coordinate, for which two y-coordinates exist as solutions to the curve\n /// equation. This function returns either of them. Note that an [`AddressPoint`] must **always** have a positive\n /// y-coordinate - if trying to obtain the underlying point use [`AztecAddress::to_address_point`] instead.\n fn get_y(self) -> Option<Field> {\n // We compute the address point by taking our address as x, and then solving for y in the\n // equation which defines the grumpkin curve:\n // y^2 = x^3 - 17; x = address\n let x = self.inner;\n let y_squared = x * x * x - 17;\n\n sqrt(y_squared)\n }\n\n pub fn compute(public_keys: PublicKeys, partial_address: PartialAddress) -> AztecAddress {\n //\n // address = address_point.x\n // |\n // address_point = pre_address * G + Ivpk_m (always choose \"positive\" y-coord)\n // | ^\n // | |.....................\n // pre_address .\n // / \\ .\n // / \\ .\n // partial_address public_keys_hash .\n // / \\ / / | | | \\ .\n // / \\ / / | | | \\ .\n // npk_m_hash Ivpk_m ovpk_m_hash tpk_m_hash mspk_m_hash fbpk_m_hash\n // contract_class_id \\ |.........................\n // / | \\ \\\n // artifact_hash | public_bytecode_commitment salted_initialization_hash\n // | / / \\ \\\n // private_function_tree_root salt initialization_hash deployer_address immutables_hash\n // / \\ / \\\n // ... ... constructor_fn_selector constructor_args_hash\n // / \\\n // / \\ / \\\n // leaf leaf leaf leaf\n // ^\n // |\n // |---h(function_selector, vk_hash)\n // ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n // Each of these represents a private function of the contract.\n\n let public_keys_hash = public_keys.hash();\n\n let pre_address = poseidon2_hash_with_separator(\n [public_keys_hash.to_field(), partial_address.to_field()],\n DOM_SEP__CONTRACT_ADDRESS_V2,\n );\n\n // Note: `.add()` will fail within the blackbox fn if either of the points are not on the curve. (See tests below).\n let address_point = derive_public_key(EmbeddedCurveScalar::from_field(pre_address)).add(\n public_keys.ivpk_m.to_point(),\n );\n\n // Note that our address is only the x-coordinate of the full address_point. This is okay because when people want to encrypt something and send it to us\n // they can recover our full point using the x-coordinate (our address itself). To do this, they recompute the y-coordinate according to the equation y^2 = x^3 - 17.\n // When they do this, they may get a positive y-coordinate (a value that is less than or equal to MAX_FIELD_VALUE / 2) or\n // a negative y-coordinate (a value that is more than MAX_FIELD_VALUE), and we cannot dictate which one they get and hence the recovered point may sometimes be different than the one\n // our secret can decrypt. Regardless though, they should and will always encrypt using point with the positive y-coordinate by convention.\n // This ensures that everyone encrypts to the same point given an arbitrary x-coordinate (address). This is allowed because even though our original point may not have a positive y-coordinate,\n // with our original secret, we will be able to derive the secret to the point with the flipped (and now positive) y-coordinate that everyone encrypts to.\n AztecAddress::from_field(address_point.x)\n }\n\n pub fn compute_from_class_id(\n contract_class_id: ContractClassId,\n salted_initialization_hash: SaltedInitializationHash,\n public_keys: PublicKeys,\n ) -> Self {\n let partial_address = PartialAddress::compute_from_salted_initialization_hash(\n contract_class_id,\n salted_initialization_hash,\n );\n\n AztecAddress::compute(public_keys, partial_address)\n }\n\n pub fn is_zero(self) -> bool {\n self.inner == 0\n }\n\n pub fn assert_is_zero(self) {\n assert(self.to_field() == 0);\n }\n}\n\n#[test]\nfn check_max_field_value() {\n // Check that it is indeed r-1.\n assert_eq(MAX_FIELD_VALUE + 1, 0);\n}\n\n#[test]\nfn check_is_positive() {\n assert(AztecAddress::is_positive(0));\n assert(AztecAddress::is_positive(1));\n assert(!AztecAddress::is_positive(-1));\n assert(AztecAddress::is_positive(MAX_FIELD_VALUE / 2));\n assert(!AztecAddress::is_positive((MAX_FIELD_VALUE / 2) + 1));\n}\n\n// Gives us confidence that we don't need to manually check that the input public keys need to be on the curve for `add`,\n// because the blackbox function does this check for us.\n#[test(should_fail_with = \"is not on curve\")]\nfn check_embedded_curve_point_add() {\n // Choose a point not on the curve in the 2nd position.\n let p1 = EmbeddedCurvePoint::generator();\n let key = IvpkM { inner: EmbeddedCurvePoint { x: 1, y: 1 } };\n let _ = p1 + key.to_point();\n}\n\n#[test]\nfn compute_address_from_partial_and_pub_keys() {\n let npk_m_point = EmbeddedCurvePoint {\n x: 0x22f7fcddfa3ce3e8f0cc8e82d7b94cdd740afa3e77f8e4a63ea78a239432dcab,\n y: 0x0471657de2b6216ade6c506d28fbc22ba8b8ed95c871ad9f3e3984e90d9723a7,\n };\n let ovpk_m_point = EmbeddedCurvePoint {\n x: 0x09115c96e962322ffed6522f57194627136b8d03ac7469109707f5e44190c484,\n y: 0x0c49773308a13d740a7f0d4f0e6163b02c5a408b6f965856b6a491002d073d5b,\n };\n let tpk_m_point = EmbeddedCurvePoint {\n x: 0x00d3d81beb009873eb7116327cf47c612d5758ef083d4fda78e9b63980b2a762,\n y: 0x2f567d22d2b02fe1f4ad42db9d58a36afd1983e7e2909d1cab61cafedad6193a,\n };\n let mspk_m_point = EmbeddedCurvePoint {\n x: 0x1bd6cb13e0bc8c6e0c1a8b2c5d7f9e0a4b6c8d0e2f4a6c8e0a2c4e6f8a0b2c4d,\n y: 0x0a032ec7b21c2bdb35f8a13e594764e39ee786c4b275eef3f0435bf6ab2b9822,\n };\n let fbpk_m_point = EmbeddedCurvePoint {\n x: 0x2c8e0a2c4e6f8b0d2f4a6c8e0a2c4e6f8b0d2f4a6c8e0a2c4e6f8b0d2f4a6c90,\n y: 0x2ef338da3a77e65f90b6d48ac686fc9ff3a95de0c39e0426fc443377425e6634,\n };\n\n let public_keys = PublicKeys {\n npk_m_hash: hash_public_key(npk_m_point),\n ivpk_m: IvpkM {\n inner: EmbeddedCurvePoint {\n x: 0x111223493147f6785514b1c195bb37a2589f22a6596d30bb2bb145fdc9ca8f1e,\n y: 0x273bbffd678edce8fe30e0deafc4f66d58357c06fd4a820285294b9746c3be95,\n },\n },\n ovpk_m_hash: hash_public_key(ovpk_m_point),\n tpk_m_hash: hash_public_key(tpk_m_point),\n mspk_m_hash: hash_public_key(mspk_m_point),\n fbpk_m_hash: hash_public_key(fbpk_m_point),\n };\n\n let partial_address = PartialAddress::from_field(\n 0x0a7c585381b10f4666044266a02405bf6e01fa564c8517d4ad5823493abd31de,\n );\n\n let address = AztecAddress::compute(public_keys, partial_address).to_field();\n\n let expected_computed_address_from_partial_and_pubkeys =\n 0x303ffc8bd456d132463b1fc3a633aeb718a7883c268f3956c05e6fe09b5a5424;\n assert_eq(address, expected_computed_address_from_partial_and_pubkeys);\n}\n\n#[test]\nfn compute_preaddress_from_partial_and_pub_keys() {\n let pre_address = poseidon2_hash_with_separator([1, 2], DOM_SEP__CONTRACT_ADDRESS_V2);\n let expected_computed_preaddress_from_partial_and_pubkey =\n 0x0fa1c698858df1a99170cd39d5f4bfad6d0d60f1f8afa3dc92281ee60b36f3bb;\n assert(pre_address == expected_computed_preaddress_from_partial_and_pubkey);\n}\n\n#[test]\nfn from_field_to_field() {\n let address = AztecAddress { inner: 37 };\n assert_eq(FromField::from_field(address.to_field()), address);\n}\n\n#[test]\nfn serde() {\n let address = AztecAddress { inner: 37 };\n // We use the AZTEC_ADDRESS_LENGTH constant to ensure that there is a match between the derived trait\n // implementation and the constant.\n let serialized: [Field; AZTEC_ADDRESS_LENGTH] = address.serialize();\n let deserialized = AztecAddress::deserialize(serialized);\n assert_eq(address, deserialized);\n}\n\n#[test]\nfn to_address_point_valid() {\n // x = 8 where x^3 - 17 = 512 - 17 = 495, which is a residue in this field\n let address = AztecAddress { inner: 8 };\n\n assert(address.get_y().is_some()); // We don't bother checking the result of get_y as it is only used internally\n assert(address.is_valid());\n\n let maybe_point = address.to_address_point();\n assert(maybe_point.is_some());\n\n let point = maybe_point.unwrap().inner;\n // check that x is preserved\n assert_eq(point.x, Field::from(8));\n\n // check that the curve equation holds: y^2 == x^3 - 17\n assert_eq(point.y * point.y, point.x * point.x * point.x - 17);\n}\n\n#[test]\nfn to_address_point_invalid() {\n // x = 3 where x^3 - 17 = 27 - 17 = 10, which is a non-residue in this field\n let address = AztecAddress { inner: 3 };\n\n assert(address.get_y().is_none());\n assert(!address.is_valid());\n\n assert(address.to_address_point().is_none());\n}\n"
|
|
2302
2032
|
},
|
|
2303
2033
|
"385": {
|
|
@@ -2419,7 +2149,7 @@
|
|
|
2419
2149
|
"start": 16359
|
|
2420
2150
|
}
|
|
2421
2151
|
],
|
|
2422
|
-
"path": "/home/
|
|
2152
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/types/src/hash.nr",
|
|
2423
2153
|
"source": "mod poseidon2_chunks;\n\nuse crate::{\n abis::{\n contract_class_function_leaf_preimage::ContractClassFunctionLeafPreimage,\n function_selector::FunctionSelector, nullifier::Nullifier, private_log::PrivateLog,\n transaction::tx_request::TxRequest,\n },\n address::{AztecAddress, EthAddress},\n constants::{\n CONTRACT_CLASS_LOG_SIZE_IN_FIELDS, DOM_SEP__NOTE_HASH_NONCE,\n DOM_SEP__PRIVATE_LOG_FIRST_FIELD, DOM_SEP__SILOED_NOTE_HASH, DOM_SEP__SILOED_NULLIFIER,\n DOM_SEP__UNIQUE_NOTE_HASH, FUNCTION_TREE_HEIGHT, NULL_MSG_SENDER_CONTRACT_ADDRESS,\n TWO_POW_64,\n },\n merkle_tree::root_from_sibling_path,\n messaging::l2_to_l1_message::L2ToL1Message,\n poseidon2::Poseidon2Sponge,\n side_effect::{Counted, Scoped},\n traits::{FromField, Hash, ToField},\n utils::field::{field_from_bytes, field_from_bytes_32_trunc},\n};\n\npub use poseidon2_chunks::poseidon2_absorb_in_chunks_existing_sponge;\nuse poseidon2_chunks::poseidon2_absorb_in_chunks;\nuse std::embedded_curve_ops::EmbeddedCurveScalar;\n\n// TODO: refactor these into their own files: sha256, poseidon2, some protocol-specific hash computations, some merkle computations.\n\npub fn sha256_to_field<let N: u32>(bytes_to_hash: [u8; N]) -> Field {\n let sha256_hashed = sha256::digest(bytes_to_hash);\n let hash_in_a_field = field_from_bytes_32_trunc(sha256_hashed);\n\n hash_in_a_field\n}\n\npub fn private_functions_root_from_siblings(\n selector: FunctionSelector,\n vk_hash: Field,\n function_leaf_index: Field,\n function_leaf_sibling_path: [Field; FUNCTION_TREE_HEIGHT],\n) -> Field {\n let function_leaf_preimage = ContractClassFunctionLeafPreimage { selector, vk_hash };\n let function_leaf = function_leaf_preimage.hash();\n root_from_sibling_path(\n function_leaf,\n function_leaf_index,\n function_leaf_sibling_path,\n )\n}\n\n/// Siloing in the context of Aztec refers to the process of hashing a note hash with a contract address (this way\n/// the note hash is scoped to a specific contract). This is used to prevent intermingling of notes between contracts.\npub fn compute_siloed_note_hash(contract_address: AztecAddress, note_hash: Field) -> Field {\n poseidon2_hash_with_separator(\n [contract_address.to_field(), note_hash],\n DOM_SEP__SILOED_NOTE_HASH,\n )\n}\n\n/// Computes unique, siloed note hashes from siloed note hashes.\n///\n/// The protocol injects uniqueness into every note_hash, so that every single note_hash in the\n/// tree is unique. This prevents faerie gold attacks, where a malicious sender could create\n/// two identical note_hashes for a recipient (meaning only one would be nullifiable in future).\n///\n/// Most privacy protocols will inject the note's leaf_index (its position in the Note Hashes Tree)\n/// into the note, but this requires the creator of a note to wait until their tx is included in\n/// a block to know the note's final note hash (the unique, siloed note hash), because inserting\n/// leaves into trees is the job of a block producer.\n///\n/// We took a different approach so that the creator of a note will know each note's unique, siloed\n/// note hash before broadcasting their tx to the network.\n/// (There was also a historical requirement relating to \"chained transactions\" -- a feature that\n/// Aztec Connect had to enable notes to be spent from distinct txs earlier in the same block,\n/// and hence before an archive block root had been established for that block -- but that feature\n/// was abandoned for the Aztec Network for having too many bad tradeoffs).\n///\n/// (\n/// Edit: it is no longer true that all final note_hashes will be known by the creator of a tx\n/// before they send it to the network. If a tx makes public function calls, then _revertible_\n/// note_hashes that are created in private will not be made unique in private by the Reset circuit,\n/// but will instead be made unique by the AVM, because the `note_index_in_tx` will not be known\n/// until the AVM has executed the public functions of the tx. (See an explanation in\n/// reset_output_composer.nr for why).\n/// For some such txs, the `note_index_in_tx` might still be predictable through simulation, but\n/// for txs whose public functions create a varying number of non-revertible notes (determined at\n/// runtime), the `note_index_in_tx` will not be deterministically derivable before submitting the\n/// tx to the network.\n/// )\n///\n/// We use the `first_nullifier` of a tx as a seed of uniqueness. We have a guarantee that there will\n/// always be at least one nullifier per tx, because the init circuit will create one if one isn't\n/// created naturally by any functions of the tx. (Search \"protocol_nullifier\").\n/// We combine the `first_nullifier` with the note's index (its position within this tx's new\n/// note_hashes array) (`note_index_in_tx`) to get a truly unique value to inject into a note, which\n/// we call a `note_nonce`.\npub fn compute_unique_note_hash(note_nonce: Field, siloed_note_hash: Field) -> Field {\n let inputs = [note_nonce, siloed_note_hash];\n poseidon2_hash_with_separator(inputs, DOM_SEP__UNIQUE_NOTE_HASH)\n}\n\npub fn compute_note_hash_nonce(first_nullifier_in_tx: Field, note_index_in_tx: u32) -> Field {\n // Hashing the first nullifier with note index in tx is guaranteed to be unique (because all nullifiers are also\n // unique).\n poseidon2_hash_with_separator(\n [first_nullifier_in_tx, note_index_in_tx as Field],\n DOM_SEP__NOTE_HASH_NONCE,\n )\n}\n\npub fn compute_note_nonce_and_unique_note_hash(\n siloed_note_hash: Field,\n first_nullifier: Field,\n note_index_in_tx: u32,\n) -> Field {\n let note_nonce = compute_note_hash_nonce(first_nullifier, note_index_in_tx);\n compute_unique_note_hash(note_nonce, siloed_note_hash)\n}\n\npub fn compute_siloed_nullifier(contract_address: AztecAddress, nullifier: Field) -> Field {\n poseidon2_hash_with_separator(\n [contract_address.to_field(), nullifier],\n DOM_SEP__SILOED_NULLIFIER,\n )\n}\n\npub fn create_protocol_nullifier(tx_request: TxRequest) -> Scoped<Counted<Nullifier>> {\n // The protocol nullifier is ascribed a special side-effect counter of 1. No other side-effect\n // can have counter 1 (see `validate_as_first_call` for that assertion).\n Nullifier { value: tx_request.hash(), note_hash: 0 }.count(1).scope(\n NULL_MSG_SENDER_CONTRACT_ADDRESS,\n )\n}\n\npub fn compute_log_tag(raw_tag: Field, dom_sep: u32) -> Field {\n poseidon2_hash_with_separator([raw_tag], dom_sep)\n}\n\npub fn compute_siloed_private_log_first_field(\n contract_address: AztecAddress,\n field: Field,\n) -> Field {\n poseidon2_hash_with_separator(\n [contract_address.to_field(), field],\n DOM_SEP__PRIVATE_LOG_FIRST_FIELD,\n )\n}\n\npub fn compute_siloed_private_log(contract_address: AztecAddress, log: PrivateLog) -> PrivateLog {\n let mut fields = log.fields;\n fields[0] = compute_siloed_private_log_first_field(contract_address, fields[0]);\n PrivateLog::new(fields, log.length)\n}\n\npub fn compute_contract_class_log_hash(log: [Field; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS]) -> Field {\n poseidon2_hash(log)\n}\n\npub fn compute_app_siloed_secret_key(\n master_secret_key: EmbeddedCurveScalar,\n app_address: AztecAddress,\n key_type_domain_separator: Field,\n) -> Field {\n poseidon2_hash_with_separator(\n [master_secret_key.hi, master_secret_key.lo, app_address.to_field()],\n key_type_domain_separator,\n )\n}\n\npub fn compute_l2_to_l1_message_hash(\n message: Scoped<L2ToL1Message>,\n rollup_version_id: Field,\n chain_id: Field,\n) -> Field {\n let contract_address_bytes: [u8; 32] = message.contract_address.to_field().to_be_bytes();\n let recipient_bytes: [u8; 20] = message.inner.recipient.to_be_bytes();\n let content_bytes: [u8; 32] = message.inner.content.to_be_bytes();\n let rollup_version_id_bytes: [u8; 32] = rollup_version_id.to_be_bytes();\n let chain_id_bytes: [u8; 32] = chain_id.to_be_bytes();\n\n let mut bytes: [u8; 148] = std::mem::zeroed();\n for i in 0..32 {\n bytes[i] = contract_address_bytes[i];\n bytes[i + 32] = rollup_version_id_bytes[i];\n // 64 - 84 are for recipient.\n bytes[i + 84] = chain_id_bytes[i];\n bytes[i + 116] = content_bytes[i];\n }\n\n for i in 0..20 {\n bytes[64 + i] = recipient_bytes[i];\n }\n\n sha256_to_field(bytes)\n}\n\n// TODO: consider a variant that enables domain separation with a u32 (we seem to have standardised u32s for domain separators)\n/// Computes sha256 hash of 2 input fields.\n///\n/// @returns A truncated field (i.e., the first byte is always 0).\npub fn accumulate_sha256(v0: Field, v1: Field) -> Field {\n // Concatenate two fields into 32 x 2 = 64 bytes\n let v0_as_bytes: [u8; 32] = v0.to_be_bytes();\n let v1_as_bytes: [u8; 32] = v1.to_be_bytes();\n let hash_input_flattened = v0_as_bytes.concat(v1_as_bytes);\n\n sha256_to_field(hash_input_flattened)\n}\n\npub fn poseidon2_hash<let N: u32>(inputs: [Field; N]) -> Field {\n poseidon::poseidon2::Poseidon2::hash(inputs, N)\n}\n\n#[no_predicates]\npub fn poseidon2_hash_with_separator<let N: u32, T>(inputs: [Field; N], separator: T) -> Field\nwhere\n T: ToField,\n{\n let inputs_with_separator = [separator.to_field()].concat(inputs);\n poseidon2_hash(inputs_with_separator)\n}\n\n/// Computes a Poseidon2 hash over a dynamic-length subarray of the given input.\n/// Only the first `in_len` fields of `input` are absorbed; any remaining fields are ignored.\n/// The caller is responsible for ensuring that the input is padded with zeros if required.\n#[no_predicates]\npub fn poseidon2_hash_subarray<let N: u32>(input: [Field; N], in_len: u32) -> Field {\n let mut sponge = poseidon2_absorb_in_chunks(input, in_len);\n sponge.squeeze()\n}\n\n// This function is unconstrained because it is intended to be used in unconstrained context only as\n// in constrained contexts it would be too inefficient.\npub unconstrained fn poseidon2_hash_with_separator_bounded_vec<let N: u32, T>(\n inputs: BoundedVec<Field, N>,\n separator: T,\n) -> Field\nwhere\n T: ToField,\n{\n let in_len = inputs.len() + 1;\n let iv: Field = (in_len as Field) * TWO_POW_64;\n let mut sponge = Poseidon2Sponge::new(iv);\n sponge.absorb(separator.to_field());\n\n for i in 0..inputs.len() {\n sponge.absorb(inputs.get(i));\n }\n\n sponge.squeeze()\n}\n\n#[no_predicates]\npub fn poseidon2_hash_bytes<let N: u32>(inputs: [u8; N]) -> Field {\n let mut fields = [0; (N + 30) / 31];\n let mut field_index = 0;\n let mut current_field = [0; 31];\n for i in 0..inputs.len() {\n let index = i % 31;\n current_field[index] = inputs[i];\n if index == 30 {\n fields[field_index] = field_from_bytes(current_field, false);\n current_field = [0; 31];\n field_index += 1;\n }\n }\n if field_index != fields.len() {\n fields[field_index] = field_from_bytes(current_field, false);\n }\n poseidon2_hash(fields)\n}\n\n#[test]\nfn subarray_hash_matches_fixed() {\n let values_to_hash = [3; 17];\n let padded = values_to_hash.concat([0; 11]);\n let subarray_hash = poseidon2_hash_subarray(padded, values_to_hash.len());\n\n // Hash the entire values_to_hash.\n let fixed_len_hash = poseidon::poseidon2::Poseidon2::hash(values_to_hash, values_to_hash.len());\n\n assert_eq(subarray_hash, fixed_len_hash);\n}\n\n#[test]\nfn subarray_hash_matches_variable() {\n let values_to_hash = [3; 17];\n let padded = values_to_hash.concat([0; 11]);\n let subarray_hash = poseidon2_hash_subarray(padded, values_to_hash.len());\n\n // Hash up to values_to_hash.len() fields of the padded array.\n let variable_len_hash = poseidon::poseidon2::Poseidon2::hash(padded, values_to_hash.len());\n\n assert_eq(subarray_hash, variable_len_hash);\n}\n\n#[test]\nfn smoke_sha256_to_field() {\n let full_buffer = [\n 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24,\n 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47,\n 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70,\n 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93,\n 94, 95, 96, 97, 98, 99, 100, 101, 102, 103, 104, 105, 106, 107, 108, 109, 110, 111, 112,\n 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130,\n 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141, 142, 143, 144, 145, 146, 147, 148,\n 149, 150, 151, 152, 153, 154, 155, 156, 157, 158, 159,\n ];\n let result = sha256_to_field(full_buffer);\n\n assert(result == 0x448ebbc9e1a31220a2f3830c18eef61b9bd070e5084b7fa2a359fe729184c7);\n\n // to show correctness of the current ver (truncate one byte) vs old ver (mod full bytes):\n let result_bytes = sha256::digest(full_buffer);\n let truncated_field = crate::utils::field::field_from_bytes_32_trunc(result_bytes);\n assert(truncated_field == result);\n let mod_res = result + (result_bytes[31] as Field);\n assert(mod_res == 0x448ebbc9e1a31220a2f3830c18eef61b9bd070e5084b7fa2a359fe729184e0);\n}\n\n#[test]\nfn unique_siloed_note_hash_matches_typescript() {\n let inner_note_hash = 1;\n let contract_address = AztecAddress::from_field(2);\n let first_nullifier = 3;\n let note_index_in_tx = 4;\n\n let siloed_note_hash = compute_siloed_note_hash(contract_address, inner_note_hash);\n let siloed_note_hash_from_ts =\n 0x1986a4bea3eddb1fff917d629a13e10f63f514f401bdd61838c6b475db949169;\n assert_eq(siloed_note_hash, siloed_note_hash_from_ts);\n\n let nonce: Field = compute_note_hash_nonce(first_nullifier, note_index_in_tx);\n let note_hash_nonce_from_ts =\n 0x28e7799791bf066a57bb51fdd0fbcaf3f0926414314c7db515ea343f44f5d58b;\n assert_eq(nonce, note_hash_nonce_from_ts);\n\n let unique_siloed_note_hash_from_nonce = compute_unique_note_hash(nonce, siloed_note_hash);\n let unique_siloed_note_hash = compute_note_nonce_and_unique_note_hash(\n siloed_note_hash,\n first_nullifier,\n note_index_in_tx,\n );\n assert_eq(unique_siloed_note_hash_from_nonce, unique_siloed_note_hash);\n\n let unique_siloed_note_hash_from_ts =\n 0x29949aef207b715303b24639737c17fbfeb375c1d965ecfa85c7e4f0febb7d16;\n assert_eq(unique_siloed_note_hash, unique_siloed_note_hash_from_ts);\n}\n\n#[test]\nfn siloed_nullifier_matches_typescript() {\n let contract_address = AztecAddress::from_field(123);\n let nullifier = 456;\n\n let res = compute_siloed_nullifier(contract_address, nullifier);\n\n let siloed_nullifier_from_ts =\n 0x169b50336c1f29afdb8a03d955a81e485f5ac7d5f0b8065673d1e407e5877813;\n\n assert_eq(res, siloed_nullifier_from_ts);\n}\n\n#[test]\nfn siloed_private_log_first_field_matches_typescript() {\n let contract_address = AztecAddress::from_field(123);\n let field = 456;\n let res = compute_siloed_private_log_first_field(contract_address, field);\n\n let siloed_private_log_first_field_from_ts =\n 0x29480984f7b9257fded523d50addbcfc8d1d33adcf2db73ef3390a8fd5cdffaa;\n\n assert_eq(res, siloed_private_log_first_field_from_ts);\n}\n\n#[test]\nfn empty_l2_to_l1_message_hash_matches_typescript() {\n // All zeroes\n let res = compute_l2_to_l1_message_hash(\n L2ToL1Message { recipient: EthAddress::zero(), content: 0 }.scope(AztecAddress::from_field(\n 0,\n )),\n 0,\n 0,\n );\n\n let empty_l2_to_l1_msg_hash_from_ts =\n 0x003b18c58c739716e76429634a61375c45b3b5cd470c22ab6d3e14cee23dd992;\n\n assert_eq(res, empty_l2_to_l1_msg_hash_from_ts);\n}\n\n#[test]\nfn l2_to_l1_message_hash_matches_typescript() {\n let message = L2ToL1Message { recipient: EthAddress::from_field(1), content: 2 }.scope(\n AztecAddress::from_field(3),\n );\n let version = 4;\n let chainId = 5;\n\n let hash = compute_l2_to_l1_message_hash(message, version, chainId);\n\n // The following value was generated by `yarn-project/stdlib/src/hash/hash.test.ts`\n let l2_to_l1_message_hash_from_ts =\n 0x0081edf209e087ad31b3fd24263698723d57190bd1d6e9fe056fc0c0a68ee661;\n\n assert_eq(hash, l2_to_l1_message_hash_from_ts);\n}\n\n#[test]\nunconstrained fn poseidon2_hash_with_separator_bounded_vec_matches_non_bounded_vec_version() {\n let inputs = BoundedVec::<Field, 4>::from_array([1, 2, 3]);\n let separator = 42;\n\n // Hash using bounded vec version\n let bounded_result = poseidon2_hash_with_separator_bounded_vec(inputs, separator);\n\n // Hash using regular version\n let regular_result = poseidon2_hash_with_separator([1, 2, 3], separator);\n\n // Results should match\n assert_eq(bounded_result, regular_result);\n}\n"
|
|
2424
2154
|
},
|
|
2425
2155
|
"387": {
|
|
@@ -2493,7 +2223,7 @@
|
|
|
2493
2223
|
"start": 2802
|
|
2494
2224
|
}
|
|
2495
2225
|
],
|
|
2496
|
-
"path": "/home/
|
|
2226
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/types/src/logging.nr",
|
|
2497
2227
|
"source": "// Log levels matching the JS logger:\n\n// global SILENT_LOG_LEVEL: u8 = 0;\nglobal FATAL_LOG_LEVEL: u8 = 1;\nglobal ERROR_LOG_LEVEL: u8 = 2;\nglobal WARN_LOG_LEVEL: u8 = 3;\nglobal INFO_LOG_LEVEL: u8 = 4;\nglobal VERBOSE_LOG_LEVEL: u8 = 5;\nglobal DEBUG_LOG_LEVEL: u8 = 6;\nglobal TRACE_LOG_LEVEL: u8 = 7;\n\n// --- Per-level log functions (no format args) ---\n\npub fn fatal_log<let N: u32>(msg: str<N>) {\n fatal_log_format(msg, []);\n}\n\npub fn error_log<let N: u32>(msg: str<N>) {\n error_log_format(msg, []);\n}\n\npub fn warn_log<let N: u32>(msg: str<N>) {\n warn_log_format(msg, []);\n}\n\npub fn info_log<let N: u32>(msg: str<N>) {\n info_log_format(msg, []);\n}\n\npub fn verbose_log<let N: u32>(msg: str<N>) {\n verbose_log_format(msg, []);\n}\n\npub fn debug_log<let N: u32>(msg: str<N>) {\n debug_log_format(msg, []);\n}\n\npub fn trace_log<let N: u32>(msg: str<N>) {\n trace_log_format(msg, []);\n}\n\n// --- Per-level log functions (with format args) ---\n\npub fn fatal_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(FATAL_LOG_LEVEL, msg, args);\n}\n\npub fn error_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(ERROR_LOG_LEVEL, msg, args);\n}\n\npub fn warn_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(WARN_LOG_LEVEL, msg, args);\n}\n\npub fn info_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(INFO_LOG_LEVEL, msg, args);\n}\n\npub fn verbose_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(VERBOSE_LOG_LEVEL, msg, args);\n}\n\npub fn debug_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(DEBUG_LOG_LEVEL, msg, args);\n}\n\npub fn trace_log_format<let M: u32, let N: u32>(msg: str<M>, args: [Field; N]) {\n log_format(TRACE_LOG_LEVEL, msg, args);\n}\n\nfn log_format<let M: u32, let N: u32>(log_level: u8, msg: str<M>, args: [Field; N]) {\n // Safety: This oracle call returns nothing: we only call it for its side effects. It is therefore always safe\n // to call.\n unsafe { log_oracle_wrapper(log_level, msg, args) };\n}\n\nunconstrained fn log_oracle_wrapper<let M: u32, let N: u32>(\n log_level: u8,\n msg: str<M>,\n args: [Field; N],\n) {\n log_oracle(log_level, msg, N, args);\n}\n\n// While the length parameter might seem unnecessary given that we have N, we keep it around because at the AVM\n// bytecode level we want to support non-comptime-known lengths for such opcodes, even if Noir code will not generally\n// take that route. The AVM transpiler maps this oracle to the DEBUGLOG opcode, which reads the fields size from memory.\n#[oracle(aztec_misc_log)]\nunconstrained fn log_oracle<let M: u32, let N: u32>(\n log_level: u8,\n msg: str<M>,\n length: u32,\n args: [Field; N],\n) {}\n"
|
|
2498
2228
|
},
|
|
2499
2229
|
"406": {
|
|
@@ -2523,7 +2253,7 @@
|
|
|
2523
2253
|
"start": 2544
|
|
2524
2254
|
}
|
|
2525
2255
|
],
|
|
2526
|
-
"path": "/home/
|
|
2256
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/types/src/poseidon2.nr",
|
|
2527
2257
|
"source": "use crate::constants::TWO_POW_64;\nuse crate::traits::{Deserialize, Serialize};\nuse std::meta::derive;\n// NB: This is a clone of noir/noir-repo/noir_stdlib/src/hash/poseidon2.nr\n// It exists as we sometimes need to perform custom absorption, but the stdlib version\n// has a private absorb() method (it's also designed to just be a hasher)\n// Can be removed when standalone noir poseidon lib exists: See noir#6679\n// TODO: Poseidon is stand-alone now\n\nglobal RATE: u32 = 3;\n\n#[derive(Deserialize, Eq, Serialize)]\npub struct Poseidon2Sponge {\n pub cache: [Field; 3],\n pub state: [Field; 4],\n pub cache_size: u32,\n pub squeeze_mode: bool, // 0 => absorb, 1 => squeeze\n}\n\nimpl Poseidon2Sponge {\n #[no_predicates]\n pub fn hash<let N: u32>(input: [Field; N], message_size: u32) -> Field {\n Poseidon2Sponge::hash_internal(input, message_size, message_size != N)\n }\n\n pub(crate) fn new(iv: Field) -> Poseidon2Sponge {\n let mut result =\n Poseidon2Sponge { cache: [0; 3], state: [0; 4], cache_size: 0, squeeze_mode: false };\n result.state[RATE] = iv;\n result\n }\n\n fn perform_duplex(&mut self) {\n // add the cache into sponge state\n for i in 0..RATE {\n // We effectively zero-pad the cache by only adding to the state\n // cache that is less than the specified `cache_size`\n if i < self.cache_size {\n self.state[i] += self.cache[i];\n }\n }\n self.state = std::hash::poseidon2_permutation(self.state);\n }\n\n pub fn absorb(&mut self, input: Field) {\n assert(!self.squeeze_mode);\n if self.cache_size == RATE {\n // If we're absorbing, and the cache is full, apply the sponge permutation to compress the cache\n self.perform_duplex();\n self.cache[0] = input;\n self.cache_size = 1;\n } else {\n // If we're absorbing, and the cache is not full, add the input into the cache\n self.cache[self.cache_size] = input;\n self.cache_size += 1;\n }\n }\n\n pub fn squeeze(&mut self) -> Field {\n assert(!self.squeeze_mode);\n // If we're in absorb mode, apply sponge permutation to compress the cache.\n self.perform_duplex();\n self.squeeze_mode = true;\n\n // Pop one item off the top of the permutation and return it.\n self.state[0]\n }\n\n fn hash_internal<let N: u32>(\n input: [Field; N],\n in_len: u32,\n is_variable_length: bool,\n ) -> Field {\n let iv: Field = (in_len as Field) * TWO_POW_64;\n let mut sponge = Poseidon2Sponge::new(iv);\n for i in 0..input.len() {\n if i < in_len {\n sponge.absorb(input[i]);\n }\n }\n\n sponge.squeeze()\n }\n}\n"
|
|
2528
2258
|
},
|
|
2529
2259
|
"42": {
|
|
@@ -2739,7 +2469,7 @@
|
|
|
2739
2469
|
"start": 912
|
|
2740
2470
|
}
|
|
2741
2471
|
],
|
|
2742
|
-
"path": "/home/
|
|
2472
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/types/src/traits/to_field.nr",
|
|
2743
2473
|
"source": "use crate::utils::field::field_from_bytes;\n\npub trait ToField {\n fn to_field(self) -> Field;\n}\n\nimpl ToField for Field {\n #[inline_always]\n fn to_field(self) -> Field {\n self\n }\n}\n\nimpl ToField for bool {\n #[inline_always]\n fn to_field(self) -> Field {\n self as Field\n }\n}\nimpl ToField for u8 {\n #[inline_always]\n fn to_field(self) -> Field {\n self as Field\n }\n}\nimpl ToField for u16 {\n fn to_field(self) -> Field {\n self as Field\n }\n}\nimpl ToField for u32 {\n #[inline_always]\n fn to_field(self) -> Field {\n self as Field\n }\n}\nimpl ToField for u64 {\n #[inline_always]\n fn to_field(self) -> Field {\n self as Field\n }\n}\nimpl ToField for u128 {\n #[inline_always]\n fn to_field(self) -> Field {\n self as Field\n }\n}\nimpl<let N: u32> ToField for str<N> {\n #[inline_always]\n fn to_field(self) -> Field {\n assert(N < 32, \"String doesn't fit in a field, consider using Serialize instead\");\n field_from_bytes(self.as_bytes(), true)\n }\n}\n"
|
|
2744
2474
|
},
|
|
2745
2475
|
"43": {
|
|
@@ -2846,29 +2576,33 @@
|
|
|
2846
2576
|
"name": "sqrt_negative_one_test",
|
|
2847
2577
|
"start": 10564
|
|
2848
2578
|
},
|
|
2579
|
+
{
|
|
2580
|
+
"name": "sqrt_negative_one_squares_back_test",
|
|
2581
|
+
"start": 11017
|
|
2582
|
+
},
|
|
2849
2583
|
{
|
|
2850
2584
|
"name": "validate_sqrt_hint_valid_test",
|
|
2851
|
-
"start":
|
|
2585
|
+
"start": 11414
|
|
2852
2586
|
},
|
|
2853
2587
|
{
|
|
2854
2588
|
"name": "validate_sqrt_hint_invalid_test",
|
|
2855
|
-
"start":
|
|
2589
|
+
"start": 11845
|
|
2856
2590
|
},
|
|
2857
2591
|
{
|
|
2858
2592
|
"name": "validate_not_sqrt_hint_valid_test",
|
|
2859
|
-
"start":
|
|
2593
|
+
"start": 11977
|
|
2860
2594
|
},
|
|
2861
2595
|
{
|
|
2862
2596
|
"name": "validate_not_sqrt_hint_zero_test",
|
|
2863
|
-
"start":
|
|
2597
|
+
"start": 12257
|
|
2864
2598
|
},
|
|
2865
2599
|
{
|
|
2866
2600
|
"name": "validate_not_sqrt_hint_wrong_hint_test",
|
|
2867
|
-
"start":
|
|
2601
|
+
"start": 12474
|
|
2868
2602
|
}
|
|
2869
2603
|
],
|
|
2870
|
-
"path": "/home/
|
|
2871
|
-
"source": "pub fn field_from_bytes<let N: u32>(bytes: [u8; N], big_endian: bool) -> Field {\n std::static_assert(N < 32, \"field_from_bytes: N must be less than 32\");\n let mut as_field = 0;\n let mut offset = 1;\n for i in 0..N {\n let mut index = i;\n if big_endian {\n index = N - i - 1;\n }\n as_field += (bytes[index] as Field) * offset;\n offset *= 256;\n }\n\n as_field\n}\n\n// Convert a 32 byte array to a field element by truncating the final byte\npub fn field_from_bytes_32_trunc(bytes32: [u8; 32]) -> Field {\n // Convert it to a field element\n let mut v = 1;\n let mut high = 0 as Field;\n let mut low = 0 as Field;\n\n for i in 0..15 {\n // covers bytes 16..30 (31 is truncated and ignored)\n low = low + (bytes32[15 + 15 - i] as Field) * v;\n v = v * 256;\n // covers bytes 0..14\n high = high + (bytes32[14 - i] as Field) * v;\n }\n // covers byte 15\n low = low + (bytes32[15] as Field) * v;\n\n low + high * v\n}\n\npub fn min(f1: Field, f2: Field) -> Field {\n if f1.lt(f2) {\n f1\n } else {\n f2\n }\n}\n\n// TODO: write doc-comments and tests for these magic constants.\n\nglobal KNOWN_NON_RESIDUE: Field = 5; // This is a non-residue in Noir's native Field.\nglobal C1: u32 = 28;\nglobal C3: Field = 40770029410420498293352137776570907027550720424234931066070132305055;\nglobal C5: Field = 19103219067921713944291392827692070036145651957329286315305642004821462161904;\n\n// @dev: only use this for _huge_ exponents y, when writing a constrained function.\n// If you're only exponentiating by a small value, first consider writing-out the multiplications by hand.\n// Only after you've measured the gates of that approach, consider using the native Field::pow_32 function.\n// Only if your exponent is larger than 32 bits, resort to using this function.\npub fn pow(x: Field, y: Field) -> Field {\n let mut r = 1 as Field;\n let b: [bool; 254] = y.to_le_bits();\n\n for i in 0..254 {\n r *= r;\n r *= (b[254 - 1 - i] as Field) * x + (1 - b[254 - 1 - i] as Field);\n }\n\n r\n}\n\n/// Returns Option::some(sqrt) if there is a square root, and Option::none() if there isn't.\npub fn sqrt(x: Field) -> Option<Field> {\n // Safety: if the hint returns the square root of x, then we simply square it\n // check the result equals x. If x is not square, we return a value that\n // enables us to prove that fact (see the `else` clause below).\n let (is_sq, maybe_sqrt) = unsafe { __sqrt(x) };\n\n if is_sq {\n let sqrt = maybe_sqrt;\n validate_sqrt_hint(x, sqrt);\n Option::some(sqrt)\n } else {\n let not_sqrt_hint = maybe_sqrt;\n validate_not_sqrt_hint(x, not_sqrt_hint);\n Option::none()\n }\n}\n\n// Boolean indicating whether Field element is a square, i.e. whether there exists a y in Field s.t. x = y*y.\nunconstrained fn is_square(x: Field) -> bool {\n let v = pow(x, -1 / 2);\n v * (v - 1) == 0\n}\n\n// Tonelli-Shanks algorithm for computing the square root of a Field element.\n// Requires C1 = max{c: 2^c divides (p-1)}, where p is the order of Field\n// as well as C3 = (C2 - 1)/2, where C2 = (p-1)/(2^c1),\n// and C5 = ZETA^C2, where ZETA is a non-square element of Field.\n// These are pre-computed above as globals.\nunconstrained fn tonelli_shanks_sqrt(x: Field) -> Field {\n let mut z = pow(x, C3);\n let mut t = z * z * x;\n z *= x;\n let mut b = t;\n let mut c = C5;\n\n for i in 0..(C1 - 1) {\n for _j in 1..(C1 - i - 1) {\n b *= b;\n }\n\n z *= if b == 1 { 1 } else { c };\n\n c *= c;\n\n t *= if b == 1 { 1 } else { c };\n\n b = t;\n }\n\n z\n}\n\n// NB: this doesn't return an option, because in the case of there _not_ being a square root, we still want to return a field element that allows us to then assert in the _constrained_ sqrt function that there is no sqrt.\nunconstrained fn __sqrt(x: Field) -> (bool, Field) {\n let is_sq = is_square(x);\n if is_sq {\n let sqrt = tonelli_shanks_sqrt(x);\n (true, sqrt)\n } else {\n // Demonstrate that x is not a square (a.k.a. a \"quadratic non-residue\").\n // Facts:\n // The Legendre symbol (\"LS\") of x, is x^((p-1)/2) (mod p).\n // - If x is a square, LS(x) = 1\n // - If x is not a square, LS(x) = -1\n // - If x = 0, LS(x) = 0.\n //\n // Hence:\n // sq * sq = sq // 1 * 1 = 1\n // non-sq * non-sq = sq // -1 * -1 = 1\n // sq * non-sq = non-sq // -1 * 1 = -1\n //\n // See: https://en.wikipedia.org/wiki/Legendre_symbol\n let demo_x_not_square = x * KNOWN_NON_RESIDUE;\n let not_sqrt = tonelli_shanks_sqrt(demo_x_not_square);\n (false, not_sqrt)\n }\n}\n\nfn validate_sqrt_hint(x: Field, hint: Field) {\n assert(hint * hint == x, f\"The claimed_sqrt {hint} is not the sqrt of x {x}\");\n}\n\nfn validate_not_sqrt_hint(x: Field, hint: Field) {\n // We need this assertion, because x = 0 would pass the other assertions in this\n // function, and we don't want people to be able to prove that 0 is not square!\n assert(x != 0, \"0 has a square root; you cannot claim it is not square\");\n // Demonstrate that x is not a square (a.k.a. a \"quadratic non-residue\").\n //\n // Facts:\n // The Legendre symbol (\"LS\") of x, is x^((p-1)/2) (mod p).\n // - If x is a square, LS(x) = 1\n // - If x is not a square, LS(x) = -1\n // - If x = 0, LS(x) = 0.\n //\n // Hence:\n // 1. sq * sq = sq // 1 * 1 = 1\n // 2. non-sq * non-sq = sq // -1 * -1 = 1\n // 3. sq * non-sq = non-sq // -1 * 1 = -1\n //\n // See: https://en.wikipedia.org/wiki/Legendre_symbol\n //\n // We want to demonstrate that this below multiplication falls under bullet-point (2):\n let demo_x_not_square = x * KNOWN_NON_RESIDUE;\n // I.e. we want to demonstrate that `demo_x_not_square` has Legendre symbol 1\n // (i.e. that it is a square), so we prove that it is square below.\n // Why do we want to prove that it has LS 1?\n // Well, since it was computed with a known-non-residue, its squareness implies we're\n // in case 2 (something multiplied by a known-non-residue yielding a result which\n // has a LS of 1), which implies that x must be a non-square. The unconstrained\n // function gave us the sqrt of demo_x_not_square, so all we need to do is\n // assert its squareness:\n assert(\n hint * hint == demo_x_not_square,\n f\"The hint {hint} does not demonstrate that {x} is not a square\",\n );\n}\n\n#[test]\nunconstrained fn bytes_field_test() {\n // Tests correctness of field_from_bytes_32_trunc against existing methods\n // Bytes representing 0x543e0a6642ffeb8039296861765a53407bba62bd1c97ca43374de950bbe0a7\n let inputs = [\n 84, 62, 10, 102, 66, 255, 235, 128, 57, 41, 104, 97, 118, 90, 83, 64, 123, 186, 98, 189, 28,\n 151, 202, 67, 55, 77, 233, 80, 187, 224, 167,\n ];\n let field = field_from_bytes(inputs, true);\n let return_bytes: [u8; 31] = field.to_be_bytes();\n assert_eq(inputs, return_bytes);\n // 32 bytes - we remove the final byte, and check it matches the field\n let inputs2 = [\n 84, 62, 10, 102, 66, 255, 235, 128, 57, 41, 104, 97, 118, 90, 83, 64, 123, 186, 98, 189, 28,\n 151, 202, 67, 55, 77, 233, 80, 187, 224, 167, 158,\n ];\n let field2 = field_from_bytes_32_trunc(inputs2);\n let return_bytes2: [u8; 31] = field2.to_be_bytes();\n\n assert_eq(return_bytes2, return_bytes);\n assert_eq(field2, field);\n}\n\n#[test]\nunconstrained fn max_field_test() {\n // Tests the hardcoded value in constants.nr vs underlying modulus\n // NB: We can't use 0-1 in constants.nr as it will be transpiled incorrectly to ts and sol constants files\n let max_value = crate::constants::MAX_FIELD_VALUE;\n assert_eq(max_value, 0 - 1);\n // modulus == 0 is tested elsewhere, so below is more of a sanity check\n let max_bytes: [u8; 32] = max_value.to_be_bytes();\n let mod_bytes = std::field::modulus_be_bytes();\n for i in 0..31 {\n assert_eq(max_bytes[i], mod_bytes[i]);\n }\n assert_eq(max_bytes[31], mod_bytes[31] - 1);\n}\n\n#[test]\nunconstrained fn sqrt_valid_test() {\n let x = 16; // examples: 16, 9, 25, 81\n let result = sqrt(x);\n assert(result.is_some());\n assert_eq(result.unwrap() * result.unwrap(), x);\n}\n\n#[test]\nunconstrained fn sqrt_invalid_test() {\n let x = KNOWN_NON_RESIDUE; // has no square root in the field\n let result = sqrt(x);\n assert(result.is_none());\n}\n\n#[test]\nunconstrained fn sqrt_zero_test() {\n let result = sqrt(0);\n assert(result.is_some());\n assert_eq(result.unwrap(), 0);\n}\n\n#[test]\nunconstrained fn sqrt_one_test() {\n let result = sqrt(1);\n assert(result.is_some());\n assert_eq(result.unwrap() * result.unwrap(), 1);\n}\n\n#[test]\nunconstrained fn field_from_bytes_empty_test() {\n let empty: [u8; 0] = [];\n let result = field_from_bytes(empty, true);\n assert_eq(result, 0);\n\n let result_le = field_from_bytes(empty, false);\n assert_eq(result_le, 0);\n}\n\n#[test]\nunconstrained fn field_from_bytes_little_endian_test() {\n // Test little-endian conversion: [0x01, 0x02] should be 0x0201 = 513\n let bytes = [0x01, 0x02];\n let result_le = field_from_bytes(bytes, false);\n assert_eq(result_le, 0x0201);\n\n // Compare with big-endian: [0x01, 0x02] should be 0x0102 = 258\n let result_be = field_from_bytes(bytes, true);\n assert_eq(result_be, 0x0102);\n}\n\n#[test]\nunconstrained fn pow_test() {\n assert_eq(pow(2, 0), 1);\n assert_eq(pow(2, 1), 2);\n assert_eq(pow(2, 10), 1024);\n assert_eq(pow(3, 5), 243);\n assert_eq(pow(0, 5), 0);\n assert_eq(pow(1, 100), 1);\n}\n\n#[test]\nunconstrained fn min_test() {\n assert_eq(min(5, 10), 5);\n assert_eq(min(10, 5), 5);\n assert_eq(min(7, 7), 7);\n assert_eq(min(0, 1), 0);\n}\n\n#[test]\nunconstrained fn sqrt_has_two_roots_test() {\n // Every square has two roots: r and -r (i.e., p - r)\n // sqrt(16) can return 4 or -4\n let x = 16;\n let result = sqrt(x).unwrap();\n assert(result * result == x);\n // The other root is -result\n let other_root = 0 - result;\n assert(other_root * other_root == x);\n // Verify they are different (unless x = 0)\n assert(result != other_root);\n\n // Same for 9: roots are 3 and -3\n let y = 9;\n let result_y = sqrt(y).unwrap();\n assert(result_y * result_y == y);\n let other_root_y = 0 - result_y;\n assert(other_root_y * other_root_y == y);\n assert(result_y != other_root_y);\n}\n\n#[test]\nunconstrained fn sqrt_negative_one_test() {\n let x = 0 - 1;\n let result = sqrt(x);\n assert(result.unwrap() == 0x30644e72e131a029048b6e193fd841045cea24f6fd736bec231204708f703636);\n}\n\n#[test]\nunconstrained fn validate_sqrt_hint_valid_test() {\n // 4 is a valid sqrt of 16\n validate_sqrt_hint(16, 4);\n // -4 is also a valid sqrt of 16\n validate_sqrt_hint(16, 0 - 4);\n // 0 is a valid sqrt of 0\n validate_sqrt_hint(0, 0);\n // 1 is a valid sqrt of 1\n validate_sqrt_hint(1, 1);\n // -1 is also a valid sqrt of 1\n validate_sqrt_hint(1, 0 - 1);\n}\n\n#[test(should_fail_with = \"is not the sqrt of x\")]\nunconstrained fn validate_sqrt_hint_invalid_test() {\n // 5 is not a valid sqrt of 16\n validate_sqrt_hint(16, 5);\n}\n\n#[test]\nunconstrained fn validate_not_sqrt_hint_valid_test() {\n // 5 (KNOWN_NON_RESIDUE) is not a square.\n let x = KNOWN_NON_RESIDUE;\n let hint = tonelli_shanks_sqrt(x * KNOWN_NON_RESIDUE);\n validate_not_sqrt_hint(x, hint);\n}\n\n#[test(should_fail_with = \"0 has a square root\")]\nunconstrained fn validate_not_sqrt_hint_zero_test() {\n // 0 has a square root, so we cannot claim it is not square\n validate_not_sqrt_hint(0, 0);\n}\n\n#[test(should_fail_with = \"does not demonstrate that\")]\nunconstrained fn validate_not_sqrt_hint_wrong_hint_test() {\n // Provide a wrong hint for a non-square\n let x = KNOWN_NON_RESIDUE;\n validate_not_sqrt_hint(x, 123);\n}\n"
|
|
2604
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/types/src/utils/field.nr",
|
|
2605
|
+
"source": "pub fn field_from_bytes<let N: u32>(bytes: [u8; N], big_endian: bool) -> Field {\n std::static_assert(N < 32, \"field_from_bytes: N must be less than 32\");\n let mut as_field = 0;\n let mut offset = 1;\n for i in 0..N {\n let mut index = i;\n if big_endian {\n index = N - i - 1;\n }\n as_field += (bytes[index] as Field) * offset;\n offset *= 256;\n }\n\n as_field\n}\n\n// Convert a 32 byte array to a field element by truncating the final byte\npub fn field_from_bytes_32_trunc(bytes32: [u8; 32]) -> Field {\n // Convert it to a field element\n let mut v = 1;\n let mut high = 0 as Field;\n let mut low = 0 as Field;\n\n for i in 0..15 {\n // covers bytes 16..30 (31 is truncated and ignored)\n low = low + (bytes32[15 + 15 - i] as Field) * v;\n v = v * 256;\n // covers bytes 0..14\n high = high + (bytes32[14 - i] as Field) * v;\n }\n // covers byte 15\n low = low + (bytes32[15] as Field) * v;\n\n low + high * v\n}\n\npub fn min(f1: Field, f2: Field) -> Field {\n if f1.lt(f2) {\n f1\n } else {\n f2\n }\n}\n\n// TODO: write doc-comments and tests for these magic constants.\n\nglobal KNOWN_NON_RESIDUE: Field = 5; // This is a non-residue in Noir's native Field.\nglobal C1: u32 = 28;\nglobal C3: Field = 40770029410420498293352137776570907027550720424234931066070132305055;\nglobal C5: Field = 19103219067921713944291392827692070036145651957329286315305642004821462161904;\n\n// @dev: only use this for _huge_ exponents y, when writing a constrained function.\n// If you're only exponentiating by a small value, first consider writing-out the multiplications by hand.\n// Only after you've measured the gates of that approach, consider using the native Field::pow_32 function.\n// Only if your exponent is larger than 32 bits, resort to using this function.\npub fn pow(x: Field, y: Field) -> Field {\n let mut r = 1 as Field;\n let b: [bool; 254] = y.to_le_bits();\n\n for i in 0..254 {\n r *= r;\n r *= (b[254 - 1 - i] as Field) * x + (1 - b[254 - 1 - i] as Field);\n }\n\n r\n}\n\n/// Returns Option::some(sqrt) if there is a square root, and Option::none() if there isn't.\npub fn sqrt(x: Field) -> Option<Field> {\n // Safety: if the hint returns the square root of x, then we simply square it\n // check the result equals x. If x is not square, we return a value that\n // enables us to prove that fact (see the `else` clause below).\n let (is_sq, maybe_sqrt) = unsafe { __sqrt(x) };\n\n if is_sq {\n let sqrt = maybe_sqrt;\n validate_sqrt_hint(x, sqrt);\n Option::some(sqrt)\n } else {\n let not_sqrt_hint = maybe_sqrt;\n validate_not_sqrt_hint(x, not_sqrt_hint);\n Option::none()\n }\n}\n\n// Boolean indicating whether Field element is a square, i.e. whether there exists a y in Field s.t. x = y*y.\nunconstrained fn is_square(x: Field) -> bool {\n let v = pow(x, -1 / 2);\n v * (v - 1) == 0\n}\n\n// Tonelli-Shanks algorithm for computing the square root of a Field element.\n// Requires C1 = max{c: 2^c divides (p-1)}, where p is the order of Field\n// as well as C3 = (C2 - 1)/2, where C2 = (p-1)/(2^c1),\n// and C5 = ZETA^C2, where ZETA is a non-square element of Field.\n// These are pre-computed above as globals.\nunconstrained fn tonelli_shanks_sqrt(x: Field) -> Field {\n let mut z = pow(x, C3);\n let mut t = z * z * x;\n z *= x;\n let mut b = t;\n let mut c = C5;\n\n for i in 0..(C1 - 1) {\n for _j in 1..(C1 - i - 1) {\n b *= b;\n }\n\n z *= if b == 1 { 1 } else { c };\n\n c *= c;\n\n t *= if b == 1 { 1 } else { c };\n\n b = t;\n }\n\n z\n}\n\n// NB: this doesn't return an option, because in the case of there _not_ being a square root, we still want to return a field element that allows us to then assert in the _constrained_ sqrt function that there is no sqrt.\nunconstrained fn __sqrt(x: Field) -> (bool, Field) {\n let is_sq = is_square(x);\n if is_sq {\n let sqrt = tonelli_shanks_sqrt(x);\n (true, sqrt)\n } else {\n // Demonstrate that x is not a square (a.k.a. a \"quadratic non-residue\").\n // Facts:\n // The Legendre symbol (\"LS\") of x, is x^((p-1)/2) (mod p).\n // - If x is a square, LS(x) = 1\n // - If x is not a square, LS(x) = -1\n // - If x = 0, LS(x) = 0.\n //\n // Hence:\n // sq * sq = sq // 1 * 1 = 1\n // non-sq * non-sq = sq // -1 * -1 = 1\n // sq * non-sq = non-sq // -1 * 1 = -1\n //\n // See: https://en.wikipedia.org/wiki/Legendre_symbol\n let demo_x_not_square = x * KNOWN_NON_RESIDUE;\n let not_sqrt = tonelli_shanks_sqrt(demo_x_not_square);\n (false, not_sqrt)\n }\n}\n\nfn validate_sqrt_hint(x: Field, hint: Field) {\n assert(hint * hint == x, f\"The claimed_sqrt {hint} is not the sqrt of x {x}\");\n}\n\nfn validate_not_sqrt_hint(x: Field, hint: Field) {\n // We need this assertion, because x = 0 would pass the other assertions in this\n // function, and we don't want people to be able to prove that 0 is not square!\n assert(x != 0, \"0 has a square root; you cannot claim it is not square\");\n // Demonstrate that x is not a square (a.k.a. a \"quadratic non-residue\").\n //\n // Facts:\n // The Legendre symbol (\"LS\") of x, is x^((p-1)/2) (mod p).\n // - If x is a square, LS(x) = 1\n // - If x is not a square, LS(x) = -1\n // - If x = 0, LS(x) = 0.\n //\n // Hence:\n // 1. sq * sq = sq // 1 * 1 = 1\n // 2. non-sq * non-sq = sq // -1 * -1 = 1\n // 3. sq * non-sq = non-sq // -1 * 1 = -1\n //\n // See: https://en.wikipedia.org/wiki/Legendre_symbol\n //\n // We want to demonstrate that this below multiplication falls under bullet-point (2):\n let demo_x_not_square = x * KNOWN_NON_RESIDUE;\n // I.e. we want to demonstrate that `demo_x_not_square` has Legendre symbol 1\n // (i.e. that it is a square), so we prove that it is square below.\n // Why do we want to prove that it has LS 1?\n // Well, since it was computed with a known-non-residue, its squareness implies we're\n // in case 2 (something multiplied by a known-non-residue yielding a result which\n // has a LS of 1), which implies that x must be a non-square. The unconstrained\n // function gave us the sqrt of demo_x_not_square, so all we need to do is\n // assert its squareness:\n assert(\n hint * hint == demo_x_not_square,\n f\"The hint {hint} does not demonstrate that {x} is not a square\",\n );\n}\n\n#[test]\nunconstrained fn bytes_field_test() {\n // Tests correctness of field_from_bytes_32_trunc against existing methods\n // Bytes representing 0x543e0a6642ffeb8039296861765a53407bba62bd1c97ca43374de950bbe0a7\n let inputs = [\n 84, 62, 10, 102, 66, 255, 235, 128, 57, 41, 104, 97, 118, 90, 83, 64, 123, 186, 98, 189, 28,\n 151, 202, 67, 55, 77, 233, 80, 187, 224, 167,\n ];\n let field = field_from_bytes(inputs, true);\n let return_bytes: [u8; 31] = field.to_be_bytes();\n assert_eq(inputs, return_bytes);\n // 32 bytes - we remove the final byte, and check it matches the field\n let inputs2 = [\n 84, 62, 10, 102, 66, 255, 235, 128, 57, 41, 104, 97, 118, 90, 83, 64, 123, 186, 98, 189, 28,\n 151, 202, 67, 55, 77, 233, 80, 187, 224, 167, 158,\n ];\n let field2 = field_from_bytes_32_trunc(inputs2);\n let return_bytes2: [u8; 31] = field2.to_be_bytes();\n\n assert_eq(return_bytes2, return_bytes);\n assert_eq(field2, field);\n}\n\n#[test]\nunconstrained fn max_field_test() {\n // Tests the hardcoded value in constants.nr vs underlying modulus\n // NB: We can't use 0-1 in constants.nr as it will be transpiled incorrectly to ts and sol constants files\n let max_value = crate::constants::MAX_FIELD_VALUE;\n assert_eq(max_value, 0 - 1);\n // modulus == 0 is tested elsewhere, so below is more of a sanity check\n let max_bytes: [u8; 32] = max_value.to_be_bytes();\n let mod_bytes = std::field::modulus_be_bytes();\n for i in 0..31 {\n assert_eq(max_bytes[i], mod_bytes[i]);\n }\n assert_eq(max_bytes[31], mod_bytes[31] - 1);\n}\n\n#[test]\nunconstrained fn sqrt_valid_test() {\n let x = 16; // examples: 16, 9, 25, 81\n let result = sqrt(x);\n assert(result.is_some());\n assert_eq(result.unwrap() * result.unwrap(), x);\n}\n\n#[test]\nunconstrained fn sqrt_invalid_test() {\n let x = KNOWN_NON_RESIDUE; // has no square root in the field\n let result = sqrt(x);\n assert(result.is_none());\n}\n\n#[test]\nunconstrained fn sqrt_zero_test() {\n let result = sqrt(0);\n assert(result.is_some());\n assert_eq(result.unwrap(), 0);\n}\n\n#[test]\nunconstrained fn sqrt_one_test() {\n let result = sqrt(1);\n assert(result.is_some());\n assert_eq(result.unwrap() * result.unwrap(), 1);\n}\n\n#[test]\nunconstrained fn field_from_bytes_empty_test() {\n let empty: [u8; 0] = [];\n let result = field_from_bytes(empty, true);\n assert_eq(result, 0);\n\n let result_le = field_from_bytes(empty, false);\n assert_eq(result_le, 0);\n}\n\n#[test]\nunconstrained fn field_from_bytes_little_endian_test() {\n // Test little-endian conversion: [0x01, 0x02] should be 0x0201 = 513\n let bytes = [0x01, 0x02];\n let result_le = field_from_bytes(bytes, false);\n assert_eq(result_le, 0x0201);\n\n // Compare with big-endian: [0x01, 0x02] should be 0x0102 = 258\n let result_be = field_from_bytes(bytes, true);\n assert_eq(result_be, 0x0102);\n}\n\n#[test]\nunconstrained fn pow_test() {\n assert_eq(pow(2, 0), 1);\n assert_eq(pow(2, 1), 2);\n assert_eq(pow(2, 10), 1024);\n assert_eq(pow(3, 5), 243);\n assert_eq(pow(0, 5), 0);\n assert_eq(pow(1, 100), 1);\n}\n\n#[test]\nunconstrained fn min_test() {\n assert_eq(min(5, 10), 5);\n assert_eq(min(10, 5), 5);\n assert_eq(min(7, 7), 7);\n assert_eq(min(0, 1), 0);\n}\n\n#[test]\nunconstrained fn sqrt_has_two_roots_test() {\n // Every square has two roots: r and -r (i.e., p - r)\n // sqrt(16) can return 4 or -4\n let x = 16;\n let result = sqrt(x).unwrap();\n assert(result * result == x);\n // The other root is -result\n let other_root = 0 - result;\n assert(other_root * other_root == x);\n // Verify they are different (unless x = 0)\n assert(result != other_root);\n\n // Same for 9: roots are 3 and -3\n let y = 9;\n let result_y = sqrt(y).unwrap();\n assert(result_y * result_y == y);\n let other_root_y = 0 - result_y;\n assert(other_root_y * other_root_y == y);\n assert(result_y != other_root_y);\n}\n\n#[test]\nunconstrained fn sqrt_negative_one_test() {\n let x = 0 - 1;\n let result = sqrt(x).unwrap();\n // -1 has two square roots, `r` and `-r` (= p - r), and `sqrt()` may legitimately return either one.\n // Accept both rather than pinning the test to one particular root.\n let known_root = 0x30644e72e131a029048b6e193fd841045cea24f6fd736bec231204708f703636;\n assert((result == known_root) | (result == 0 - known_root));\n}\n\n#[test]\nunconstrained fn sqrt_negative_one_squares_back_test() {\n let x = 0 - 1;\n let root = sqrt(x).unwrap();\n // Whichever root `sqrt` returns is a genuine square root of -1...\n assert_eq(root * root, x);\n // ...and so is its negation (the other root), which must be distinct.\n let other_root = 0 - root;\n assert_eq(other_root * other_root, x);\n assert(root != other_root);\n}\n\n#[test]\nunconstrained fn validate_sqrt_hint_valid_test() {\n // 4 is a valid sqrt of 16\n validate_sqrt_hint(16, 4);\n // -4 is also a valid sqrt of 16\n validate_sqrt_hint(16, 0 - 4);\n // 0 is a valid sqrt of 0\n validate_sqrt_hint(0, 0);\n // 1 is a valid sqrt of 1\n validate_sqrt_hint(1, 1);\n // -1 is also a valid sqrt of 1\n validate_sqrt_hint(1, 0 - 1);\n}\n\n#[test(should_fail_with = \"is not the sqrt of x\")]\nunconstrained fn validate_sqrt_hint_invalid_test() {\n // 5 is not a valid sqrt of 16\n validate_sqrt_hint(16, 5);\n}\n\n#[test]\nunconstrained fn validate_not_sqrt_hint_valid_test() {\n // 5 (KNOWN_NON_RESIDUE) is not a square.\n let x = KNOWN_NON_RESIDUE;\n let hint = tonelli_shanks_sqrt(x * KNOWN_NON_RESIDUE);\n validate_not_sqrt_hint(x, hint);\n}\n\n#[test(should_fail_with = \"0 has a square root\")]\nunconstrained fn validate_not_sqrt_hint_zero_test() {\n // 0 has a square root, so we cannot claim it is not square\n validate_not_sqrt_hint(0, 0);\n}\n\n#[test(should_fail_with = \"does not demonstrate that\")]\nunconstrained fn validate_not_sqrt_hint_wrong_hint_test() {\n // Provide a wrong hint for a non-square\n let x = KNOWN_NON_RESIDUE;\n validate_not_sqrt_hint(x, 123);\n}\n"
|
|
2872
2606
|
},
|
|
2873
2607
|
"439": {
|
|
2874
2608
|
"function_locations": [
|
|
@@ -2917,7 +2651,7 @@
|
|
|
2917
2651
|
"start": 1426
|
|
2918
2652
|
}
|
|
2919
2653
|
],
|
|
2920
|
-
"path": "/home/
|
|
2654
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/serde/src/reader.nr",
|
|
2921
2655
|
"source": "pub struct Reader<let N: u32> {\n data: [Field; N],\n offset: u32,\n}\n\nimpl<let N: u32> Reader<N> {\n pub fn new(data: [Field; N]) -> Self {\n Self { data, offset: 0 }\n }\n\n pub fn read(&mut self) -> Field {\n let result = self.data[self.offset];\n self.offset += 1;\n result\n }\n\n pub fn read_u32(&mut self) -> u32 {\n self.read() as u32\n }\n\n pub fn read_u64(&mut self) -> u64 {\n self.read() as u64\n }\n\n pub fn read_bool(&mut self) -> bool {\n self.read() != 0\n }\n\n pub fn read_array<let K: u32>(&mut self) -> [Field; K] {\n let mut result = [0; K];\n for i in 0..K {\n result[i] = self.data[self.offset + i];\n }\n self.offset += K;\n result\n }\n\n pub fn read_struct<T, let K: u32>(&mut self, deserialise: fn([Field; K]) -> T) -> T {\n let result = deserialise(self.read_array());\n result\n }\n\n pub fn read_struct_array<T, let K: u32, let C: u32>(\n &mut self,\n deserialise: fn([Field; K]) -> T,\n mut result: [T; C],\n ) -> [T; C] {\n for i in 0..C {\n result[i] = self.read_struct(deserialise);\n }\n result\n }\n\n pub fn peek_offset(&mut self, offset: u32) -> Field {\n self.data[self.offset + offset]\n }\n\n pub fn advance_offset(&mut self, offset: u32) {\n self.offset += offset;\n }\n\n pub fn finish(self) {\n assert_eq(self.offset, self.data.len(), \"Reader did not read all data\");\n }\n}\n"
|
|
2922
2656
|
},
|
|
2923
2657
|
"440": {
|
|
@@ -2943,7 +2677,7 @@
|
|
|
2943
2677
|
"start": 12477
|
|
2944
2678
|
}
|
|
2945
2679
|
],
|
|
2946
|
-
"path": "/home/
|
|
2680
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/serde/src/serialization.nr",
|
|
2947
2681
|
"source": "use crate::{reader::Reader, writer::Writer};\n\n/// Trait for serializing Noir types into arrays of Fields.\n///\n/// An implementation of the Serialize trait has to follow Noir's intrinsic serialization (each member of a struct\n/// converted directly into one or more Fields without any packing or compression). This trait (and Deserialize) are\n/// typically used to communicate between Noir and TypeScript (via oracles and function arguments).\n///\n/// # On Following Noir's Intrinsic Serialization\n/// When calling a Noir function from TypeScript (TS), first the function arguments are serialized into an array\n/// of fields. This array is then included in the initial witness. Noir's intrinsic serialization is then used\n/// to deserialize the arguments from the witness. When the same Noir function is called from Noir this Serialize trait\n/// is used instead of the serialization in TS. For this reason we need to have a match between TS serialization,\n/// Noir's intrinsic serialization and the implementation of this trait. If there is a mismatch, the function calls\n/// fail with an arguments hash mismatch error message.\n///\n/// # Associated Constants\n/// * `N` - The length of the output Field array, known at compile time\n///\n/// # Example\n/// ```\n/// impl<let N: u32> Serialize for str<N> {\n/// let N: u32 = N;\n///\n/// fn serialize(self) -> [Field; Self::N] {\n/// let mut writer: Writer<Self::N> = Writer::new();\n/// self.stream_serialize(&mut writer);\n/// writer.finish()\n/// }\n///\n/// fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n/// let bytes = self.as_bytes();\n/// for i in 0..bytes.len() {\n/// writer.write(bytes[i] as Field);\n/// }\n/// }\n/// }\n/// ```\n#[derive_via(derive_serialize)]\npub trait Serialize {\n let N: u32;\n\n fn serialize(self) -> [Field; Self::N];\n\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>);\n}\n\n/// Generates a `Serialize` trait implementation for a struct type.\n///\n/// # Parameters\n/// - `s`: The struct type definition to generate the implementation for\n///\n/// # Returns\n/// A quoted code block containing the trait implementation\n///\n/// # Example\n/// For a struct defined as:\n/// ```\n/// struct Log<N> {\n/// fields: [Field; N],\n/// length: u32\n/// }\n/// ```\n///\n/// This function generates code equivalent to:\n/// ```\n/// impl<let N: u32> Serialize for Log<N> {\n/// let N: u32 = <[Field; N] as Serialize>::N + <u32 as Serialize>::N;\n///\n/// fn serialize(self) -> [Field; Self::N] {\n/// let mut writer: Writer<Self::N> = Writer::new();\n/// self.stream_serialize(&mut writer);\n/// writer.finish()\n/// }\n///\n/// #[inline_always]\n/// fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n/// Serialize::stream_serialize(self.fields, writer);\n/// Serialize::stream_serialize(self.length, writer);\n/// }\n/// }\n/// ```\npub comptime fn derive_serialize(s: TypeDefinition) -> Quoted {\n let typ = s.as_type();\n let nested_struct = typ.as_data_type().unwrap();\n\n // We care only about the name and type so we drop the last item of the tuple\n let params = nested_struct.0.fields(nested_struct.1).map(|(name, typ, _)| (name, typ));\n\n // Generates the generic parameter declarations (to be placed after the `impl` keyword) and the `where` clause\n // for the `Serialize` trait.\n let generics_declarations = get_generics_declarations(s);\n let where_serialize_clause = get_where_trait_clause(s, quote { Serialize });\n\n let params_len_quote = get_params_len_quote(params);\n\n let function_body = params\n .map(|(name, _typ): (Quoted, Type)| {\n quote {\n $crate::serialization::Serialize::stream_serialize(self.$name, writer);\n }\n })\n .join(quote {});\n\n quote {\n impl$generics_declarations $crate::serialization::Serialize for $typ\n $where_serialize_clause\n {\n let N: u32 = $params_len_quote;\n\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: $crate::writer::Writer<Self::N> = $crate::writer::Writer::new();\n $crate::serialization::Serialize::stream_serialize(self, &mut writer);\n writer.finish()\n }\n\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut $crate::writer::Writer<K>) {\n $function_body\n }\n }\n }\n}\n\n/// Trait for deserializing Noir types from arrays of Fields.\n///\n/// An implementation of the Deserialize trait has to follow Noir's intrinsic serialization (each member of a struct\n/// converted directly into one or more Fields without any packing or compression). This trait is typically used when\n/// deserializing return values from function calls in Noir. Since the same function could be called from TypeScript\n/// (TS), in which case the TS deserialization would get used, we need to have a match between the 2.\n///\n/// # Associated Constants\n/// * `N` - The length of the input Field array, known at compile time\n///\n/// # Example\n/// ```\n/// impl<let M: u32> Deserialize for str<M> {\n/// let N: u32 = M;\n///\n/// fn deserialize(fields: [Field; Self::N]) -> Self {\n/// let mut reader = Reader::new(fields);\n/// let result = Self::stream_deserialize(&mut reader);\n/// reader.finish();\n/// result\n/// }\n///\n/// fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n/// let mut bytes = [0 as u8; M];\n/// for i in 0..M {\n/// bytes[i] = reader.read() as u8;\n/// }\n/// str::<M>::from(bytes)\n/// }\n/// }\n/// ```\n#[derive_via(derive_deserialize)]\npub trait Deserialize {\n let N: u32;\n\n fn deserialize(fields: [Field; Self::N]) -> Self;\n\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self;\n}\n\n/// Generates a `Deserialize` trait implementation for a given struct `s`.\n///\n/// # Arguments\n/// * `s` - The struct type definition to generate the implementation for\n///\n/// # Returns\n/// A `Quoted` block containing the generated trait implementation\n///\n/// # Requirements\n/// Each struct member type must implement the `Deserialize` trait (it gets used in the generated code).\n///\n/// # Example\n/// For a struct like:\n/// ```\n/// struct MyStruct {\n/// x: AztecAddress,\n/// y: Field,\n/// }\n/// ```\n///\n/// This generates:\n/// ```\n/// impl Deserialize for MyStruct {\n/// let N: u32 = <AztecAddress as Deserialize>::N + <Field as Deserialize>::N;\n///\n/// fn deserialize(fields: [Field; Self::N]) -> Self {\n/// let mut reader = Reader::new(fields);\n/// let result = Self::stream_deserialize(&mut reader);\n/// reader.finish();\n/// result\n/// }\n///\n/// #[inline_always]\n/// fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n/// let x = <AztecAddress as Deserialize>::stream_deserialize(reader);\n/// let y = <Field as Deserialize>::stream_deserialize(reader);\n/// Self { x, y }\n/// }\n/// }\n/// ```\npub comptime fn derive_deserialize(s: TypeDefinition) -> Quoted {\n let typ = s.as_type();\n let nested_struct = typ.as_data_type().unwrap();\n let params = nested_struct.0.fields(nested_struct.1);\n\n // Generates the generic parameter declarations (to be placed after the `impl` keyword) and the `where` clause\n // for the `Deserialize` trait.\n let generics_declarations = get_generics_declarations(s);\n let where_deserialize_clause = get_where_trait_clause(s, quote { Deserialize });\n\n // The following will give us:\n // <type_of_struct_member_1 as Deserialize>::N + <type_of_struct_member_2 as Deserialize>::N + ...\n // (or 0 if the struct has no members)\n let right_hand_side_of_definition_of_n = if params.len() > 0 {\n params\n .map(|(_, param_type, _): (Quoted, Type, Quoted)| {\n quote {\n <$param_type as $crate::serialization::Deserialize>::N\n }\n })\n .join(quote {+})\n } else {\n quote { 0 }\n };\n\n // For structs containing a single member, we can enhance performance by directly deserializing the input array,\n // bypassing the need for loop-based array construction. While this optimization yields significant benefits in\n // Brillig where the loops are expected to not be optimized, it is not relevant in ACIR where the loops are\n // expected to be optimized away.\n let function_body = if params.len() > 1 {\n // This generates deserialization code for each struct member and concatenates them together.\n let deserialization_of_struct_members = params\n .map(|(param_name, param_type, _): (Quoted, Type, Quoted)| {\n quote {\n let $param_name = <$param_type as Deserialize>::stream_deserialize(reader);\n }\n })\n .join(quote {});\n\n // We join the struct member names with a comma to be used in the `Self { ... }` syntax\n // This will give us e.g. `a, b, c` for a struct with three fields named `a`, `b`, and `c`.\n let struct_members = params\n .map(|(param_name, _, _): (Quoted, Type, Quoted)| quote { $param_name })\n .join(quote {,});\n\n quote {\n $deserialization_of_struct_members\n\n Self { $struct_members }\n }\n } else if params.len() == 1 {\n let param_name = params[0].0;\n quote {\n Self { $param_name: $crate::serialization::Deserialize::stream_deserialize(reader) }\n }\n } else {\n quote {\n Self {}\n }\n };\n\n quote {\n impl$generics_declarations $crate::serialization::Deserialize for $typ\n $where_deserialize_clause\n {\n let N: u32 = $right_hand_side_of_definition_of_n;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = $crate::reader::Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut $crate::reader::Reader<K>) -> Self {\n $function_body\n }\n }\n }\n}\n\n/// Generates a quoted expression that computes the total serialized length of function parameters.\n///\n/// # Parameters\n/// * `params` - An array of tuples where each tuple contains a quoted parameter name and its Type. The type needs\n/// to implement the Serialize trait.\n///\n/// # Returns\n/// A quoted expression that evaluates to:\n/// * `0` if there are no parameters\n/// * `(<type1 as Serialize>::N + <type2 as Serialize>::N + ...)` for one or more parameters\ncomptime fn get_params_len_quote(params: [(Quoted, Type)]) -> Quoted {\n if params.len() == 0 {\n quote { 0 }\n } else {\n let params_quote_without_parentheses = params\n .map(|(_, param_type): (Quoted, Type)| {\n quote {\n <$param_type as $crate::serialization::Serialize>::N\n }\n })\n .join(quote {+});\n quote { ($params_quote_without_parentheses) }\n }\n}\n\ncomptime fn get_generics_declarations(s: TypeDefinition) -> Quoted {\n let generics = s.generics();\n\n if generics.len() > 0 {\n let generics_declarations_items = generics\n .map(|(name, maybe_integer_typ)| {\n // The second item in the generics tuple is an Option of an integer type that is Some only if\n // the generic is numeric.\n if maybe_integer_typ.is_some() {\n // The generic is numeric, so we return a quote defined as e.g. \"let N: u32\"\n let integer_type = maybe_integer_typ.unwrap();\n quote {let $name: $integer_type}\n } else {\n // The generic is not numeric, so we return a quote containing the name of the generic (e.g. \"T\")\n quote { $name }\n }\n })\n .join(quote {,});\n quote {<$generics_declarations_items>}\n } else {\n // The struct doesn't have any generics defined, so we just return an empty quote.\n quote {}\n }\n}\n\ncomptime fn get_where_trait_clause(s: TypeDefinition, trait_name: Quoted) -> Quoted {\n let generics = s.generics();\n\n // The second item in the generics tuple is an Option of an integer type that is Some only if the generic is\n // numeric.\n let non_numeric_generics =\n generics.filter(|(_, maybe_integer_typ)| maybe_integer_typ.is_none());\n\n if non_numeric_generics.len() > 0 {\n let non_numeric_generics_declarations =\n non_numeric_generics.map(|(name, _)| quote {$name: $trait_name}).join(quote {,});\n quote {where $non_numeric_generics_declarations}\n } else {\n // There are no non-numeric generics, so we return an empty quote.\n quote {}\n }\n}\n"
|
|
2948
2682
|
},
|
|
2949
2683
|
"442": {
|
|
@@ -3257,7 +2991,7 @@
|
|
|
3257
2991
|
"start": 21246
|
|
3258
2992
|
}
|
|
3259
2993
|
],
|
|
3260
|
-
"path": "/home/
|
|
2994
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/serde/src/type_impls.nr",
|
|
3261
2995
|
"source": "use crate::{reader::Reader, serialization::{Deserialize, Serialize}, writer::Writer};\nuse std::embedded_curve_ops::EmbeddedCurvePoint;\nuse std::embedded_curve_ops::EmbeddedCurveScalar;\n\nglobal BOOL_SERIALIZED_LEN: u32 = 1;\nglobal U8_SERIALIZED_LEN: u32 = 1;\nglobal U16_SERIALIZED_LEN: u32 = 1;\nglobal U32_SERIALIZED_LEN: u32 = 1;\nglobal U64_SERIALIZED_LEN: u32 = 1;\nglobal U128_SERIALIZED_LEN: u32 = 1;\nglobal FIELD_SERIALIZED_LEN: u32 = 1;\nglobal I8_SERIALIZED_LEN: u32 = 1;\nglobal I16_SERIALIZED_LEN: u32 = 1;\nglobal I32_SERIALIZED_LEN: u32 = 1;\nglobal I64_SERIALIZED_LEN: u32 = 1;\n\nimpl Serialize for bool {\n let N: u32 = BOOL_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as Field);\n }\n}\n\nimpl Deserialize for bool {\n let N: u32 = BOOL_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> bool {\n reader.read() != 0\n }\n}\n\nimpl Serialize for u8 {\n let N: u32 = U8_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as Field);\n }\n}\n\nimpl Deserialize for u8 {\n let N: u32 = U8_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u8\n }\n}\n\nimpl Serialize for u16 {\n let N: u32 = U16_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as Field);\n }\n}\n\nimpl Deserialize for u16 {\n let N: u32 = U16_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u16\n }\n}\n\nimpl Serialize for u32 {\n let N: u32 = U32_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as Field);\n }\n}\n\nimpl Deserialize for u32 {\n let N: u32 = U32_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u32\n }\n}\n\nimpl Serialize for u64 {\n let N: u32 = U64_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as Field);\n }\n}\n\nimpl Deserialize for u64 {\n let N: u32 = U64_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u64\n }\n}\n\nimpl Serialize for u128 {\n let N: u32 = U128_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as Field);\n }\n}\n\nimpl Deserialize for u128 {\n let N: u32 = U128_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u128\n }\n}\n\nimpl Serialize for Field {\n let N: u32 = FIELD_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self);\n }\n}\n\nimpl Deserialize for Field {\n let N: u32 = FIELD_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read()\n }\n}\n\nimpl Serialize for i8 {\n let N: u32 = I8_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as u8 as Field);\n }\n}\n\nimpl Deserialize for i8 {\n let N: u32 = I8_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u8 as i8\n }\n}\n\nimpl Serialize for i16 {\n let N: u32 = I16_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as u16 as Field);\n }\n}\n\nimpl Deserialize for i16 {\n let N: u32 = I16_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u16 as i16\n }\n}\n\nimpl Serialize for i32 {\n let N: u32 = I32_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as u32 as Field);\n }\n}\n\nimpl Deserialize for i32 {\n let N: u32 = I32_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u32 as i32\n }\n}\n\nimpl Serialize for i64 {\n let N: u32 = I64_SERIALIZED_LEN;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self as u64 as Field);\n }\n}\n\nimpl Deserialize for i64 {\n let N: u32 = I64_SERIALIZED_LEN;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n reader.read() as u64 as i64\n }\n}\n\nimpl<T, let M: u32> Serialize for [T; M]\nwhere\n T: Serialize,\n{\n let N: u32 = <T as Serialize>::N * M;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n for i in 0..M {\n self[i].stream_serialize(writer);\n }\n }\n}\n\nimpl<T, let M: u32> Deserialize for [T; M]\nwhere\n T: Deserialize,\n{\n let N: u32 = <T as Deserialize>::N * M;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n let mut result: [T; M] = std::mem::zeroed();\n for i in 0..M {\n result[i] = T::stream_deserialize(reader);\n }\n result\n }\n}\n\nimpl<T> Serialize for Option<T>\nwhere\n T: Serialize,\n{\n let N: u32 = <T as Serialize>::N + 1;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write_bool(self.is_some());\n if self.is_some() {\n self.unwrap_unchecked().stream_serialize(writer);\n } else {\n writer.advance_offset(<T as Serialize>::N);\n }\n }\n}\n\nimpl<T> Deserialize for Option<T>\nwhere\n T: Deserialize,\n{\n let N: u32 = <T as Deserialize>::N + 1;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n if reader.read_bool() {\n Option::some(<T as Deserialize>::stream_deserialize(reader))\n } else {\n reader.advance_offset(<T as Deserialize>::N);\n Option::none()\n }\n }\n}\n\nglobal SCALAR_SIZE: u32 = 2;\n\nimpl Serialize for EmbeddedCurveScalar {\n\n let N: u32 = SCALAR_SIZE;\n\n fn serialize(self) -> [Field; SCALAR_SIZE] {\n [self.lo, self.hi]\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self.lo);\n writer.write(self.hi);\n }\n}\n\nimpl Deserialize for EmbeddedCurveScalar {\n let N: u32 = SCALAR_SIZE;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n Self { lo: fields[0], hi: fields[1] }\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n Self { lo: reader.read(), hi: reader.read() }\n }\n}\n\nglobal POINT_SIZE: u32 = 2;\n\nimpl Serialize for EmbeddedCurvePoint {\n let N: u32 = POINT_SIZE;\n\n fn serialize(self) -> [Field; Self::N] {\n [self.x, self.y]\n }\n\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self.x);\n writer.write(self.y);\n }\n}\n\nimpl Deserialize for EmbeddedCurvePoint {\n let N: u32 = POINT_SIZE;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n Self { x: fields[0], y: fields[1] }\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n Self { x: reader.read(), y: reader.read() }\n }\n}\n\nimpl<let M: u32> Deserialize for str<M> {\n let N: u32 = M;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n let u8_arr = <[u8; Self::N] as Deserialize>::stream_deserialize(reader);\n str::<Self::N>::from(u8_arr)\n }\n}\n\nimpl<let M: u32> Serialize for str<M> {\n let N: u32 = M;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n self.as_bytes().stream_serialize(writer);\n }\n}\n\n// Note: Not deriving this because it's not supported to call derive_serialize on a \"remote\" struct (and it will never\n// be supported).\nimpl<T, let M: u32> Deserialize for BoundedVec<T, M>\nwhere\n T: Deserialize,\n{\n let N: u32 = <T as Deserialize>::N * M + 1;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n let mut new_bounded_vec: BoundedVec<T, M> = BoundedVec::new();\n let payload_len = Self::N - 1;\n\n // Length is stored in the last field as we need to match intrinsic Noir serialization and the `len` struct\n // field is after `storage` struct field (see `bounded_vec.nr` in noir-stdlib)\n let len = reader.peek_offset(payload_len) as u32;\n\n for i in 0..M {\n if i < len {\n new_bounded_vec.push(<T as Deserialize>::stream_deserialize(reader));\n }\n }\n\n // +1 for the length of the BoundedVec\n reader.advance_offset((M - len) * <T as Deserialize>::N + 1);\n\n new_bounded_vec\n }\n}\n\n// This may cause issues if used as program input, because noir disallows empty arrays for program input.\n// I think this is okay because I don't foresee a unit type being used as input. But leaving this comment as a hint\n// if someone does run into this in the future.\nimpl Deserialize for () {\n let N: u32 = 0;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(_reader: &mut Reader<K>) -> Self {\n ()\n }\n}\n\n// Note: Not deriving this because it's not supported to call derive_serialize on a \"remote\" struct (and it will never\n// be supported).\nimpl<T, let M: u32> Serialize for BoundedVec<T, M>\nwhere\n T: Serialize,\n{\n let N: u32 = <T as Serialize>::N * M + 1; // +1 for the length of the BoundedVec\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: Writer<Self::N> = Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n self.storage().stream_serialize(writer);\n // Length is stored in the last field as we need to match intrinsic Noir serialization and the `len` struct\n // field is after `storage` struct field (see `bounded_vec.nr` in noir-stdlib)\n writer.write_u32(self.len() as u32);\n }\n}\n\n// Create a slice of the given length with each element made from `f(i)` where `i` is the current index\ncomptime fn make_slice<Env, T>(length: u32, f: fn[Env](u32) -> T) -> [T] {\n let mut slice = @[];\n for i in 0..length {\n slice = slice.push_back(f(i));\n }\n slice\n}\n\n// Implements Serialize and Deserialize for an arbitrary tuple type\ncomptime fn impl_serialize_for_tuple(_m: Module, length: u32) -> Quoted {\n // `T0`, `T1`, `T2`\n let type_names = make_slice(length, |i| f\"T{i}\".quoted_contents());\n\n // `result0`, `result1`, `result2`\n let result_names = make_slice(length, |i| f\"result{i}\".quoted_contents());\n\n // `T0, T1, T2`\n let field_generics = type_names.join(quote [,]);\n\n // `<T0 as Serialize>::N + <T1 as Serialize>::N + <T2 as Serialize>::N`\n let full_size_serialize = type_names\n .map(|type_name| quote {\n <$type_name as Serialize>::N\n })\n .join(quote [+]);\n\n // `<T0 as Deserialize>::N + <T1 as Deserialize>::N + <T2 as Deserialize>::N`\n let full_size_deserialize = type_names\n .map(|type_name| quote {\n <$type_name as Deserialize>::N\n })\n .join(quote [+]);\n\n // `T0: Serialize, T1: Serialize, T2: Serialize,`\n let serialize_constraints = type_names\n .map(|field_name| quote {\n $field_name: Serialize,\n })\n .join(quote []);\n\n // `T0: Deserialize, T1: Deserialize, T2: Deserialize,`\n let deserialize_constraints = type_names\n .map(|field_name| quote {\n $field_name: Deserialize,\n })\n .join(quote []);\n\n // Statements to serialize each field\n let serialized_fields = type_names\n .mapi(|i, _type_name| quote {\n $crate::serialization::Serialize::stream_serialize(self.$i, writer);\n })\n .join(quote []);\n\n // Statements to deserialize each field\n let deserialized_fields = type_names\n .mapi(|i, type_name| {\n let result_name = result_names[i];\n quote {\n let $result_name = <$type_name as $crate::serialization::Deserialize>::stream_deserialize(reader);\n }\n })\n .join(quote []);\n let deserialize_results = result_names.join(quote [,]);\n\n quote {\n impl<$field_generics> Serialize for ($field_generics) where $serialize_constraints {\n let N: u32 = $full_size_serialize;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: $crate::writer::Writer<Self::N> = $crate::writer::Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut $crate::writer::Writer<K>) {\n\n $serialized_fields\n }\n }\n\n impl<$field_generics> Deserialize for ($field_generics) where $deserialize_constraints {\n let N: u32 = $full_size_deserialize;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = $crate::reader::Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n \n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut $crate::reader::Reader<K>) -> Self {\n $deserialized_fields\n ($deserialize_results)\n }\n }\n }\n}\n\n// Keeping these manual impls. They are more efficient since they do not\n// require copying sub-arrays from any serialized arrays.\nimpl<T1> Serialize for (T1,)\nwhere\n T1: Serialize,\n{\n let N: u32 = <T1 as Serialize>::N;\n\n fn serialize(self) -> [Field; Self::N] {\n let mut writer: crate::writer::Writer<Self::N> = crate::writer::Writer::new();\n self.stream_serialize(&mut writer);\n writer.finish()\n }\n\n #[inline_always]\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n self.0.stream_serialize(writer);\n }\n}\n\nimpl<T1> Deserialize for (T1,)\nwhere\n T1: Deserialize,\n{\n let N: u32 = <T1 as Deserialize>::N;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n let mut reader = crate::reader::Reader::new(fields);\n let result = Self::stream_deserialize(&mut reader);\n reader.finish();\n result\n }\n\n #[inline_always]\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n (<T1 as Deserialize>::stream_deserialize(reader),)\n }\n}\n\n#[impl_serialize_for_tuple(2)]\n#[impl_serialize_for_tuple(3)]\n#[impl_serialize_for_tuple(4)]\n#[impl_serialize_for_tuple(5)]\n#[impl_serialize_for_tuple(6)]\nmod impls {\n use crate::serialization::{Deserialize, Serialize};\n}\n\n#[test]\nunconstrained fn bounded_vec_serialization() {\n // Test empty BoundedVec\n let empty_vec: BoundedVec<Field, 3> = BoundedVec::from_array([]);\n let serialized = empty_vec.serialize();\n let deserialized = BoundedVec::<Field, 3>::deserialize(serialized);\n assert_eq(empty_vec, deserialized);\n assert_eq(deserialized.len(), 0);\n\n // Test partially filled BoundedVec\n let partial_vec: BoundedVec<[u32; 2], 3> = BoundedVec::from_array([[1, 2]]);\n let serialized = partial_vec.serialize();\n let deserialized = BoundedVec::<[u32; 2], 3>::deserialize(serialized);\n assert_eq(partial_vec, deserialized);\n assert_eq(deserialized.len(), 1);\n assert_eq(deserialized.get(0), [1, 2]);\n\n // Test full BoundedVec\n let full_vec: BoundedVec<[u32; 2], 3> = BoundedVec::from_array([[1, 2], [3, 4], [5, 6]]);\n let serialized = full_vec.serialize();\n let deserialized = BoundedVec::<[u32; 2], 3>::deserialize(serialized);\n assert_eq(full_vec, deserialized);\n assert_eq(deserialized.len(), 3);\n assert_eq(deserialized.get(0), [1, 2]);\n assert_eq(deserialized.get(1), [3, 4]);\n assert_eq(deserialized.get(2), [5, 6]);\n}\n"
|
|
3262
2996
|
},
|
|
3263
2997
|
"443": {
|
|
@@ -3303,7 +3037,7 @@
|
|
|
3303
3037
|
"start": 1263
|
|
3304
3038
|
}
|
|
3305
3039
|
],
|
|
3306
|
-
"path": "/home/
|
|
3040
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-protocol-circuits/crates/serde/src/writer.nr",
|
|
3307
3041
|
"source": "pub struct Writer<let N: u32> {\n data: [Field; N],\n offset: u32,\n}\n\nimpl<let N: u32> Writer<N> {\n pub fn new() -> Self {\n Self { data: [0; N], offset: 0 }\n }\n\n pub fn write(&mut self, value: Field) {\n self.data[self.offset] = value;\n self.offset += 1;\n }\n\n pub fn write_u32(&mut self, value: u32) {\n self.write(value as Field);\n }\n\n pub fn write_u64(&mut self, value: u64) {\n self.write(value as Field);\n }\n\n pub fn write_bool(&mut self, value: bool) {\n self.write(value as Field);\n }\n\n pub fn write_array<let K: u32>(&mut self, value: [Field; K]) {\n for i in 0..K {\n self.data[i + self.offset] = value[i];\n }\n self.offset += K;\n }\n\n pub fn write_struct<T, let K: u32>(&mut self, value: T, serialize: fn(T) -> [Field; K]) {\n self.write_array(serialize(value));\n }\n\n pub fn write_struct_array<T, let K: u32, let C: u32>(\n &mut self,\n value: [T; C],\n serialize: fn(T) -> [Field; K],\n ) {\n for i in 0..C {\n self.write_struct(value[i], serialize);\n }\n }\n\n pub fn advance_offset(&mut self, offset: u32) {\n self.offset += offset;\n }\n\n pub fn finish(self) -> [Field; N] {\n assert_eq(self.offset, self.data.len(), \"Writer did not write all data\");\n self.data\n }\n}\n"
|
|
3308
3042
|
},
|
|
3309
3043
|
"51": {
|
|
@@ -3313,7 +3047,7 @@
|
|
|
3313
3047
|
"start": 828
|
|
3314
3048
|
}
|
|
3315
3049
|
],
|
|
3316
|
-
"path": "/home/
|
|
3050
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/noir-contracts/contracts/standard/multi_call_entrypoint_contract/src/main.nr",
|
|
3317
3051
|
"source": "// An entrypoint contract that allows all calls to go through.\n//\n// Used for testing and for situations such as account contract self-deployments (when the account's own entrypoint\n// cannot be used because it is not yet deployed).\n//\n// Pair this with SignerlessWallet to perform multiple actions before any account contracts are deployed (and without\n// authentication).\n//\n// Note that this contract should not be grouped with protocol contracts as it is not part of the protocol. We keep\n// it here for now as it allows us to use hardcoded address.\nuse aztec::macros::aztec;\n\n#[aztec]\npub contract MultiCallEntrypoint {\n use aztec::{authwit::entrypoint::app::AppPayload, macros::functions::{allow_phase_change, external}};\n\n #[external(\"private\")]\n #[allow_phase_change]\n fn entrypoint(app_payload: AppPayload) {\n app_payload.execute_calls(self.context);\n }\n}\n"
|
|
3318
3052
|
},
|
|
3319
3053
|
"56": {
|
|
@@ -3327,7 +3061,7 @@
|
|
|
3327
3061
|
"start": 1175
|
|
3328
3062
|
}
|
|
3329
3063
|
],
|
|
3330
|
-
"path": "/home/
|
|
3064
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/authwit/entrypoint/app.nr",
|
|
3331
3065
|
"source": "use crate::{authwit::entrypoint::FunctionCall, context::PrivateContext};\nuse crate::protocol::{\n constants::DOM_SEP__SIGNATURE_PAYLOAD,\n hash::poseidon2_hash_with_separator,\n traits::{Deserialize, Hash, Serialize},\n};\nuse std::meta::derive;\n\nglobal ACCOUNT_MAX_CALLS: u32 = 5;\n\n// @dev: If you change the following struct you have to update:\n// - default_entrypoint.ts\n// - account_entrypoint.ts (specifically `getEntrypointAbi()`)\n// - default_multi_call_entrypoint.ts (specifically `getEntrypointAbi()`)\n#[derive(Deserialize, Serialize)]\npub struct AppPayload {\n function_calls: [FunctionCall; ACCOUNT_MAX_CALLS],\n // A nonce that enables transaction cancellation. When the cancellable flag is enabled, this nonce is used to\n // compute a nullifier that is then emitted. This guarantees that we can cancel the transaction by using the same\n // nonce.\n pub tx_nonce: Field,\n}\n\nimpl Hash for AppPayload {\n fn hash(self) -> Field {\n poseidon2_hash_with_separator(self.serialize(), DOM_SEP__SIGNATURE_PAYLOAD)\n }\n}\n\nimpl AppPayload {\n // Executes all private and public calls\n pub fn execute_calls(self, context: &mut PrivateContext) {\n for call in self.function_calls {\n if !call.target_address.is_zero() {\n if call.is_public {\n context.call_public_function_with_calldata_hash(\n call.target_address,\n call.args_hash,\n call.is_static,\n call.hide_msg_sender,\n );\n } else {\n assert(\n !call.hide_msg_sender,\n \"Incompatible flag. `hide_msg_sender = true` is only available for public calls.\",\n );\n let _result = context.call_private_function_with_args_hash(\n call.target_address,\n call.function_selector,\n call.args_hash,\n call.is_static,\n );\n }\n }\n }\n }\n}\n"
|
|
3332
3066
|
},
|
|
3333
3067
|
"6": {
|
|
@@ -3788,119 +3522,119 @@
|
|
|
3788
3522
|
},
|
|
3789
3523
|
{
|
|
3790
3524
|
"name": "PrivateContext::set_as_fee_payer",
|
|
3791
|
-
"start":
|
|
3525
|
+
"start": 29204
|
|
3792
3526
|
},
|
|
3793
3527
|
{
|
|
3794
3528
|
"name": "PrivateContext::in_revertible_phase",
|
|
3795
|
-
"start":
|
|
3529
|
+
"start": 29394
|
|
3796
3530
|
},
|
|
3797
3531
|
{
|
|
3798
3532
|
"name": "PrivateContext::end_setup",
|
|
3799
|
-
"start":
|
|
3533
|
+
"start": 31706
|
|
3800
3534
|
},
|
|
3801
3535
|
{
|
|
3802
3536
|
"name": "PrivateContext::set_expiration_timestamp",
|
|
3803
|
-
"start":
|
|
3537
|
+
"start": 34971
|
|
3804
3538
|
},
|
|
3805
3539
|
{
|
|
3806
3540
|
"name": "PrivateContext::assert_note_exists",
|
|
3807
|
-
"start":
|
|
3541
|
+
"start": 36366
|
|
3808
3542
|
},
|
|
3809
3543
|
{
|
|
3810
3544
|
"name": "PrivateContext::assert_nullifier_exists",
|
|
3811
|
-
"start":
|
|
3545
|
+
"start": 39002
|
|
3812
3546
|
},
|
|
3813
3547
|
{
|
|
3814
3548
|
"name": "PrivateContext::request_nhk_app",
|
|
3815
|
-
"start":
|
|
3549
|
+
"start": 41099
|
|
3816
3550
|
},
|
|
3817
3551
|
{
|
|
3818
3552
|
"name": "PrivateContext::request_ovsk_app",
|
|
3819
|
-
"start":
|
|
3553
|
+
"start": 42745
|
|
3820
3554
|
},
|
|
3821
3555
|
{
|
|
3822
3556
|
"name": "PrivateContext::request_sk_app",
|
|
3823
|
-
"start":
|
|
3557
|
+
"start": 44466
|
|
3824
3558
|
},
|
|
3825
3559
|
{
|
|
3826
3560
|
"name": "PrivateContext::message_portal",
|
|
3827
|
-
"start":
|
|
3561
|
+
"start": 47771
|
|
3828
3562
|
},
|
|
3829
3563
|
{
|
|
3830
3564
|
"name": "PrivateContext::consume_l1_to_l2_message",
|
|
3831
|
-
"start":
|
|
3565
|
+
"start": 49653
|
|
3832
3566
|
},
|
|
3833
3567
|
{
|
|
3834
3568
|
"name": "PrivateContext::emit_private_log_unsafe",
|
|
3835
|
-
"start":
|
|
3569
|
+
"start": 53772
|
|
3836
3570
|
},
|
|
3837
3571
|
{
|
|
3838
3572
|
"name": "PrivateContext::emit_raw_note_log_unsafe",
|
|
3839
|
-
"start":
|
|
3573
|
+
"start": 55229
|
|
3840
3574
|
},
|
|
3841
3575
|
{
|
|
3842
3576
|
"name": "PrivateContext::emit_contract_class_log",
|
|
3843
|
-
"start":
|
|
3577
|
+
"start": 55837
|
|
3844
3578
|
},
|
|
3845
3579
|
{
|
|
3846
3580
|
"name": "PrivateContext::call_private_function",
|
|
3847
|
-
"start":
|
|
3581
|
+
"start": 60396
|
|
3848
3582
|
},
|
|
3849
3583
|
{
|
|
3850
3584
|
"name": "PrivateContext::static_call_private_function",
|
|
3851
|
-
"start":
|
|
3585
|
+
"start": 61598
|
|
3852
3586
|
},
|
|
3853
3587
|
{
|
|
3854
3588
|
"name": "PrivateContext::call_private_function_no_args",
|
|
3855
|
-
"start":
|
|
3589
|
+
"start": 62613
|
|
3856
3590
|
},
|
|
3857
3591
|
{
|
|
3858
3592
|
"name": "PrivateContext::static_call_private_function_no_args",
|
|
3859
|
-
"start":
|
|
3593
|
+
"start": 63466
|
|
3860
3594
|
},
|
|
3861
3595
|
{
|
|
3862
3596
|
"name": "PrivateContext::call_private_function_with_args_hash",
|
|
3863
|
-
"start":
|
|
3597
|
+
"start": 64444
|
|
3864
3598
|
},
|
|
3865
3599
|
{
|
|
3866
3600
|
"name": "PrivateContext::call_public_function",
|
|
3867
|
-
"start":
|
|
3601
|
+
"start": 68343
|
|
3868
3602
|
},
|
|
3869
3603
|
{
|
|
3870
3604
|
"name": "PrivateContext::static_call_public_function",
|
|
3871
|
-
"start":
|
|
3605
|
+
"start": 69610
|
|
3872
3606
|
},
|
|
3873
3607
|
{
|
|
3874
3608
|
"name": "PrivateContext::call_public_function_no_args",
|
|
3875
|
-
"start":
|
|
3609
|
+
"start": 70629
|
|
3876
3610
|
},
|
|
3877
3611
|
{
|
|
3878
3612
|
"name": "PrivateContext::static_call_public_function_no_args",
|
|
3879
|
-
"start":
|
|
3613
|
+
"start": 71528
|
|
3880
3614
|
},
|
|
3881
3615
|
{
|
|
3882
3616
|
"name": "PrivateContext::call_public_function_with_calldata_hash",
|
|
3883
|
-
"start":
|
|
3617
|
+
"start": 72717
|
|
3884
3618
|
},
|
|
3885
3619
|
{
|
|
3886
3620
|
"name": "PrivateContext::set_public_teardown_function",
|
|
3887
|
-
"start":
|
|
3621
|
+
"start": 75245
|
|
3888
3622
|
},
|
|
3889
3623
|
{
|
|
3890
3624
|
"name": "PrivateContext::set_public_teardown_function_with_calldata_hash",
|
|
3891
|
-
"start":
|
|
3625
|
+
"start": 76516
|
|
3892
3626
|
},
|
|
3893
3627
|
{
|
|
3894
3628
|
"name": "PrivateContext::next_counter",
|
|
3895
|
-
"start":
|
|
3629
|
+
"start": 81920
|
|
3896
3630
|
},
|
|
3897
3631
|
{
|
|
3898
3632
|
"name": "<impl Empty for PrivateContext>::empty",
|
|
3899
|
-
"start":
|
|
3633
|
+
"start": 82089
|
|
3900
3634
|
}
|
|
3901
3635
|
],
|
|
3902
|
-
"path": "/home/
|
|
3903
|
-
"source": "use crate::{\n context::{inputs::PrivateContextInputs, NoteExistenceRequest, NullifierExistenceRequest, ReturnsHash},\n hash::{hash_args, hash_calldata_array},\n keys::constants::{NULLIFIER_INDEX, NUM_KEY_TYPES, OUTGOING_INDEX, public_key_domain_separators},\n messaging::process_l1_to_l2_message,\n oracle::{\n block_header::get_block_header_at,\n call_private_function::call_private_function_internal,\n execution_cache,\n key_validation_request::get_key_validation_request,\n logs::notify_created_contract_class_log,\n notes::notify_nullified_note,\n nullifiers::notify_created_nullifier,\n public_call::assert_valid_public_call_data,\n tx_phase::{is_execution_in_revertible_phase, notify_revertible_phase_start},\n },\n};\nuse crate::logging::aztecnr_trace_log_format;\nuse crate::protocol::{\n abis::{\n block_header::BlockHeader,\n call_context::CallContext,\n function_selector::FunctionSelector,\n gas_settings::GasSettings,\n log_hash::LogHash,\n note_hash::NoteHash,\n nullifier::Nullifier,\n private_call_request::PrivateCallRequest,\n private_circuit_public_inputs::PrivateCircuitPublicInputs,\n private_log::{PrivateLog, PrivateLogData},\n public_call_request::PublicCallRequest,\n validation_requests::{KeyValidationRequest, KeyValidationRequestAndSeparator},\n },\n address::{AztecAddress, EthAddress},\n constants::{\n CONTRACT_CLASS_LOG_SIZE_IN_FIELDS, MAX_CONTRACT_CLASS_LOGS_PER_CALL, MAX_ENQUEUED_CALLS_PER_CALL,\n MAX_KEY_VALIDATION_REQUESTS_PER_CALL, MAX_L2_TO_L1_MSGS_PER_CALL, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL,\n MAX_NOTE_HASHES_PER_CALL, MAX_NULLIFIER_READ_REQUESTS_PER_CALL, MAX_NULLIFIERS_PER_CALL,\n MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL, MAX_PRIVATE_LOGS_PER_CALL, MAX_TX_LIFETIME,\n NULL_MSG_SENDER_CONTRACT_ADDRESS, PRIVATE_LOG_CIPHERTEXT_LEN,\n },\n hash::compute_contract_class_log_hash,\n messaging::l2_to_l1_message::L2ToL1Message,\n side_effect::{Counted, scoped::Scoped},\n traits::{Empty, ToField},\n utils::arrays::{ClaimedLengthArray, trimmed_array_length_hint},\n};\n\n/// # PrivateContext\n///\n/// The **main interface** between an #[external(\"private\")] function and the Aztec blockchain.\n///\n/// An instance of the PrivateContext is initialized automatically at the outset of every private function, within the\n/// #[external(\"private\")] macro, so you'll never need to consciously instantiate this yourself.\n///\n/// The instance is always named `context`, and it is always be available within the body of every\n/// #[external(\"private\")] function in your smart contract.\n///\n/// > For those used to \"vanilla\" Noir, it might be jarring to have access to > `context` without seeing a declaration\n/// `let context = PrivateContext::new(...)` > within the body of your function. This is just a consequence of using >\n/// macros to tidy-up verbose boilerplate. You can use `nargo expand` to > expand all macros, if you dare.\n///\n/// Typical usage for a smart contract developer will be to call getter methods of the PrivateContext.\n///\n/// _Pushing_ data and requests to the context is mostly handled within aztec-nr's own functions, so typically a smart\n/// contract developer won't need to call any setter methods directly.\n///\n/// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n/// find yourself doing this, please > open an issue on GitHub to describe your use case: it might be that > new\n/// functionality should be added to aztec-nr.\n///\n/// ## Responsibilities\n/// - Exposes contextual data to a private function:\n/// - Data relating to how this private function was called.\n/// - msg_sender\n/// - this_address - (the contract address of the private function being executed)\n/// - See `CallContext` for more data.\n/// - Data relating to the transaction in which this private function is being executed.\n/// - chain_id\n/// - version\n/// - gas_settings\n/// - Provides state access:\n/// - Access to the \"Anchor block\" header. Recall, a private function cannot read from the \"current\" block header, but\n/// must read from some historical block header, because as soon as private function execution begins (asynchronously,\n/// on a user's device), the public state of the chain (the \"current state\") will have progressed forward. We call this\n/// reference the \"Anchor block\". See `BlockHeader`.\n/// - Enables consumption of L1->L2 messages.\n/// - Enables calls to functions of other smart contracts:\n/// - Private function calls\n/// - Enqueueing of public function call requests (Since public functions are executed at a later time, by a block\n/// proposer, we say they are \"enqueued\").\n/// - Writes data to the blockchain:\n/// - New notes\n/// - New nullifiers\n/// - Private logs (for sending encrypted note contents or encrypted events)\n/// - New L2->L1 messages.\n/// - Provides args to the private function (handled by the #[external(\"private\")] macro).\n/// - Returns the return values of this private function (handled by the\n/// #[external(\"private\")] macro).\n/// - Makes Key Validation Requests.\n/// - Private functions are not allowed to see master secret keys, because we do not trust them. They are instead given\n/// \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then request validation of\n/// this claim, by making a \"key validation request\" to the protocol's kernel circuits (which _are_ allowed to see\n/// certain master secret keys).\n///\n/// ## Advanced Responsibilities\n///\n/// - Ultimately, the PrivateContext is responsible for constructing the PrivateCircuitPublicInputs of the private\n/// function being executed. All private functions on Aztec must have public inputs which adhere to the rigid layout of\n/// the PrivateCircuitPublicInputs, in order to be compatible with the protocol's kernel circuits. A well-known\n/// misnomer:\n/// - \"public inputs\" contain both inputs and outputs of this function.\n/// - By \"outputs\" we mean a lot more side-effects than just the \"return values\" of the function.\n/// - Most of the so-called \"public inputs\" are kept _private_, and never leak to the outside world, because they are\n/// 'swallowed' by the protocol's kernel circuits before the tx is sent to the network. Only the following are exposed\n/// to the outside world:\n/// - New note_hashes\n/// - New nullifiers\n/// - New private logs\n/// - New L2->L1 messages\n/// - New enqueued public function call requests All the above-listed arrays of side-effects can be padded by the\n/// user's wallet (through instructions to the kernel circuits, via the PXE) to obscure their true lengths.\n///\n/// ## Syntax Justification\n///\n/// Both user-defined functions _and_ most functions in aztec-nr need access to the PrivateContext instance to\n/// read/write data. This is why you'll see the arguably-ugly pervasiveness of the \"context\" throughout your smart\n/// contract and the aztec-nr library. For example, `&mut context` is prevalent. In some languages, you can access and\n/// mutate a global variable (such as a PrivateContext instance) from a function without polluting the function's\n/// parameters. With Noir, a function must explicitly pass control of a mutable variable to another function, by\n/// reference. Since many functions in aztec-nr need to be able to push new data to the PrivateContext, they need to be\n/// handed a mutable reference _to_ the context as a parameter. For example, `Context` is prevalent as a generic\n/// parameter, to give better type safety at compile time. Many `aztec-nr` functions don't make sense if they're called\n/// in a particular runtime (private, public or utility), and so are intentionally only implemented over certain\n/// [Private|Public|Utility]Context structs. This gives smart contract developers a much faster feedback loop if\n/// they're making a mistake, as an error will be thrown by the LSP or when they compile their contract.\n///\n#[derive(Eq)]\npub struct PrivateContext {\n // docs:start:private-context\n inputs: PrivateContextInputs,\n side_effect_counter: u32,\n\n min_revertible_side_effect_counter: u32,\n is_fee_payer: bool,\n\n args_hash: Field,\n return_hash: Field,\n\n pub(crate) expiration_timestamp: u64,\n\n pub(crate) note_hash_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL>,\n pub(crate) nullifier_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NULLIFIER_READ_REQUESTS_PER_CALL>,\n key_validation_requests_and_separators: BoundedVec<KeyValidationRequestAndSeparator, MAX_KEY_VALIDATION_REQUESTS_PER_CALL>,\n\n pub(crate) note_hashes: BoundedVec<Counted<NoteHash>, MAX_NOTE_HASHES_PER_CALL>,\n pub(crate) nullifiers: BoundedVec<Counted<Nullifier>, MAX_NULLIFIERS_PER_CALL>,\n\n pub(crate) private_call_requests: BoundedVec<PrivateCallRequest, MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL>,\n public_call_requests: BoundedVec<Counted<PublicCallRequest>, MAX_ENQUEUED_CALLS_PER_CALL>,\n public_teardown_call_request: PublicCallRequest,\n l2_to_l1_msgs: BoundedVec<Counted<L2ToL1Message>, MAX_L2_TO_L1_MSGS_PER_CALL>,\n // docs:end:private-context\n\n // Header of a block whose state is used during private execution (not the block the transaction is included in).\n pub(crate) anchor_block_header: BlockHeader,\n\n private_logs: BoundedVec<Counted<PrivateLogData>, MAX_PRIVATE_LOGS_PER_CALL>,\n contract_class_logs_hashes: BoundedVec<Counted<LogHash>, MAX_CONTRACT_CLASS_LOGS_PER_CALL>,\n\n // Contains the last key validation request for each key type. This is used to cache the last request and avoid\n // fetching the same request multiple times. The index of the array corresponds to the key type (0 nullifier, 1\n // incoming, 2 outgoing, 3 tagging).\n last_key_validation_requests: [Option<KeyValidationRequest>; NUM_KEY_TYPES],\n\n expected_non_revertible_side_effect_counter: u32,\n expected_revertible_side_effect_counter: u32,\n}\n\nimpl PrivateContext {\n pub fn new(inputs: PrivateContextInputs, args_hash: Field) -> PrivateContext {\n PrivateContext {\n inputs,\n side_effect_counter: inputs.start_side_effect_counter + 1,\n min_revertible_side_effect_counter: 0,\n is_fee_payer: false,\n args_hash,\n return_hash: 0,\n expiration_timestamp: inputs.anchor_block_header.timestamp() + MAX_TX_LIFETIME,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n anchor_block_header: inputs.anchor_block_header,\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n\n /// Returns the contract address that initiated this function call.\n ///\n /// This is similar to `msg.sender` in Solidity (hence the name).\n ///\n /// Important Note: Since Aztec doesn't have a concept of an EoA (Externally-owned Account), the msg_sender is\n /// \"none\" for the first function call of every transaction. The first function call of a tx is likely to be a call\n /// to the user's account contract, so this quirk will most often be handled by account contract developers.\n ///\n /// # Returns\n /// * `Option<AztecAddress>` - The address of the smart contract that called this function (be it an app contract\n /// or a user's account contract). Returns `Option<AztecAddress>::none` for the first function call of the tx. No\n /// other _private_ function calls in the tx will have a `none` msg_sender, but _public_ function calls might (see\n /// the PublicContext).\n pub fn maybe_msg_sender(self) -> Option<AztecAddress> {\n let maybe_msg_sender = self.inputs.call_context.msg_sender;\n if maybe_msg_sender == NULL_MSG_SENDER_CONTRACT_ADDRESS {\n Option::none()\n } else {\n Option::some(maybe_msg_sender)\n }\n }\n\n /// Returns the contract address of the current function being executed.\n ///\n /// This is equivalent to `address(this)` in Solidity (hence the name). Use this to identify the current contract's\n /// address, commonly needed for access control or when interacting with other contracts.\n ///\n /// # Returns\n /// * `AztecAddress` - The contract address of the current function being executed.\n ///\n pub fn this_address(self) -> AztecAddress {\n self.inputs.call_context.contract_address\n }\n\n /// Returns the chain ID of the current network.\n ///\n /// This is similar to `block.chainid` in Solidity. Returns the unique identifier for the blockchain network this\n /// transaction is executing on.\n ///\n /// Helps prevent cross-chain replay attacks. Useful if implementing multi-chain contract logic.\n ///\n /// # Returns\n /// * `Field` - The chain ID as a field element\n ///\n pub fn chain_id(self) -> Field {\n self.inputs.tx_context.chain_id\n }\n\n /// Returns the Aztec protocol version that this transaction is executing under. Different versions may have\n /// different rules, opcodes, or cryptographic primitives.\n ///\n /// This is similar to how Ethereum has different EVM versions.\n ///\n /// Useful for forward/backward compatibility checks\n ///\n /// Not to be confused with contract versions; this is the protocol version.\n ///\n /// # Returns\n /// * `Field` - The protocol version as a field element\n ///\n pub fn version(self) -> Field {\n self.inputs.tx_context.version\n }\n\n /// Returns the gas settings for the current transaction.\n ///\n /// This provides information about gas limits and pricing for the transaction, similar to `tx.gasprice` and gas\n /// limits in Ethereum. However, Aztec has a more sophisticated gas model with separate accounting for L2\n /// computation and data availability (DA) costs.\n ///\n /// # Returns\n /// * `GasSettings` - Struct containing gas limits and fee information\n ///\n pub fn gas_settings(self) -> GasSettings {\n self.inputs.tx_context.gas_settings\n }\n\n /// Returns the function selector of the currently executing function.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to access this.\n ///\n /// This is similar to `msg.sig` in Solidity, which returns the first 4 bytes of the function signature. In Aztec,\n /// the selector uniquely identifies which function within the contract is being called.\n ///\n /// # Returns\n /// * `FunctionSelector` - The 4-byte function identifier\n ///\n /// # Advanced\n /// Only #[external(\"private\")] functions have a function selector as a protocol- enshrined concept. The function\n /// selectors of private functions are baked into the preimage of the contract address, and are used by the\n /// protocol's kernel circuits to identify each private function and ensure the correct one is being executed.\n ///\n /// Used internally for function dispatch and call verification.\n ///\n pub fn selector(self) -> FunctionSelector {\n self.inputs.call_context.function_selector\n }\n\n /// Returns whether this call is being executed as part of a static call.\n ///\n /// Similar to Solidity's `STATICCALL`, a static call is read-only: neither this function nor any of its nested\n /// calls may emit side-effects (new notes, nullifiers, logs, L2->L1 messages, etc.). A call is considered static\n /// if it was invoked as a static call or if any of its ancestor calls were.\n ///\n /// # Returns\n /// * `bool` - `true` if this call (or an ancestor call) is a static call.\n ///\n pub fn is_static_call(self) -> bool {\n self.inputs.call_context.is_static_call\n }\n\n /// Returns the hash of the arguments passed to the current function.\n ///\n /// Very low-level function: You shouldn't need to call this. The #[external(\"private\")] macro calls this, and it\n /// makes the arguments neatly available to the body of your private function.\n ///\n /// # Returns\n /// * `Field` - Hash of the function arguments\n ///\n /// # Advanced\n /// * Arguments are hashed to reduce proof size and verification time\n /// * Enables efficient argument passing in recursive function calls\n /// * The hash can be used to retrieve the original arguments from the PXE.\n ///\n pub fn get_args_hash(self) -> Field {\n self.args_hash\n }\n\n /// Returns the current value of the side-effect counter, i.e. the counter that will be assigned to the next\n /// side-effect emitted by this function.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to access this. See `next_counter` for\n /// details on how side-effect counters are assigned and why they exist.\n ///\n /// # Returns\n /// * `u32` - The current side-effect counter.\n ///\n pub fn get_side_effect_counter(self) -> u32 {\n self.side_effect_counter\n }\n\n /// Pushes a new note_hash to the Aztec blockchain's global Note Hash Tree (a state tree).\n ///\n /// A note_hash is a commitment to a piece of private state.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to manually call this. Aztec-nr's state\n /// variables (see `../state_vars/`) are designed to understand when to create and push new note hashes.\n ///\n /// # Arguments\n /// * `note_hash` - The new note_hash.\n ///\n /// # Advanced\n /// From here, the protocol's kernel circuits will take over and insert the note_hash into the protocol's \"note\n /// hash tree\" (in the Base Rollup circuit). Before insertion, the protocol will:\n /// - \"Silo\" the `note_hash` with the contract address of this function, to yield a `siloed_note_hash`. This\n /// prevents state collisions between different smart contracts.\n /// - Ensure uniqueness of the `siloed_note_hash`, to prevent Faerie-Gold attacks, by hashing the\n /// `siloed_note_hash` with a unique value, to yield a `unique_siloed_note_hash` (see the protocol spec for more).\n ///\n /// In addition to calling this function, aztec-nr provides the contents of the newly-created note to the PXE, via\n /// the `notify_created_note` oracle.\n ///\n /// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n /// find yourself doing this, > please open an issue on GitHub to describe your use case: it might be > that new\n /// functionality should be added to aztec-nr.\n ///\n pub fn push_note_hash(&mut self, note_hash: Field) {\n self.note_hashes.push(Counted::new(note_hash, self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::state_vars::SingleUseClaim`].\n ///\n /// In particular, callers must ensure all nullifiers created by a contract are properly domain-separated, so that\n /// unrelated components don't interfere with one another (e.g. a transaction nullifier accidentally marking a\n /// variable as initialized). Only [`PrivateContext::push_nullifier_for_note_hash`] should be used for note\n /// nullifiers, never this one.\n ///\n /// ## Advanced\n ///\n /// The raw `nullifier` is not what is inserted into the Aztec state tree: it will be first siloed by contract\n /// address via [`crate::protocol::hash::compute_siloed_nullifier`] in order to prevent accidental or malicious\n /// interference of nullifiers from different contracts.\n pub fn push_nullifier_unsafe(&mut self, nullifier: Field) {\n notify_created_nullifier(nullifier);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: 0 }.count(self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier) associated with a note.\n ///\n /// This is a variant of [`PrivateContext::push_nullifier_unsafe`] that is used for note nullifiers, i.e.\n /// nullifiers that correspond to a note. If a note and its nullifier are created in the same transaction, then\n /// the private kernels will 'squash' these values, deleting them both as if they never existed and reducing\n /// transaction fees.\n ///\n /// The `nullification_note_hash` must be the result of calling\n /// [`crate::note::utils::compute_confirmed_note_hash_for_nullification`] for pending notes, and `0` for settled\n /// notes (which cannot be squashed).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::note::lifecycle::destroy_note`].\n ///\n /// The precautions listed for [`PrivateContext::push_nullifier_unsafe`] apply here as well, and callers should\n /// additionally ensure `nullification_note_hash` corresponds to a note emitted by this contract, with its hash\n /// computed in the same transaction execution phase as the call to this function. Finally, only this function\n /// should be used for note nullifiers, never [`PrivateContext::push_nullifier_unsafe`].\n ///\n /// Failure to do these things can result in unprovable contexts, accidental deletion of notes, or double-spend\n /// attacks.\n pub fn push_nullifier_for_note_hash(&mut self, nullifier: Field, nullification_note_hash: Field) {\n let nullifier_counter = self.next_counter();\n notify_nullified_note(nullifier, nullification_note_hash, nullifier_counter);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: nullification_note_hash }.count(\n nullifier_counter,\n ));\n }\n\n /// Returns the anchor block header - the historical block header that this private function is reading from.\n ///\n /// A private function CANNOT read from the \"current\" block header, but must read from some older block header,\n /// because as soon as private function execution begins (asynchronously, on a user's device), the public state of\n /// the chain (the \"current state\") will have progressed forward.\n ///\n /// # Returns\n /// * `BlockHeader` - The anchor block header.\n ///\n /// # Advanced\n /// * All private functions of a tx read from the same anchor block header.\n /// * The protocol asserts that the `expiration_timestamp` of every tx is at most 24 hours beyond the timestamp of\n /// the tx's chosen anchor block header. This enables the network's nodes to safely prune old txs from the mempool.\n /// Therefore, the chosen block header _must_ be one from within the last 24 hours.\n ///\n pub fn get_anchor_block_header(self) -> BlockHeader {\n self.anchor_block_header\n }\n\n /// Returns the header of any historical block at or before the anchor block.\n ///\n /// This enables private contracts to access information from even older blocks than the anchor block header.\n ///\n /// Useful for time-based contract logic that needs to compare against multiple historical points.\n ///\n /// # Arguments\n /// * `block_number` - The block number to retrieve (must be <= anchor block number)\n ///\n /// # Returns\n /// * `BlockHeader` - The header of the requested historical block\n ///\n /// # Advanced\n /// This function uses an oracle to fetch block header data from the user's PXE. Depending on how much blockchain\n /// data the user's PXE has been set up to store, this might require a query from the PXE to another Aztec node to\n /// get the data. > This is generally true of all oracle getters (see `../oracle`).\n ///\n /// Each block header gets hashed and stored as a leaf in the protocol's Archive Tree. In fact, the i-th block\n /// header gets stored at the i-th leaf index of the Archive Tree. Behind the scenes, this `get_block_header_at`\n /// function will add Archive Tree merkle-membership constraints (~3k) to your smart contract function's circuit,\n /// to prove existence of the block header in the Archive Tree.\n ///\n /// Note: we don't do any caching, so avoid making duplicate calls for the same block header, because each call\n /// will add duplicate constraints.\n ///\n /// Calling this function is more expensive (constraint-wise) than getting the anchor block header (via\n /// `get_block_header`). This is because the anchor block's merkle membership proof is handled by Aztec's protocol\n /// circuits, and is only performed once for the entire tx because all private functions of a tx share a common\n /// anchor block header. Therefore, the cost (constraint-wise) of calling `get_block_header` is effectively free.\n ///\n pub fn get_block_header_at(self, block_number: u32) -> BlockHeader {\n get_block_header_at(block_number, self)\n }\n\n /// Sets the hash of the return values for this private function.\n ///\n /// Very low-level function: this is called by the #[external(\"private\")] macro.\n ///\n /// # Arguments\n /// * `serialized_return_values` - The serialized return values as a field array\n ///\n pub fn set_return_hash<let N: u32>(&mut self, serialized_return_values: [Field; N]) {\n let return_hash = hash_args(serialized_return_values);\n self.return_hash = return_hash;\n execution_cache::store(serialized_return_values, return_hash);\n }\n\n /// Builds the PrivateCircuitPublicInputs for this private function, to ensure compatibility with the protocol's\n /// kernel circuits.\n ///\n /// Very low-level function: This function is automatically called by the #[external(\"private\")] macro.\n pub fn finish(self) -> PrivateCircuitPublicInputs {\n PrivateCircuitPublicInputs {\n call_context: self.inputs.call_context,\n args_hash: self.args_hash,\n returns_hash: self.return_hash,\n min_revertible_side_effect_counter: self.min_revertible_side_effect_counter,\n is_fee_payer: self.is_fee_payer,\n expiration_timestamp: self.expiration_timestamp,\n note_hash_read_requests: ClaimedLengthArray::from_bounded_vec(self.note_hash_read_requests),\n nullifier_read_requests: ClaimedLengthArray::from_bounded_vec(self.nullifier_read_requests),\n key_validation_requests_and_separators: ClaimedLengthArray::from_bounded_vec(\n self.key_validation_requests_and_separators,\n ),\n note_hashes: ClaimedLengthArray::from_bounded_vec(self.note_hashes),\n nullifiers: ClaimedLengthArray::from_bounded_vec(self.nullifiers),\n private_call_requests: ClaimedLengthArray::from_bounded_vec(self.private_call_requests),\n public_call_requests: ClaimedLengthArray::from_bounded_vec(self.public_call_requests),\n public_teardown_call_request: self.public_teardown_call_request,\n l2_to_l1_msgs: ClaimedLengthArray::from_bounded_vec(self.l2_to_l1_msgs),\n start_side_effect_counter: self.inputs.start_side_effect_counter,\n end_side_effect_counter: self.side_effect_counter,\n private_logs: ClaimedLengthArray::from_bounded_vec(self.private_logs),\n contract_class_logs_hashes: ClaimedLengthArray::from_bounded_vec(self.contract_class_logs_hashes),\n anchor_block_header: self.anchor_block_header,\n tx_context: self.inputs.tx_context,\n expected_non_revertible_side_effect_counter: self.expected_non_revertible_side_effect_counter,\n expected_revertible_side_effect_counter: self.expected_revertible_side_effect_counter,\n tx_request_salt: self.inputs.tx_request_salt,\n }\n }\n\n /// Designates this contract as the fee payer for the transaction.\n ///\n /// Unlike Ethereum, where the transaction sender always pays fees, Aztec allows any contract to voluntarily pay\n /// transaction fees. This enables patterns like sponsored transactions or fee abstraction where users don't need\n /// to hold fee-juice themselves. (Fee juice is a fee-paying asset for Aztec).\n ///\n /// Only one contract per transaction can declare itself as the fee payer, and it must have sufficient fee-juice\n /// balance (>= the gas limits specified in the TxContext) by the time we reach the public setup phase of the tx.\n ///\n /// The fee payer must be elected during the setup (non-revertible) phase, i.e. before\n /// [`end_setup`](PrivateContext::end_setup) is called - this function asserts so. This is because any compensation\n /// collected by the fee payer during the revertible phase can be discarded if a public call later reverts, while\n /// the protocol still debits the fee payer's fee-juice balance. Note that `end_setup` does not need to be called\n /// by the electing function itself: it can be called later in the transaction (e.g. by the fee-juice contract when\n /// claiming fee juice that pays for the very same transaction).\n pub fn set_as_fee_payer(&mut self) {\n assert(!self.in_revertible_phase(), \"fee payer must be elected during the setup phase\");\n aztecnr_trace_log_format!(\"Setting {0} as fee payer\")([self.this_address().to_field()]);\n self.is_fee_payer = true;\n }\n\n /// Returns whether execution is currently in the revertible (app) phase of the transaction.\n ///\n /// A transaction is in the revertible phase if [`end_setup`](PrivateContext::end_setup) has already been called -\n /// potentially by a different function of the same transaction.\n pub fn in_revertible_phase(&mut self) -> bool {\n let current_counter = self.side_effect_counter;\n\n // Safety: Kernel will validate that the claim is correct by validating the expected counters.\n let is_revertible = unsafe { is_execution_in_revertible_phase(current_counter) };\n\n if is_revertible {\n if (self.expected_revertible_side_effect_counter == 0)\n | (current_counter < self.expected_revertible_side_effect_counter) {\n self.expected_revertible_side_effect_counter = current_counter;\n }\n } else if current_counter > self.expected_non_revertible_side_effect_counter {\n self.expected_non_revertible_side_effect_counter = current_counter;\n }\n\n is_revertible\n }\n\n /// Declares the end of the \"setup phase\" of this tx.\n ///\n /// Only one function per tx can declare the end of the setup phase.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase enables such a payment to be made, because the setup phase _cannot revert_: a reverting function within\n /// the setup phase would result in an invalid block which cannot be proven. Any side-effects generated during that\n /// phase are guaranteed to be inserted into Aztec's state trees (except for squashed notes & nullifiers, of\n /// course).\n ///\n /// Even though the end of the setup phase is declared within a private function, you might have noticed that\n /// _public_ functions can also execute within the setup phase. This is because any public function calls which\n /// were enqueued _within the setup phase_ by a private function are considered part of the setup phase.\n ///\n /// # Advanced\n /// * Sets the minimum revertible side effect counter of this tx to be the PrivateContext's _current_ side effect\n /// counter.\n ///\n pub fn end_setup(&mut self) {\n // We bump the counter twice: once so that `min_revertible_side_effect_counter` sits strictly above any\n // non-revertible side effect counter (including queries made via `in_revertible_phase` before this call), and\n // once more so that the next revertible side effect counter is strictly greater than\n // `min_revertible_side_effect_counter`. This ensures `min_revertible_side_effect_counter` occupies a gap that\n // no side effect takes, which the kernel relies on when validating the phase split.\n self.side_effect_counter += 1;\n self.min_revertible_side_effect_counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n\n aztecnr_trace_log_format!(\n \"Ending setup, minimum revertible side effect counter is {0}\",\n )(\n [self.min_revertible_side_effect_counter as Field],\n );\n notify_revertible_phase_start(self.min_revertible_side_effect_counter);\n }\n\n /// Sets a deadline (an \"include-by timestamp\") for when this transaction must be included in a block.\n ///\n /// Other functions in this tx might call this setter with differing values for the include-by timestamp. To ensure\n /// that all functions' deadlines are met, the _minimum_ of all these include-by timestamps will be exposed when\n /// this tx is submitted to the network.\n ///\n /// If the transaction is not included in a block by its include-by timestamp, it becomes invalid and it will never\n /// be included.\n ///\n /// This expiry timestamp is publicly visible. See the \"Advanced\" section for privacy concerns.\n ///\n /// # Arguments\n /// * `expiration_timestamp` - Unix timestamp (seconds) deadline for inclusion. The include-by timestamp of this tx\n /// will be _at most_ the timestamp specified.\n ///\n /// # Advanced\n /// * If multiple functions set differing `expiration_timestamp`s, the kernel circuits will set it to be the\n /// _minimum_ of the two. This ensures the tx expiry requirements of all functions in the tx are met.\n /// * Rollup circuits will reject expired txs.\n /// * The protocol enforces that all transactions must be included within 24 hours of their chosen anchor block's\n /// timestamp, to enable safe mempool pruning.\n /// * The DelayedPublicMutable design makes heavy use of this functionality, to enable private functions to read\n /// public state.\n /// * A sophisticated Wallet should cleverly set an include-by timestamp to improve the privacy of the user and the\n /// network as a whole. For example, if a contract interaction sets include-by to some publicly-known value (e.g.\n /// the time when a contract upgrades), then the wallet might wish to set an even lower one to avoid revealing that\n /// this tx is interacting with said contract. Ideally, all wallets should standardize on an approach in order to\n /// provide users with a large privacy set -- although the exact approach\n /// will need to be discussed. Wallets that deviate from a standard might accidentally reveal which wallet each\n /// transaction originates from.\n ///\n // docs:start:expiration-timestamp\n pub fn set_expiration_timestamp(&mut self, expiration_timestamp: u64) {\n // docs:end:expiration-timestamp\n self.expiration_timestamp = std::cmp::min(self.expiration_timestamp, expiration_timestamp);\n }\n\n /// Asserts that a note has been created.\n ///\n /// This function will cause the transaction to fail unless the requested note exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending notes.\n ///\n /// ## Pending Notes\n ///\n /// Both settled notes (created in prior transactions) and pending notes (created in the current transaction) will\n /// be considered by this function. Pending notes must have been created **before** this call is made for the check\n /// to pass.\n ///\n /// ## Historical Notes\n ///\n /// If you need to assert that a note existed _by some specific block in the past_, instead of simply proving that\n /// it exists by the current anchor block, use [`crate::history::note::assert_note_existed_by`] instead.\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel note hash read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_note_exists(&mut self, note_existence_request: NoteExistenceRequest) {\n // Note that the `note_hash_read_requests` array does not hold `NoteExistenceRequest` objects, but rather a\n // custom kernel type. We convert from the aztec-nr type into it.\n\n let note_hash = note_existence_request.note_hash();\n let contract_address = note_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let side_effect = Scoped::new(\n Counted::new(note_hash, self.next_counter()),\n contract_address,\n );\n\n self.note_hash_read_requests.push(side_effect);\n }\n\n /// Asserts that a nullifier has been emitted.\n ///\n /// This function will cause the transaction to fail unless the requested nullifier exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending nullifiers.\n ///\n /// ## Pending Nullifiers\n ///\n /// Both settled nullifiers (emitted in prior transactions) and pending nullifiers (emitted in the current\n /// transaction) will be considered by this function. Pending nullifiers must have been emitted **before** this\n /// call is made for the check to pass.\n ///\n /// ## Historical Nullifiers\n ///\n /// If you need to assert that a nullifier existed _by some specific block in the past_, instead of simply proving\n /// that it exists by the current anchor block, use [`crate::history::nullifier::assert_nullifier_existed_by`]\n /// instead.\n ///\n /// ## Public vs Private\n ///\n /// In general, it is unsafe to check for nullifier non-existence in private, as that will not consider the\n /// possibility of the nullifier having been emitted in any transaction between the anchor block and the inclusion\n /// block. Private functions instead prove existence via this function and 'prove' non-existence by _emitting_ the\n /// nullifer, which would cause the transaction to fail if the nullifier existed.\n ///\n /// This is not the case in public functions, which do have access to the tip of the blockchain and so can reliably\n /// prove whether a nullifier exists or not via\n /// [`crate::context::public_context::PublicContext::nullifier_exists_unsafe`].\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel nullifier read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_nullifier_exists(&mut self, nullifier_existence_request: NullifierExistenceRequest) {\n let nullifier = nullifier_existence_request.nullifier();\n let contract_address = nullifier_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let request = Scoped::new(\n Counted::new(nullifier, self.next_counter()),\n contract_address,\n );\n\n self.nullifier_read_requests.push(request);\n }\n\n /// Requests the app-siloed nullifier hiding key (nhk_app) for the given (hashed) master nullifier public key\n /// (npk_m), from the user's PXE.\n ///\n /// Advanced function: Only needed if you're designing your own notes and/or nullifiers.\n ///\n /// Contracts are not allowed to compute nullifiers for other contracts, as that would let them read parts of their\n /// private state. Because of this, a contract is only given an \"app-siloed key\", which is constructed by\n /// hashing the user's master nullifier hiding key with the contract's address. However, because contracts cannot\n /// be trusted with a user's master nullifier hiding key (because we don't know which contracts are honest or\n /// malicious), the PXE refuses to provide any master secret keys to any app smart contract function. This means\n /// app functions are unable to prove that the derivation of an app-siloed nullifier hiding key has been computed\n /// correctly. Instead, an app function can request to the kernel (via `request_nhk_app`) that it validates the\n /// siloed derivation, since the kernel has been vetted to not leak any master secret keys.\n ///\n /// A common nullification scheme is to inject a nullifier hiding key into the preimage of a nullifier, to make the\n /// nullifier deterministic but random-looking. This function enables that flow.\n ///\n /// # Arguments\n /// * `npk_m_hash` - A hash of the master nullifier public key of the user whose PXE is executing this function.\n ///\n /// # Returns\n /// * The app-siloed nullifier hiding key that corresponds to the given `npk_m_hash`.\n ///\n pub fn request_nhk_app(&mut self, npk_m_hash: Field) -> Field {\n self.request_sk_app(npk_m_hash, NULLIFIER_INDEX)\n }\n\n /// Requests the app-siloed outgoing viewing secret key (ovsk_app) for the given (hashed) master outgoing\n /// viewing public key (ovpk_m), from the user's PXE.\n ///\n /// See `request_nhk_app` and `request_sk_app` for more info.\n ///\n /// The intention of the \"outgoing\" keypair is to provide a second secret key for all of a user's outgoing activity\n /// (i.e. for notes that a user creates, as opposed to notes that a user receives from others). The separation of\n /// incoming and outgoing data was a distinction made by zcash, with the intention of enabling a user to optionally\n /// share with a 3rd party a controlled view of only incoming or outgoing notes. Similar functionality of sharing\n /// select data can be achieved with offchain zero-knowledge proofs. It is up to an app developer whether they\n /// choose to make use of a user's outgoing keypair within their application logic, or instead simply use the same\n /// keypair (the address keypair (which is effectively the same as the \"incoming\" keypair)) for all incoming &\n /// outgoing messages to a user.\n ///\n /// Currently, all of the exposed encryption functions in aztec-nr ignore the outgoing viewing keys, and instead\n /// encrypt all note logs and event logs to a user's address public key.\n ///\n /// # Arguments\n /// * `ovpk_m_hash` - Hash of the outgoing viewing public key master\n ///\n /// # Returns\n /// * The application-specific outgoing viewing secret key\n ///\n pub fn request_ovsk_app(&mut self, ovpk_m_hash: Field) -> Field {\n self.request_sk_app(ovpk_m_hash, OUTGOING_INDEX)\n }\n\n /// Pushes a Key Validation Request to the kernel.\n ///\n /// Private functions are not allowed to see a user's master secret keys, because we do not trust them. They are\n /// instead given \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then\n /// request validation of this claim, by making a \"key validation request\" to the protocol's kernel circuits (which\n /// _are_ allowed to see certain master secret keys).\n ///\n /// The app circuit only sees `pk_m_hash` (not the raw point). The kernel derives the\n /// point from `sk_m`, hashes it, and asserts equality. When a Key Validation Request tuple of\n /// (sk_app, pk_m_hash, app_address) is submitted to the kernel, it performs the following\n /// derivations to validate the relationship between the claimed sk_app and the user's pk_m_hash:\n ///\n /// (sk_m) ----> * G ----> pk_m ----> hash_public_key(pk_m)\n /// | |\n /// v | We use the kernel to prove this\n /// h(sk_m, app_address) | sk_app-pk_m_hash relationship, because app\n /// | | circuits must not be trusted to see sk_m.\n /// v |\n /// sk_app - - - - - - - - - - - - - - - - - -\n ///\n /// The function is named \"request_\" instead of \"get_\" to remind the user that a Key Validation Request will be\n /// emitted to the kernel.\n ///\n fn request_sk_app(&mut self, pk_m_hash: Field, key_index: Field) -> Field {\n // Match against the cache only when a request is actually present in the slot.\n let cached_slot = self.last_key_validation_requests[key_index as u32];\n let cache_hit = cached_slot.is_some() & (cached_slot.unwrap_unchecked().pk_m_hash == pk_m_hash);\n\n if cache_hit {\n // We get a match so the cached request is the latest one\n cached_slot.unwrap_unchecked().sk_app\n } else {\n // We didn't get a match meaning the cached result is stale. Typically we'd validate keys by showing that\n // the master secret key derives to a public key matching `pk_m_hash`, but that'd require the oracle\n // returning the master secret keys, which could cause malicious contracts to leak it or learn about\n // secrets from other contracts. We therefore silo secret keys, and rely on the private kernel to validate\n // that the siloed secret key corresponds to correct siloing of the master secret key that hashes to\n // `pk_m_hash`.\n\n // Safety: Kernels verify that the key validation request is valid and below we verify that a request for\n // the correct public key has been received.\n let request = unsafe { get_key_validation_request(pk_m_hash, key_index) };\n assert_eq(request.pk_m_hash, pk_m_hash, \"Obtained key validation request for wrong pk_m_hash\");\n\n self.key_validation_requests_and_separators.push(\n KeyValidationRequestAndSeparator {\n request,\n key_type_domain_separator: public_key_domain_separators[key_index as u32],\n },\n );\n self.last_key_validation_requests[key_index as u32] = Option::some(request);\n request.sk_app\n }\n }\n\n /// Sends an \"L2 -> L1 message\" from this function (Aztec, L2) to a smart contract on Ethereum (L1). L1 contracts\n /// which are designed to send/receive messages to/from Aztec are called \"Portal Contracts\".\n ///\n /// Common use cases include withdrawals, cross-chain asset transfers, and triggering L1 actions based on L2 state\n /// changes.\n ///\n /// The message will be inserted into an Aztec \"Outbox\" contract on L1, when this transaction's block is proposed\n /// to L1. Sending the message will not result in any immediate state changes in the target portal contract. The\n /// message will need to be manually consumed from the Outbox through a separate Ethereum transaction: a user will\n /// need to call a function of the portal contract -- a function specifically designed to make a call to the Outbox\n /// to consume the message. The message will only be available for consumption once the _epoch_ proof has been\n /// submitted. Given that there are multiple Aztec blocks within an epoch, it might take some time for this epoch\n /// proof to be submitted -- especially if the block was near the start of an epoch.\n ///\n /// # Arguments\n /// * `recipient` - Ethereum address that will receive the message\n /// * `content` - Message content (32 bytes as a Field element). This content has a very\n /// specific layout. docs:start:context_message_portal\n pub fn message_portal(&mut self, recipient: EthAddress, content: Field) {\n let message = L2ToL1Message { recipient, content };\n self.l2_to_l1_msgs.push(message.count(self.next_counter()));\n }\n\n /// Consumes a message sent from Ethereum (L1) to Aztec (L2).\n ///\n /// Common use cases include token bridging, cross-chain governance, and triggering L2 actions based on L1 events.\n ///\n /// Use this function if you only want the message to ever be \"referred to\" once. Once consumed using this method,\n /// the message cannot be consumed again, because a nullifier is emitted. If your use case wants for the message to\n /// be read unlimited times, then you can always read any historic message from the L1-to-L2 messages tree;\n /// messages never technically get deleted from that tree.\n ///\n /// The message will first be inserted into an Aztec \"Inbox\" smart contract on L1. Sending the message will not\n /// result in any immediate state changes in the target L2 contract. The message will need to be manually consumed\n /// by the target contract through a separate Aztec transaction. The message will not be available for consumption\n /// immediately. Messages get copied over from the L1 Inbox to L2 by the next Proposer in batches. So you will need\n /// to wait until the messages are copied before you can consume them.\n ///\n /// # Arguments\n /// * `content` - The message content that was sent from L1\n /// * `secret` - Secret fields used for message privacy (if needed)\n /// * `sender` - Ethereum address that sent the message\n /// * `leaf_index` - Index of the message in the L1-to-L2 message tree\n ///\n /// # Advanced\n /// Validates message existence in the L1-to-L2 message tree and nullifies the message to prevent\n /// double-consumption.\n pub fn consume_l1_to_l2_message<let N: u32>(\n &mut self,\n content: Field,\n secret: [Field; N],\n sender: EthAddress,\n leaf_index: Field,\n ) {\n let nullifier = process_l1_to_l2_message(\n self.anchor_block_header.state.l1_to_l2_message_tree.root,\n self.this_address(),\n sender,\n self.chain_id(),\n self.version(),\n content,\n secret,\n leaf_index,\n );\n\n // Push nullifier (and the \"commitment\" corresponding to this can be \"empty\")\n self.push_nullifier_unsafe(nullifier)\n }\n\n /// Emits a private log (an array of Fields) that will be published to an Ethereum blob.\n ///\n /// Private logs are intended for the broadcasting of ciphertexts: that is, encrypted events or encrypted note\n /// contents. Since the data in the logs is meant to be _encrypted_, private_logs are broadcast to publicly-visible\n /// Ethereum blobs. The intended recipients of such encrypted messages can then discover and decrypt these\n /// encrypted logs using their viewing secret key. (See `../messages/discovery` for more details).\n ///\n /// Important note: This function DOES NOT _do_ any encryption of the input `log` fields. This function blindly\n /// publishes whatever input `log` data is fed into it, so the caller of this function should have already\n /// performed the encryption, and the `log` should be the result of that encryption.\n ///\n /// The protocol does not dictate what encryption scheme should be used: a smart contract developer can choose\n /// whatever encryption scheme they like. Aztec-nr includes some off-the-shelf encryption libraries that developers\n /// might wish to use, for convenience. These libraries not only encrypt a plaintext (to produce a ciphertext);\n /// they also prepend the ciphertext with a `tag` and `ephemeral public key` for easier message discovery. This is\n /// a very dense topic, and we will be writing more libraries and docs soon.\n ///\n /// > Currently, AES128 CBC encryption is the main scheme included in > aztec.nr. > We are currently making\n /// significant changes to the interfaces of the > encryption library.\n ///\n /// In some niche use cases, an app might be tempted to publish _un-encrypted_ data via a private log, because\n /// _public logs_ are not available to private functions. Be warned that emitting public data via private logs is\n /// strongly discouraged, and is considered a \"privacy anti-pattern\", because it reveals identifiable information\n /// about _which_ function has been executed. A tx which leaks such information does not contribute to the privacy\n /// set of the network.\n ///\n /// * Unlike `emit_raw_note_log_unsafe`, this log is not tied to any specific note\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]` of the emitted log. Used by recipients and nodes to identify and\n /// filter for relevant logs without scanning all of them.\n /// * `log` - The log data that will be publicly broadcast (so make sure it's already been encrypted before you\n /// call this function). Private logs are bounded in size (`PRIVATE_LOG_CIPHERTEXT_LEN`), to encourage all logs\n /// from all smart contracts look identical. The protocol's kernel circuits can then append random fields as\n /// \"padding\" after the log's length, so that the logs of this smart contract look indistinguishable from (the\n /// same length as) the logs of all other applications. It's up to wallets how much padding to apply, so\n /// ideally all wallets should agree on standards for this.\n ///\n /// ## Safety\n ///\n /// The `tag` should be domain-separated (e.g. via [`crate::protocol::hash::compute_log_tag`]) to prevent\n /// collisions between logs from different sources. Without domain separation, two unrelated log types that\n /// happen to share a raw tag value become indistinguishable. Prefer the higher-level APIs\n /// ([`crate::messages::delivery::MessageDelivery`] for messages, `self.emit(event)` for events) which\n /// handle tagging automatically.\n pub fn emit_private_log_unsafe(&mut self, tag: Field, log: BoundedVec<Field, PRIVATE_LOG_CIPHERTEXT_LEN>) {\n self.emit_raw_note_log_unsafe(tag, log, 0);\n }\n\n /// Emits a private log that is explicitly tied to a newly-emitted note_hash, to convey to the kernel: \"this log\n /// relates to this note\".\n ///\n /// This linkage is important in case the note gets squashed (due to being read later in this same tx), since we\n /// can then squash the log as well.\n ///\n /// See [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe) for more info about private log\n /// emission.\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]`. See\n /// [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe).\n /// * `log` - The log data as a `BoundedVec` of Field elements.\n /// * `note_hash_counter` - The side-effect counter that was assigned to the new note_hash when it was pushed to\n /// this `PrivateContext`.\n ///\n /// Important: If your application logic requires the log to always be emitted regardless of note squashing,\n /// consider using [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe) instead, or emitting\n /// additional events.\n ///\n /// ## Safety\n ///\n /// Same as [`PrivateContext::emit_private_log_unsafe`]: the `tag` should be domain-separated.\n pub fn emit_raw_note_log_unsafe(\n &mut self,\n tag: Field,\n log: BoundedVec<Field, PRIVATE_LOG_CIPHERTEXT_LEN>,\n note_hash_counter: u32,\n ) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log.storage());\n let private_log = PrivateLogData { log: PrivateLog::new(full_log, log.len() + 1), note_hash_counter };\n self.private_logs.push(private_log.count(counter));\n }\n\n /// Emits large data blobs.\n ///\n /// This reuses the Contract Class Log channel to emit blobs of up to [`CONTRACT_CLASS_LOG_SIZE_IN_FIELDS`].\n ///\n /// ## Privacy\n ///\n /// The address of the contract emitting these blobs is revelead.\n pub fn emit_contract_class_log<let N: u32>(&mut self, log: [Field; N]) {\n let contract_address = self.this_address();\n let counter = self.next_counter();\n\n let log_to_emit: [Field; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS] =\n log.concat([0; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS - N]);\n // Note: the length is not always N, it is the number of fields we want to broadcast, omitting trailing zeros\n // to save blob space.\n // Safety: The below length is constrained in the base rollup, which will make sure that all the fields beyond\n // length are zero. However, it won't be able to check that we didn't add extra padding (trailing zeroes) or\n // that we cut trailing zeroes from the end.\n let length = unsafe { trimmed_array_length_hint(log) };\n // We hash the entire padded log to ensure a user cannot pass a shorter length and so emit incorrect shorter\n // bytecode.\n let log_hash = compute_contract_class_log_hash(log_to_emit);\n // Safety: the below only exists to broadcast the raw log, so we can provide it to the base rollup later to be\n // constrained.\n unsafe {\n notify_created_contract_class_log(contract_address, log_to_emit, length, counter);\n }\n\n self.contract_class_logs_hashes.push(LogHash { value: log_hash, length: length }.count(counter));\n }\n\n /// Calls a private function on another contract (or the same contract).\n ///\n /// Very low-level function.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n /// This enables contracts to interact with each other while maintaining privacy. This \"composability\" of private\n /// contract functions is a key feature of the Aztec network.\n ///\n /// If a user's transaction includes multiple private function calls, then by the design of Aztec, the following\n /// information will remain private[1]:\n /// - The function selectors and contract addresses of all private function calls will remain private, so an\n /// observer of the public mempool will not be able to look at a tx and deduce which private functions have been\n /// executed.\n /// - The arguments and return values of all private function calls will remain private.\n /// - The person who initiated the tx will remain private.\n /// - The notes and nullifiers and private logs that are emitted by all private function calls will (if designed\n /// well) not leak any user secrets, nor leak which functions have been executed.\n ///\n /// [1] Caveats: Some of these privacy guarantees depend on how app developers design their smart contracts. Some\n /// actions _can_ leak information, such as:\n /// - Calling an internal public function.\n /// - Calling a public function and not setting msg_sender to Option::none (feature not built yet - see github).\n /// - Calling any public function will always leak details about the nature of the transaction, so devs should be\n /// careful in their contract designs. If it can be done in a private function, then that will give the best\n /// privacy.\n /// - Not padding the side-effects of a tx to some standardized, uniform size. The kernel circuits can take hints\n /// to pad side-effects, so a wallet should be able to request for a particular amount of padding. Wallets should\n /// ideally agree on some standard.\n /// - Padding should include:\n /// - Padding the lengths of note & nullifier arrays\n /// - Padding private logs with random fields, up to some standardized size. See also:\n /// https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Advanced\n /// * The call is added to the private call stack and executed by kernel circuits after this function completes\n /// * The called function can modify its own contract's private state\n /// * Side effects from the called function are included in this transaction\n /// * The call inherits the current transaction's context and gas limits\n ///\n pub fn call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, false)\n }\n\n /// Makes a read-only call to a private function on another contract.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state, emit L2->L2 messages, nor\n /// emit events. Any nested calls are constrained to also be staticcalls.\n ///\n /// See `call_private_function` for more general info on private function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract to call\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, true)\n }\n\n /// Calls a private function that takes no arguments.\n ///\n /// This is a convenience function for calling private functions that don't require any input parameters. It's\n /// equivalent to `call_private_function` but slightly more efficient to use when no arguments are needed.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, false)\n }\n\n /// Makes a read-only call to a private function which takes no arguments.\n ///\n /// This combines the optimisation of `call_private_function_no_args` with the safety of\n /// `static_call_private_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, true)\n }\n\n /// Low-level private function call.\n ///\n /// This is the underlying implementation used by all other private function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args_hash` - Pre-computed hash of the function arguments\n /// * `is_static_call` - Whether this should be a read-only call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values\n ///\n pub fn call_private_function_with_args_hash(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args_hash: Field,\n is_static_call: bool,\n ) -> ReturnsHash {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n let start_side_effect_counter = self.side_effect_counter;\n\n // Safety: The oracle simulates the private call and returns the value of the side effects counter after\n // execution of the call (which means that end_side_effect_counter - start_side_effect_counter is the number of\n // side effects that took place), along with the hash of the return values. We validate these by requesting a\n // private kernel iteration in which the return values are constrained to hash to `returns_hash` and the side\n // effects counter to increment from start to end.\n let (end_side_effect_counter, returns_hash) = unsafe {\n call_private_function_internal(\n contract_address,\n function_selector,\n args_hash,\n start_side_effect_counter,\n is_static_call,\n )\n };\n\n self.private_call_requests.push(\n PrivateCallRequest {\n call_context: CallContext {\n msg_sender: self.this_address(),\n contract_address,\n function_selector,\n is_static_call,\n },\n args_hash,\n returns_hash,\n start_side_effect_counter,\n end_side_effect_counter,\n },\n );\n\n // The kernel circuits ensure that end_side_effect_counter is greater than start_side_effect_counter, and that\n // all side effects emitted in the child call have counters within the range [start_side_effect_counter,\n // end_side_effect_counter]. Therefore, we only need to ensure that the next side effect from the current call\n // starts after the end side effect from the child call.\n self.side_effect_counter = end_side_effect_counter + 1;\n\n ReturnsHash::new(returns_hash)\n }\n\n /// Enqueues a call to a public function to be executed later.\n ///\n /// Unlike private functions which execute immediately on the user's device, public function calls are \"enqueued\"\n /// and executed some time later by a block proposer.\n ///\n /// This means a public function cannot return any values back to a private function, because by the time the\n /// public function is being executed, the private function which called it has already completed execution. (In\n /// fact, the private function has been executed and proven, along with all other private function calls of the\n /// user's tx. A single proof of the tx has been submitted to the Aztec network, and some time later a proposer has\n /// picked the tx up from the mempool and begun executing all of the enqueued public functions).\n ///\n /// # Privacy warning Enqueueing a public function call is an inherently leaky action. Many interesting applications will require some interaction with public state, but smart contract developers should try to use public function calls sparingly, and carefully. _Internal_ public function calls are especially leaky, because they completely leak which private contract made the call. See also: https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state or emit events. Any nested\n /// calls are constrained to also be staticcalls.\n ///\n /// See also `call_public_function` for more important information about making private -> public function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Enqueues a call to a public function that takes no arguments.\n ///\n /// This is an optimisation for calling public functions that don't take any input parameters. It's otherwise\n /// equivalent to `call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function with no arguments.\n ///\n /// This combines the optimisation of `call_public_function_no_args` with the safety of\n /// `static_call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Low-level public function call.\n ///\n /// This is the underlying implementation used by all other public function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `call_public_function` or `static_call_public_function` instead.\n /// This function is exposed for performance optimization and advanced use cases.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let counter = self.next_counter();\n\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n let call_request = PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n\n self.public_call_requests.push(Counted::new(call_request, counter));\n }\n\n /// Enqueues a public function call, and designates it to be the teardown function for this tx. Only one teardown\n /// function call can be made by a tx.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase ensures the fee payer has sufficient balance to pay the proposer their fees. The teardown phase is\n /// primarily intended to: calculate exactly how much the user owes, based on gas consumption, and refund the user\n /// any change.\n ///\n /// Note: in some cases, the cost of refunding the user (i.e. DA costs of tx side-effects) might exceed the refund\n /// amount. For app logic with fairly stable and predictable gas consumption, a material refund amount is unlikely.\n /// For app logic with unpredictable gas consumption, a refund might be important to the user (e.g. if a hefty\n /// function reverts very early). Wallet/FPC/Paymaster developers should be mindful of this.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - An array of fields to pass to the function.\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n pub fn set_public_teardown_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.set_public_teardown_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Low-level function to set the public teardown function.\n ///\n /// This is the underlying implementation for setting the teardown function call that will execute at the end of\n /// the transaction. Instead of taking raw arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `set_public_teardown_function` instead.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn set_public_teardown_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n self.public_teardown_call_request =\n PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n }\n\n /// Increments the side-effect counter.\n ///\n /// Very low-level function.\n ///\n /// # Advanced\n ///\n /// Every side-effect of a private function is given a \"side-effect counter\", based on when it is created. This\n /// PrivateContext is in charge of assigning the counters.\n ///\n /// The reason we have side-effect counters is complicated. Consider this illustrative pseudocode of inter-contract\n /// function calls:\n /// ```\n /// contract A {\n /// let x = 5; // pseudocode for storage var x.\n /// fn a1 {\n /// read x; // value: 5, counter: 1.\n /// x = x + 1;\n /// write x; // value: 6, counter: 2.\n ///\n /// B.b(); // start_counter: 2, end_counter: 4\n ///\n /// read x; // value: 36, counter: 5.\n /// x = x + 1;\n /// write x; // value: 37, counter: 6.\n /// }\n ///\n /// fn a2 {\n /// read x; // value: 6, counter: 3.\n /// x = x * x;\n /// write x; // value: 36, counter: 4.\n /// }\n /// }\n ///\n /// contract B {\n /// fn b() {\n /// A.a2();\n /// }\n /// }\n /// ```\n ///\n /// Suppose a1 is the first function called. The comments show the execution counter of each side-effect, and what\n /// the new value of `x` is.\n ///\n /// These (private) functions are processed by Aztec's kernel circuits in an order that is different from execution\n /// order: All of A.a1 is proven before B.b is proven, before A.a2 is proven. So when we're in the 2nd execution\n /// frame of A.a1 (after the call to B.b), the circuit needs to justify why x went from being `6` to `36`. But the\n /// circuit doesn't know why, and given the order of proving, the kernel hasn't _seen_ a value of 36 get written\n /// yet. The kernel needs to track big arrays of all side-effects of all private functions in a tx. Then, as it\n /// recurses and processes B.b(), it will eventually see a value of 36 get written.\n ///\n /// Suppose side-effect counters weren't exposed: The kernel would only see this ordering (in order of proof\n /// verification): [ A.a1.read, A.a1.write, A.a1.read, A.a1.write, A.a2.read, A.a2.write ]\n /// [ 5, 6, 36, 37, 6, 36 ]\n /// The kernel wouldn't know _when_ B.b() was called within A.a1(), because it can't see what's going on within an\n /// app circuit. So the kernel wouldn't know that the ordering of reads and writes should actually be: [ A.a1.read,\n /// A.a1.write, A.a2.read, A.a2.write, A.a1.read, A.a1.write ]\n /// [ 5, 6, 6, 36, 36, 37 ]\n ///\n /// And so, we introduced side-effect counters: every private function must assign side-effect counters alongside\n /// every side-effect that it emits, and also expose to the kernel the counters that it started and ended with.\n /// This gives the kernel enough information to arrange all side-effects in the correct order. It can then catch\n /// (for example) if a function tries to read state before it has been written (e.g. if A.a2() maliciously tried to\n /// read a value of x=37) (e.g. if A.a1() maliciously tried to read x=6).\n ///\n /// If a malicious app contract _lies_ and does not count correctly:\n /// - It cannot lie about its start and end counters because the kernel will catch this.\n /// - It _could_ lie about its intermediate counters:\n /// - 1. It could not increment its side-effects correctly\n /// - 2. It could label its side-effects with counters outside of its start and end counters' range. The kernel\n /// will catch 2. The kernel will not catch 1., but this would only cause corruption to the private state of the\n /// malicious contract, and not any other contracts (because a contract can only modify its own state). If a \"good\"\n /// contract is given _read access_ to a maliciously-counting contract (via an external getter function, or by\n /// reading historic state from the archive tree directly), and they then make state changes to their _own_ state\n /// accordingly, that could be dangerous. Developers should be mindful not to trust the claimed innards of external\n /// contracts unless they have audited/vetted the contracts including vetting the side-effect counter\n /// incrementation. This is a similar paradigm to Ethereum smart contract development: you must vet external\n /// contracts that your contract relies upon, and you must not make any presumptions about their claimed behaviour.\n /// (Hopefully if a contract imports a version of aztec-nr, we will get contract verification tooling that can\n /// validate the authenticity of the imported aztec-nr package, and hence infer that the side- effect counting will\n /// be correct, without having to re-audit such logic for every contract).\n ///\n fn next_counter(&mut self) -> u32 {\n let counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n counter\n }\n}\n\nimpl Empty for PrivateContext {\n fn empty() -> Self {\n PrivateContext {\n inputs: PrivateContextInputs::empty(),\n side_effect_counter: 0 as u32,\n min_revertible_side_effect_counter: 0 as u32,\n is_fee_payer: false,\n args_hash: 0,\n return_hash: 0,\n expiration_timestamp: 0,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n anchor_block_header: BlockHeader::empty(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n}\n"
|
|
3636
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/context/private_context.nr",
|
|
3637
|
+
"source": "use crate::{\n context::{inputs::PrivateContextInputs, NoteExistenceRequest, NullifierExistenceRequest, ReturnsHash},\n hash::{hash_args, hash_calldata_array},\n keys::constants::{NULLIFIER_INDEX, NUM_KEY_TYPES, OUTGOING_INDEX, public_key_domain_separators},\n messaging::process_l1_to_l2_message,\n oracle::{\n block_header::get_block_header_at,\n call_private_function::call_private_function_internal,\n execution_cache,\n key_validation_request::get_key_validation_request,\n logs::notify_created_contract_class_log,\n notes::notify_nullified_note,\n nullifiers::notify_created_nullifier,\n public_call::assert_valid_public_call_data,\n tx_phase::{is_execution_in_revertible_phase, notify_revertible_phase_start},\n },\n};\nuse crate::logging::aztecnr_trace_log_format;\nuse crate::protocol::{\n abis::{\n block_header::BlockHeader,\n call_context::CallContext,\n function_selector::FunctionSelector,\n gas_settings::GasSettings,\n log_hash::LogHash,\n note_hash::NoteHash,\n nullifier::Nullifier,\n private_call_request::PrivateCallRequest,\n private_circuit_public_inputs::PrivateCircuitPublicInputs,\n private_log::{PrivateLog, PrivateLogData},\n public_call_request::PublicCallRequest,\n validation_requests::{KeyValidationRequest, KeyValidationRequestAndSeparator},\n },\n address::{AztecAddress, EthAddress},\n constants::{\n CONTRACT_CLASS_LOG_SIZE_IN_FIELDS, MAX_CONTRACT_CLASS_LOGS_PER_CALL, MAX_ENQUEUED_CALLS_PER_CALL,\n MAX_KEY_VALIDATION_REQUESTS_PER_CALL, MAX_L2_TO_L1_MSGS_PER_CALL, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL,\n MAX_NOTE_HASHES_PER_CALL, MAX_NULLIFIER_READ_REQUESTS_PER_CALL, MAX_NULLIFIERS_PER_CALL,\n MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL, MAX_PRIVATE_LOGS_PER_CALL, MAX_TX_LIFETIME,\n NULL_MSG_SENDER_CONTRACT_ADDRESS, PRIVATE_LOG_CIPHERTEXT_LEN,\n },\n hash::compute_contract_class_log_hash,\n messaging::l2_to_l1_message::L2ToL1Message,\n side_effect::{Counted, scoped::Scoped},\n traits::{Empty, ToField},\n utils::arrays::{ClaimedLengthArray, trimmed_array_length_hint},\n};\n\n/// # PrivateContext\n///\n/// The **main interface** between an #[external(\"private\")] function and the Aztec blockchain.\n///\n/// An instance of the PrivateContext is initialized automatically at the outset of every private function, within the\n/// #[external(\"private\")] macro, so you'll never need to consciously instantiate this yourself.\n///\n/// The instance is always named `context`, and it is always be available within the body of every\n/// #[external(\"private\")] function in your smart contract.\n///\n/// > For those used to \"vanilla\" Noir, it might be jarring to have access to > `context` without seeing a declaration\n/// `let context = PrivateContext::new(...)` > within the body of your function. This is just a consequence of using >\n/// macros to tidy-up verbose boilerplate. You can use `nargo expand` to > expand all macros, if you dare.\n///\n/// Typical usage for a smart contract developer will be to call getter methods of the PrivateContext.\n///\n/// _Pushing_ data and requests to the context is mostly handled within aztec-nr's own functions, so typically a smart\n/// contract developer won't need to call any setter methods directly.\n///\n/// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n/// find yourself doing this, please > open an issue on GitHub to describe your use case: it might be that > new\n/// functionality should be added to aztec-nr.\n///\n/// ## Responsibilities\n/// - Exposes contextual data to a private function:\n/// - Data relating to how this private function was called.\n/// - msg_sender\n/// - this_address - (the contract address of the private function being executed)\n/// - See `CallContext` for more data.\n/// - Data relating to the transaction in which this private function is being executed.\n/// - chain_id\n/// - version\n/// - gas_settings\n/// - Provides state access:\n/// - Access to the \"Anchor block\" header. Recall, a private function cannot read from the \"current\" block header, but\n/// must read from some historical block header, because as soon as private function execution begins (asynchronously,\n/// on a user's device), the public state of the chain (the \"current state\") will have progressed forward. We call this\n/// reference the \"Anchor block\". See `BlockHeader`.\n/// - Enables consumption of L1->L2 messages.\n/// - Enables calls to functions of other smart contracts:\n/// - Private function calls\n/// - Enqueueing of public function call requests (Since public functions are executed at a later time, by a block\n/// proposer, we say they are \"enqueued\").\n/// - Writes data to the blockchain:\n/// - New notes\n/// - New nullifiers\n/// - Private logs (for sending encrypted note contents or encrypted events)\n/// - New L2->L1 messages.\n/// - Provides args to the private function (handled by the #[external(\"private\")] macro).\n/// - Returns the return values of this private function (handled by the\n/// #[external(\"private\")] macro).\n/// - Makes Key Validation Requests.\n/// - Private functions are not allowed to see master secret keys, because we do not trust them. They are instead given\n/// \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then request validation of\n/// this claim, by making a \"key validation request\" to the protocol's kernel circuits (which _are_ allowed to see\n/// certain master secret keys).\n///\n/// ## Advanced Responsibilities\n///\n/// - Ultimately, the PrivateContext is responsible for constructing the PrivateCircuitPublicInputs of the private\n/// function being executed. All private functions on Aztec must have public inputs which adhere to the rigid layout of\n/// the PrivateCircuitPublicInputs, in order to be compatible with the protocol's kernel circuits. A well-known\n/// misnomer:\n/// - \"public inputs\" contain both inputs and outputs of this function.\n/// - By \"outputs\" we mean a lot more side-effects than just the \"return values\" of the function.\n/// - Most of the so-called \"public inputs\" are kept _private_, and never leak to the outside world, because they are\n/// 'swallowed' by the protocol's kernel circuits before the tx is sent to the network. Only the following are exposed\n/// to the outside world:\n/// - New note_hashes\n/// - New nullifiers\n/// - New private logs\n/// - New L2->L1 messages\n/// - New enqueued public function call requests All the above-listed arrays of side-effects can be padded by the\n/// user's wallet (through instructions to the kernel circuits, via the PXE) to obscure their true lengths.\n///\n/// ## Syntax Justification\n///\n/// Both user-defined functions _and_ most functions in aztec-nr need access to the PrivateContext instance to\n/// read/write data. This is why you'll see the arguably-ugly pervasiveness of the \"context\" throughout your smart\n/// contract and the aztec-nr library. For example, `&mut context` is prevalent. In some languages, you can access and\n/// mutate a global variable (such as a PrivateContext instance) from a function without polluting the function's\n/// parameters. With Noir, a function must explicitly pass control of a mutable variable to another function, by\n/// reference. Since many functions in aztec-nr need to be able to push new data to the PrivateContext, they need to be\n/// handed a mutable reference _to_ the context as a parameter. For example, `Context` is prevalent as a generic\n/// parameter, to give better type safety at compile time. Many `aztec-nr` functions don't make sense if they're called\n/// in a particular runtime (private, public or utility), and so are intentionally only implemented over certain\n/// [Private|Public|Utility]Context structs. This gives smart contract developers a much faster feedback loop if\n/// they're making a mistake, as an error will be thrown by the LSP or when they compile their contract.\n///\n#[derive(Eq)]\npub struct PrivateContext {\n // docs:start:private-context\n inputs: PrivateContextInputs,\n side_effect_counter: u32,\n\n min_revertible_side_effect_counter: u32,\n is_fee_payer: bool,\n\n args_hash: Field,\n return_hash: Field,\n\n pub(crate) expiration_timestamp: u64,\n\n pub(crate) note_hash_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL>,\n pub(crate) nullifier_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NULLIFIER_READ_REQUESTS_PER_CALL>,\n key_validation_requests_and_separators: BoundedVec<KeyValidationRequestAndSeparator, MAX_KEY_VALIDATION_REQUESTS_PER_CALL>,\n\n pub(crate) note_hashes: BoundedVec<Counted<NoteHash>, MAX_NOTE_HASHES_PER_CALL>,\n pub(crate) nullifiers: BoundedVec<Counted<Nullifier>, MAX_NULLIFIERS_PER_CALL>,\n\n pub(crate) private_call_requests: BoundedVec<PrivateCallRequest, MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL>,\n public_call_requests: BoundedVec<Counted<PublicCallRequest>, MAX_ENQUEUED_CALLS_PER_CALL>,\n public_teardown_call_request: PublicCallRequest,\n l2_to_l1_msgs: BoundedVec<Counted<L2ToL1Message>, MAX_L2_TO_L1_MSGS_PER_CALL>,\n // docs:end:private-context\n\n // Header of a block whose state is used during private execution (not the block the transaction is included in).\n pub(crate) anchor_block_header: BlockHeader,\n\n private_logs: BoundedVec<Counted<PrivateLogData>, MAX_PRIVATE_LOGS_PER_CALL>,\n contract_class_logs_hashes: BoundedVec<Counted<LogHash>, MAX_CONTRACT_CLASS_LOGS_PER_CALL>,\n\n // Contains the last key validation request for each key type. This is used to cache the last request and avoid\n // fetching the same request multiple times. The index of the array corresponds to the key type (0 nullifier, 1\n // incoming, 2 outgoing, 3 tagging).\n last_key_validation_requests: [Option<KeyValidationRequest>; NUM_KEY_TYPES],\n\n expected_non_revertible_side_effect_counter: u32,\n expected_revertible_side_effect_counter: u32,\n}\n\nimpl PrivateContext {\n pub fn new(inputs: PrivateContextInputs, args_hash: Field) -> PrivateContext {\n PrivateContext {\n inputs,\n side_effect_counter: inputs.start_side_effect_counter + 1,\n min_revertible_side_effect_counter: 0,\n is_fee_payer: false,\n args_hash,\n return_hash: 0,\n expiration_timestamp: inputs.anchor_block_header.timestamp() + MAX_TX_LIFETIME,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n anchor_block_header: inputs.anchor_block_header,\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n\n /// Returns the contract address that initiated this function call.\n ///\n /// This is similar to `msg.sender` in Solidity (hence the name).\n ///\n /// Important Note: Since Aztec doesn't have a concept of an EoA (Externally-owned Account), the msg_sender is\n /// \"none\" for the first function call of every transaction. The first function call of a tx is likely to be a call\n /// to the user's account contract, so this quirk will most often be handled by account contract developers.\n ///\n /// # Returns\n /// * `Option<AztecAddress>` - The address of the smart contract that called this function (be it an app contract\n /// or a user's account contract). Returns `Option<AztecAddress>::none` for the first function call of the tx. No\n /// other _private_ function calls in the tx will have a `none` msg_sender, but _public_ function calls might (see\n /// the PublicContext).\n pub fn maybe_msg_sender(self) -> Option<AztecAddress> {\n let maybe_msg_sender = self.inputs.call_context.msg_sender;\n if maybe_msg_sender == NULL_MSG_SENDER_CONTRACT_ADDRESS {\n Option::none()\n } else {\n Option::some(maybe_msg_sender)\n }\n }\n\n /// Returns the contract address of the current function being executed.\n ///\n /// This is equivalent to `address(this)` in Solidity (hence the name). Use this to identify the current contract's\n /// address, commonly needed for access control or when interacting with other contracts.\n ///\n /// # Returns\n /// * `AztecAddress` - The contract address of the current function being executed.\n ///\n pub fn this_address(self) -> AztecAddress {\n self.inputs.call_context.contract_address\n }\n\n /// Returns the chain ID of the current network.\n ///\n /// This is similar to `block.chainid` in Solidity. Returns the unique identifier for the blockchain network this\n /// transaction is executing on.\n ///\n /// Helps prevent cross-chain replay attacks. Useful if implementing multi-chain contract logic.\n ///\n /// # Returns\n /// * `Field` - The chain ID as a field element\n ///\n pub fn chain_id(self) -> Field {\n self.inputs.tx_context.chain_id\n }\n\n /// Returns the Aztec protocol version that this transaction is executing under. Different versions may have\n /// different rules, opcodes, or cryptographic primitives.\n ///\n /// This is similar to how Ethereum has different EVM versions.\n ///\n /// Useful for forward/backward compatibility checks\n ///\n /// Not to be confused with contract versions; this is the protocol version.\n ///\n /// # Returns\n /// * `Field` - The protocol version as a field element\n ///\n pub fn version(self) -> Field {\n self.inputs.tx_context.version\n }\n\n /// Returns the gas settings for the current transaction.\n ///\n /// This provides information about gas limits and pricing for the transaction, similar to `tx.gasprice` and gas\n /// limits in Ethereum. However, Aztec has a more sophisticated gas model with separate accounting for L2\n /// computation and data availability (DA) costs.\n ///\n /// # Returns\n /// * `GasSettings` - Struct containing gas limits and fee information\n ///\n pub fn gas_settings(self) -> GasSettings {\n self.inputs.tx_context.gas_settings\n }\n\n /// Returns the function selector of the currently executing function.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to access this.\n ///\n /// This is similar to `msg.sig` in Solidity, which returns the first 4 bytes of the function signature. In Aztec,\n /// the selector uniquely identifies which function within the contract is being called.\n ///\n /// # Returns\n /// * `FunctionSelector` - The 4-byte function identifier\n ///\n /// # Advanced\n /// Only #[external(\"private\")] functions have a function selector as a protocol- enshrined concept. The function\n /// selectors of private functions are baked into the preimage of the contract address, and are used by the\n /// protocol's kernel circuits to identify each private function and ensure the correct one is being executed.\n ///\n /// Used internally for function dispatch and call verification.\n ///\n pub fn selector(self) -> FunctionSelector {\n self.inputs.call_context.function_selector\n }\n\n /// Returns whether this call is being executed as part of a static call.\n ///\n /// Similar to Solidity's `STATICCALL`, a static call is read-only: neither this function nor any of its nested\n /// calls may emit side-effects (new notes, nullifiers, logs, L2->L1 messages, etc.). A call is considered static\n /// if it was invoked as a static call or if any of its ancestor calls were.\n ///\n /// # Returns\n /// * `bool` - `true` if this call (or an ancestor call) is a static call.\n ///\n pub fn is_static_call(self) -> bool {\n self.inputs.call_context.is_static_call\n }\n\n /// Returns the hash of the arguments passed to the current function.\n ///\n /// Very low-level function: You shouldn't need to call this. The #[external(\"private\")] macro calls this, and it\n /// makes the arguments neatly available to the body of your private function.\n ///\n /// # Returns\n /// * `Field` - Hash of the function arguments\n ///\n /// # Advanced\n /// * Arguments are hashed to reduce proof size and verification time\n /// * Enables efficient argument passing in recursive function calls\n /// * The hash can be used to retrieve the original arguments from the PXE.\n ///\n pub fn get_args_hash(self) -> Field {\n self.args_hash\n }\n\n /// Returns the current value of the side-effect counter, i.e. the counter that will be assigned to the next\n /// side-effect emitted by this function.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to access this. See `next_counter` for\n /// details on how side-effect counters are assigned and why they exist.\n ///\n /// # Returns\n /// * `u32` - The current side-effect counter.\n ///\n pub fn get_side_effect_counter(self) -> u32 {\n self.side_effect_counter\n }\n\n /// Pushes a new note_hash to the Aztec blockchain's global Note Hash Tree (a state tree).\n ///\n /// A note_hash is a commitment to a piece of private state.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to manually call this. Aztec-nr's state\n /// variables (see `../state_vars/`) are designed to understand when to create and push new note hashes.\n ///\n /// # Arguments\n /// * `note_hash` - The new note_hash.\n ///\n /// # Advanced\n /// From here, the protocol's kernel circuits will take over and insert the note_hash into the protocol's \"note\n /// hash tree\" (in the Base Rollup circuit). Before insertion, the protocol will:\n /// - \"Silo\" the `note_hash` with the contract address of this function, to yield a `siloed_note_hash`. This\n /// prevents state collisions between different smart contracts.\n /// - Ensure uniqueness of the `siloed_note_hash`, to prevent Faerie-Gold attacks, by hashing the\n /// `siloed_note_hash` with a unique value, to yield a `unique_siloed_note_hash` (see the protocol spec for more).\n ///\n /// In addition to calling this function, aztec-nr provides the contents of the newly-created note to the PXE, via\n /// the `notify_created_note` oracle.\n ///\n /// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n /// find yourself doing this, > please open an issue on GitHub to describe your use case: it might be > that new\n /// functionality should be added to aztec-nr.\n ///\n pub fn push_note_hash(&mut self, note_hash: Field) {\n self.note_hashes.push(Counted::new(note_hash, self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::state_vars::SingleUseClaim`].\n ///\n /// In particular, callers must ensure all nullifiers created by a contract are properly domain-separated, so that\n /// unrelated components don't interfere with one another (e.g. a transaction nullifier accidentally marking a\n /// variable as initialized). Only [`PrivateContext::push_nullifier_for_note_hash`] should be used for note\n /// nullifiers, never this one.\n ///\n /// ## Advanced\n ///\n /// The raw `nullifier` is not what is inserted into the Aztec state tree: it will be first siloed by contract\n /// address via [`crate::protocol::hash::compute_siloed_nullifier`] in order to prevent accidental or malicious\n /// interference of nullifiers from different contracts.\n pub fn push_nullifier_unsafe(&mut self, nullifier: Field) {\n notify_created_nullifier(nullifier);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: 0 }.count(self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier) associated with a note.\n ///\n /// This is a variant of [`PrivateContext::push_nullifier_unsafe`] that is used for note nullifiers, i.e.\n /// nullifiers that correspond to a note. If a note and its nullifier are created in the same transaction, then\n /// the private kernels will 'squash' these values, deleting them both as if they never existed and reducing\n /// transaction fees.\n ///\n /// The `nullification_note_hash` must be the result of calling\n /// [`crate::note::utils::compute_confirmed_note_hash_for_nullification`] for pending notes, and `0` for settled\n /// notes (which cannot be squashed).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::note::lifecycle::destroy_note`].\n ///\n /// The precautions listed for [`PrivateContext::push_nullifier_unsafe`] apply here as well, and callers should\n /// additionally ensure `nullification_note_hash` corresponds to a note emitted by this contract, with its hash\n /// computed in the same transaction execution phase as the call to this function. Finally, only this function\n /// should be used for note nullifiers, never [`PrivateContext::push_nullifier_unsafe`].\n ///\n /// Failure to do these things can result in unprovable contexts, accidental deletion of notes, or double-spend\n /// attacks.\n pub fn push_nullifier_for_note_hash(&mut self, nullifier: Field, nullification_note_hash: Field) {\n let nullifier_counter = self.next_counter();\n notify_nullified_note(nullifier, nullification_note_hash, nullifier_counter);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: nullification_note_hash }.count(\n nullifier_counter,\n ));\n }\n\n /// Returns the anchor block header - the historical block header that this private function is reading from.\n ///\n /// A private function CANNOT read from the \"current\" block header, but must read from some older block header,\n /// because as soon as private function execution begins (asynchronously, on a user's device), the public state of\n /// the chain (the \"current state\") will have progressed forward.\n ///\n /// # Returns\n /// * `BlockHeader` - The anchor block header.\n ///\n /// # Advanced\n /// * All private functions of a tx read from the same anchor block header.\n /// * The protocol asserts that the `expiration_timestamp` of every tx is at most 24 hours beyond the timestamp of\n /// the tx's chosen anchor block header. This enables the network's nodes to safely prune old txs from the mempool.\n /// Therefore, the chosen block header _must_ be one from within the last 24 hours.\n ///\n pub fn get_anchor_block_header(self) -> BlockHeader {\n self.anchor_block_header\n }\n\n /// Returns the header of any historical block at or before the anchor block.\n ///\n /// This enables private contracts to access information from even older blocks than the anchor block header.\n ///\n /// Useful for time-based contract logic that needs to compare against multiple historical points.\n ///\n /// # Arguments\n /// * `block_number` - The block number to retrieve (must be <= anchor block number)\n ///\n /// # Returns\n /// * `BlockHeader` - The header of the requested historical block\n ///\n /// # Advanced\n /// This function uses an oracle to fetch block header data from the user's PXE. Depending on how much blockchain\n /// data the user's PXE has been set up to store, this might require a query from the PXE to another Aztec node to\n /// get the data. > This is generally true of all oracle getters (see `../oracle`).\n ///\n /// Each block header gets hashed and stored as a leaf in the protocol's Archive Tree. In fact, the i-th block\n /// header gets stored at the i-th leaf index of the Archive Tree. Behind the scenes, this `get_block_header_at`\n /// function will add Archive Tree merkle-membership constraints (~3k) to your smart contract function's circuit,\n /// to prove existence of the block header in the Archive Tree.\n ///\n /// Note: we don't do any caching, so avoid making duplicate calls for the same block header, because each call\n /// will add duplicate constraints.\n ///\n /// Calling this function is more expensive (constraint-wise) than getting the anchor block header (via\n /// `get_block_header`). This is because the anchor block's merkle membership proof is handled by Aztec's protocol\n /// circuits, and is only performed once for the entire tx because all private functions of a tx share a common\n /// anchor block header. Therefore, the cost (constraint-wise) of calling `get_block_header` is effectively free.\n ///\n pub fn get_block_header_at(self, block_number: u32) -> BlockHeader {\n get_block_header_at(block_number, self)\n }\n\n /// Sets the hash of the return values for this private function.\n ///\n /// Very low-level function: this is called by the #[external(\"private\")] macro.\n ///\n /// # Arguments\n /// * `serialized_return_values` - The serialized return values as a field array\n ///\n pub fn set_return_hash<let N: u32>(&mut self, serialized_return_values: [Field; N]) {\n let return_hash = hash_args(serialized_return_values);\n self.return_hash = return_hash;\n execution_cache::store(serialized_return_values, return_hash);\n }\n\n /// Builds the PrivateCircuitPublicInputs for this private function, to ensure compatibility with the protocol's\n /// kernel circuits.\n ///\n /// Very low-level function: This function is automatically called by the #[external(\"private\")] macro.\n pub fn finish(self) -> PrivateCircuitPublicInputs {\n PrivateCircuitPublicInputs {\n call_context: self.inputs.call_context,\n args_hash: self.args_hash,\n returns_hash: self.return_hash,\n min_revertible_side_effect_counter: self.min_revertible_side_effect_counter,\n is_fee_payer: self.is_fee_payer,\n expiration_timestamp: self.expiration_timestamp,\n note_hash_read_requests: ClaimedLengthArray::from_bounded_vec(self.note_hash_read_requests),\n nullifier_read_requests: ClaimedLengthArray::from_bounded_vec(self.nullifier_read_requests),\n key_validation_requests_and_separators: ClaimedLengthArray::from_bounded_vec(\n self.key_validation_requests_and_separators,\n ),\n note_hashes: ClaimedLengthArray::from_bounded_vec(self.note_hashes),\n nullifiers: ClaimedLengthArray::from_bounded_vec(self.nullifiers),\n private_call_requests: ClaimedLengthArray::from_bounded_vec(self.private_call_requests),\n public_call_requests: ClaimedLengthArray::from_bounded_vec(self.public_call_requests),\n public_teardown_call_request: self.public_teardown_call_request,\n l2_to_l1_msgs: ClaimedLengthArray::from_bounded_vec(self.l2_to_l1_msgs),\n start_side_effect_counter: self.inputs.start_side_effect_counter,\n end_side_effect_counter: self.side_effect_counter,\n private_logs: ClaimedLengthArray::from_bounded_vec(self.private_logs),\n contract_class_logs_hashes: ClaimedLengthArray::from_bounded_vec(self.contract_class_logs_hashes),\n anchor_block_header: self.anchor_block_header,\n tx_context: self.inputs.tx_context,\n expected_non_revertible_side_effect_counter: self.expected_non_revertible_side_effect_counter,\n expected_revertible_side_effect_counter: self.expected_revertible_side_effect_counter,\n tx_request_salt: self.inputs.tx_request_salt,\n }\n }\n\n /// Designates this contract as the fee payer for the transaction.\n ///\n /// Unlike Ethereum, where the transaction sender always pays fees, Aztec allows any contract to voluntarily pay\n /// transaction fees. This enables patterns like sponsored transactions or fee abstraction where users don't need\n /// to hold fee-juice themselves. (Fee juice is a fee-paying asset for Aztec).\n ///\n /// Only one contract per transaction can declare itself as the fee payer, and it must have sufficient fee-juice\n /// balance (>= the gas limits specified in the TxContext) by the time we reach the public setup phase of the tx.\n ///\n pub fn set_as_fee_payer(&mut self) {\n aztecnr_trace_log_format!(\"Setting {0} as fee payer\")([self.this_address().to_field()]);\n self.is_fee_payer = true;\n }\n\n pub fn in_revertible_phase(&mut self) -> bool {\n let current_counter = self.side_effect_counter;\n\n // Safety: Kernel will validate that the claim is correct by validating the expected counters.\n let is_revertible = unsafe { is_execution_in_revertible_phase(current_counter) };\n\n if is_revertible {\n if (self.expected_revertible_side_effect_counter == 0)\n | (current_counter < self.expected_revertible_side_effect_counter) {\n self.expected_revertible_side_effect_counter = current_counter;\n }\n } else if current_counter > self.expected_non_revertible_side_effect_counter {\n self.expected_non_revertible_side_effect_counter = current_counter;\n }\n\n is_revertible\n }\n\n /// Declares the end of the \"setup phase\" of this tx.\n ///\n /// Only one function per tx can declare the end of the setup phase.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase enables such a payment to be made, because the setup phase _cannot revert_: a reverting function within\n /// the setup phase would result in an invalid block which cannot be proven. Any side-effects generated during that\n /// phase are guaranteed to be inserted into Aztec's state trees (except for squashed notes & nullifiers, of\n /// course).\n ///\n /// Even though the end of the setup phase is declared within a private function, you might have noticed that\n /// _public_ functions can also execute within the setup phase. This is because any public function calls which\n /// were enqueued _within the setup phase_ by a private function are considered part of the setup phase.\n ///\n /// # Advanced\n /// * Sets the minimum revertible side effect counter of this tx to be the PrivateContext's _current_ side effect\n /// counter.\n ///\n pub fn end_setup(&mut self) {\n // We bump the counter twice: once so that `min_revertible_side_effect_counter` sits strictly above any\n // non-revertible side effect counter (including queries made via `in_revertible_phase` before this call), and\n // once more so that the next revertible side effect counter is strictly greater than\n // `min_revertible_side_effect_counter`. This ensures `min_revertible_side_effect_counter` occupies a gap that\n // no side effect takes, which the kernel relies on when validating the phase split.\n self.side_effect_counter += 1;\n self.min_revertible_side_effect_counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n\n aztecnr_trace_log_format!(\n \"Ending setup, minimum revertible side effect counter is {0}\",\n )(\n [self.min_revertible_side_effect_counter as Field],\n );\n notify_revertible_phase_start(self.min_revertible_side_effect_counter);\n }\n\n /// Sets a deadline (an \"include-by timestamp\") for when this transaction must be included in a block.\n ///\n /// Other functions in this tx might call this setter with differing values for the include-by timestamp. To ensure\n /// that all functions' deadlines are met, the _minimum_ of all these include-by timestamps will be exposed when\n /// this tx is submitted to the network.\n ///\n /// If the transaction is not included in a block by its include-by timestamp, it becomes invalid and it will never\n /// be included.\n ///\n /// This expiry timestamp is publicly visible. See the \"Advanced\" section for privacy concerns.\n ///\n /// # Arguments\n /// * `expiration_timestamp` - Unix timestamp (seconds) deadline for inclusion. The include-by timestamp of this tx\n /// will be _at most_ the timestamp specified.\n ///\n /// # Advanced\n /// * If multiple functions set differing `expiration_timestamp`s, the kernel circuits will set it to be the\n /// _minimum_ of the two. This ensures the tx expiry requirements of all functions in the tx are met.\n /// * Rollup circuits will reject expired txs.\n /// * The protocol enforces that all transactions must be included within 24 hours of their chosen anchor block's\n /// timestamp, to enable safe mempool pruning.\n /// * The DelayedPublicMutable design makes heavy use of this functionality, to enable private functions to read\n /// public state.\n /// * A sophisticated Wallet should cleverly set an include-by timestamp to improve the privacy of the user and the\n /// network as a whole. For example, if a contract interaction sets include-by to some publicly-known value (e.g.\n /// the time when a contract upgrades), then the wallet might wish to set an even lower one to avoid revealing that\n /// this tx is interacting with said contract. Ideally, all wallets should standardize on an approach in order to\n /// provide users with a large privacy set -- although the exact approach\n /// will need to be discussed. Wallets that deviate from a standard might accidentally reveal which wallet each\n /// transaction originates from.\n ///\n // docs:start:expiration-timestamp\n pub fn set_expiration_timestamp(&mut self, expiration_timestamp: u64) {\n // docs:end:expiration-timestamp\n self.expiration_timestamp = std::cmp::min(self.expiration_timestamp, expiration_timestamp);\n }\n\n /// Asserts that a note has been created.\n ///\n /// This function will cause the transaction to fail unless the requested note exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending notes.\n ///\n /// ## Pending Notes\n ///\n /// Both settled notes (created in prior transactions) and pending notes (created in the current transaction) will\n /// be considered by this function. Pending notes must have been created **before** this call is made for the check\n /// to pass.\n ///\n /// ## Historical Notes\n ///\n /// If you need to assert that a note existed _by some specific block in the past_, instead of simply proving that\n /// it exists by the current anchor block, use [`crate::history::note::assert_note_existed_by`] instead.\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel note hash read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_note_exists(&mut self, note_existence_request: NoteExistenceRequest) {\n // Note that the `note_hash_read_requests` array does not hold `NoteExistenceRequest` objects, but rather a\n // custom kernel type. We convert from the aztec-nr type into it.\n\n let note_hash = note_existence_request.note_hash();\n let contract_address = note_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let side_effect = Scoped::new(\n Counted::new(note_hash, self.next_counter()),\n contract_address,\n );\n\n self.note_hash_read_requests.push(side_effect);\n }\n\n /// Asserts that a nullifier has been emitted.\n ///\n /// This function will cause the transaction to fail unless the requested nullifier exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending nullifiers.\n ///\n /// ## Pending Nullifiers\n ///\n /// Both settled nullifiers (emitted in prior transactions) and pending nullifiers (emitted in the current\n /// transaction) will be considered by this function. Pending nullifiers must have been emitted **before** this\n /// call is made for the check to pass.\n ///\n /// ## Historical Nullifiers\n ///\n /// If you need to assert that a nullifier existed _by some specific block in the past_, instead of simply proving\n /// that it exists by the current anchor block, use [`crate::history::nullifier::assert_nullifier_existed_by`]\n /// instead.\n ///\n /// ## Public vs Private\n ///\n /// In general, it is unsafe to check for nullifier non-existence in private, as that will not consider the\n /// possibility of the nullifier having been emitted in any transaction between the anchor block and the inclusion\n /// block. Private functions instead prove existence via this function and 'prove' non-existence by _emitting_ the\n /// nullifer, which would cause the transaction to fail if the nullifier existed.\n ///\n /// This is not the case in public functions, which do have access to the tip of the blockchain and so can reliably\n /// prove whether a nullifier exists or not via\n /// [`crate::context::public_context::PublicContext::nullifier_exists_unsafe`].\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel nullifier read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_nullifier_exists(&mut self, nullifier_existence_request: NullifierExistenceRequest) {\n let nullifier = nullifier_existence_request.nullifier();\n let contract_address = nullifier_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let request = Scoped::new(\n Counted::new(nullifier, self.next_counter()),\n contract_address,\n );\n\n self.nullifier_read_requests.push(request);\n }\n\n /// Requests the app-siloed nullifier hiding key (nhk_app) for the given (hashed) master nullifier public key\n /// (npk_m), from the user's PXE.\n ///\n /// Advanced function: Only needed if you're designing your own notes and/or nullifiers.\n ///\n /// Contracts are not allowed to compute nullifiers for other contracts, as that would let them read parts of their\n /// private state. Because of this, a contract is only given an \"app-siloed key\", which is constructed by\n /// hashing the user's master nullifier hiding key with the contract's address. However, because contracts cannot\n /// be trusted with a user's master nullifier hiding key (because we don't know which contracts are honest or\n /// malicious), the PXE refuses to provide any master secret keys to any app smart contract function. This means\n /// app functions are unable to prove that the derivation of an app-siloed nullifier hiding key has been computed\n /// correctly. Instead, an app function can request to the kernel (via `request_nhk_app`) that it validates the\n /// siloed derivation, since the kernel has been vetted to not leak any master secret keys.\n ///\n /// A common nullification scheme is to inject a nullifier hiding key into the preimage of a nullifier, to make the\n /// nullifier deterministic but random-looking. This function enables that flow.\n ///\n /// # Arguments\n /// * `npk_m_hash` - A hash of the master nullifier public key of the user whose PXE is executing this function.\n ///\n /// # Returns\n /// * The app-siloed nullifier hiding key that corresponds to the given `npk_m_hash`.\n ///\n pub fn request_nhk_app(&mut self, npk_m_hash: Field) -> Field {\n self.request_sk_app(npk_m_hash, NULLIFIER_INDEX)\n }\n\n /// Requests the app-siloed outgoing viewing secret key (ovsk_app) for the given (hashed) master outgoing\n /// viewing public key (ovpk_m), from the user's PXE.\n ///\n /// See `request_nhk_app` and `request_sk_app` for more info.\n ///\n /// The intention of the \"outgoing\" keypair is to provide a second secret key for all of a user's outgoing activity\n /// (i.e. for notes that a user creates, as opposed to notes that a user receives from others). The separation of\n /// incoming and outgoing data was a distinction made by zcash, with the intention of enabling a user to optionally\n /// share with a 3rd party a controlled view of only incoming or outgoing notes. Similar functionality of sharing\n /// select data can be achieved with offchain zero-knowledge proofs. It is up to an app developer whether they\n /// choose to make use of a user's outgoing keypair within their application logic, or instead simply use the same\n /// keypair (the address keypair (which is effectively the same as the \"incoming\" keypair)) for all incoming &\n /// outgoing messages to a user.\n ///\n /// Currently, all of the exposed encryption functions in aztec-nr ignore the outgoing viewing keys, and instead\n /// encrypt all note logs and event logs to a user's address public key.\n ///\n /// # Arguments\n /// * `ovpk_m_hash` - Hash of the outgoing viewing public key master\n ///\n /// # Returns\n /// * The application-specific outgoing viewing secret key\n ///\n pub fn request_ovsk_app(&mut self, ovpk_m_hash: Field) -> Field {\n self.request_sk_app(ovpk_m_hash, OUTGOING_INDEX)\n }\n\n /// Pushes a Key Validation Request to the kernel.\n ///\n /// Private functions are not allowed to see a user's master secret keys, because we do not trust them. They are\n /// instead given \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then\n /// request validation of this claim, by making a \"key validation request\" to the protocol's kernel circuits (which\n /// _are_ allowed to see certain master secret keys).\n ///\n /// The app circuit only sees `pk_m_hash` (not the raw point). The kernel derives the\n /// point from `sk_m`, hashes it, and asserts equality. When a Key Validation Request tuple of\n /// (sk_app, pk_m_hash, app_address) is submitted to the kernel, it performs the following\n /// derivations to validate the relationship between the claimed sk_app and the user's pk_m_hash:\n ///\n /// (sk_m) ----> * G ----> pk_m ----> hash_public_key(pk_m)\n /// | |\n /// v | We use the kernel to prove this\n /// h(sk_m, app_address) | sk_app-pk_m_hash relationship, because app\n /// | | circuits must not be trusted to see sk_m.\n /// v |\n /// sk_app - - - - - - - - - - - - - - - - - -\n ///\n /// The function is named \"request_\" instead of \"get_\" to remind the user that a Key Validation Request will be\n /// emitted to the kernel.\n ///\n fn request_sk_app(&mut self, pk_m_hash: Field, key_index: Field) -> Field {\n // Match against the cache only when a request is actually present in the slot.\n let cached_slot = self.last_key_validation_requests[key_index as u32];\n let cache_hit = cached_slot.is_some() & (cached_slot.unwrap_unchecked().pk_m_hash == pk_m_hash);\n\n if cache_hit {\n // We get a match so the cached request is the latest one\n cached_slot.unwrap_unchecked().sk_app\n } else {\n // We didn't get a match meaning the cached result is stale. Typically we'd validate keys by showing that\n // the master secret key derives to a public key matching `pk_m_hash`, but that'd require the oracle\n // returning the master secret keys, which could cause malicious contracts to leak it or learn about\n // secrets from other contracts. We therefore silo secret keys, and rely on the private kernel to validate\n // that the siloed secret key corresponds to correct siloing of the master secret key that hashes to\n // `pk_m_hash`.\n\n // Safety: Kernels verify that the key validation request is valid and below we verify that a request for\n // the correct public key has been received.\n let request = unsafe { get_key_validation_request(pk_m_hash, key_index) };\n assert_eq(request.pk_m_hash, pk_m_hash, \"Obtained key validation request for wrong pk_m_hash\");\n\n self.key_validation_requests_and_separators.push(\n KeyValidationRequestAndSeparator {\n request,\n key_type_domain_separator: public_key_domain_separators[key_index as u32],\n },\n );\n self.last_key_validation_requests[key_index as u32] = Option::some(request);\n request.sk_app\n }\n }\n\n /// Sends an \"L2 -> L1 message\" from this function (Aztec, L2) to a smart contract on Ethereum (L1). L1 contracts\n /// which are designed to send/receive messages to/from Aztec are called \"Portal Contracts\".\n ///\n /// Common use cases include withdrawals, cross-chain asset transfers, and triggering L1 actions based on L2 state\n /// changes.\n ///\n /// The message will be inserted into an Aztec \"Outbox\" contract on L1, when this transaction's block is proposed\n /// to L1. Sending the message will not result in any immediate state changes in the target portal contract. The\n /// message will need to be manually consumed from the Outbox through a separate Ethereum transaction: a user will\n /// need to call a function of the portal contract -- a function specifically designed to make a call to the Outbox\n /// to consume the message. The message will only be available for consumption once the _epoch_ proof has been\n /// submitted. Given that there are multiple Aztec blocks within an epoch, it might take some time for this epoch\n /// proof to be submitted -- especially if the block was near the start of an epoch.\n ///\n /// # Arguments\n /// * `recipient` - Ethereum address that will receive the message\n /// * `content` - Message content (32 bytes as a Field element). This content has a very\n /// specific layout. docs:start:context_message_portal\n pub fn message_portal(&mut self, recipient: EthAddress, content: Field) {\n let message = L2ToL1Message { recipient, content };\n self.l2_to_l1_msgs.push(message.count(self.next_counter()));\n }\n\n /// Consumes a message sent from Ethereum (L1) to Aztec (L2).\n ///\n /// Common use cases include token bridging, cross-chain governance, and triggering L2 actions based on L1 events.\n ///\n /// Use this function if you only want the message to ever be \"referred to\" once. Once consumed using this method,\n /// the message cannot be consumed again, because a nullifier is emitted. If your use case wants for the message to\n /// be read unlimited times, then you can always read any historic message from the L1-to-L2 messages tree;\n /// messages never technically get deleted from that tree.\n ///\n /// The message will first be inserted into an Aztec \"Inbox\" smart contract on L1. Sending the message will not\n /// result in any immediate state changes in the target L2 contract. The message will need to be manually consumed\n /// by the target contract through a separate Aztec transaction. The message will not be available for consumption\n /// immediately. Messages get copied over from the L1 Inbox to L2 by the next Proposer in batches. So you will need\n /// to wait until the messages are copied before you can consume them.\n ///\n /// # Arguments\n /// * `content` - The message content that was sent from L1\n /// * `secret` - Secret value used for message privacy (if needed)\n /// * `sender` - Ethereum address that sent the message\n /// * `leaf_index` - Index of the message in the L1-to-L2 message tree\n ///\n /// # Advanced\n /// Validates message existence in the L1-to-L2 message tree and nullifies the message to prevent\n /// double-consumption.\n pub fn consume_l1_to_l2_message(&mut self, content: Field, secret: Field, sender: EthAddress, leaf_index: Field) {\n let nullifier = process_l1_to_l2_message(\n self.anchor_block_header.state.l1_to_l2_message_tree.root,\n self.this_address(),\n sender,\n self.chain_id(),\n self.version(),\n content,\n secret,\n leaf_index,\n );\n\n // Push nullifier (and the \"commitment\" corresponding to this can be \"empty\")\n self.push_nullifier_unsafe(nullifier)\n }\n\n /// Emits a private log (an array of Fields) that will be published to an Ethereum blob.\n ///\n /// Private logs are intended for the broadcasting of ciphertexts: that is, encrypted events or encrypted note\n /// contents. Since the data in the logs is meant to be _encrypted_, private_logs are broadcast to publicly-visible\n /// Ethereum blobs. The intended recipients of such encrypted messages can then discover and decrypt these\n /// encrypted logs using their viewing secret key. (See `../messages/discovery` for more details).\n ///\n /// Important note: This function DOES NOT _do_ any encryption of the input `log` fields. This function blindly\n /// publishes whatever input `log` data is fed into it, so the caller of this function should have already\n /// performed the encryption, and the `log` should be the result of that encryption.\n ///\n /// The protocol does not dictate what encryption scheme should be used: a smart contract developer can choose\n /// whatever encryption scheme they like. Aztec-nr includes some off-the-shelf encryption libraries that developers\n /// might wish to use, for convenience. These libraries not only encrypt a plaintext (to produce a ciphertext);\n /// they also prepend the ciphertext with a `tag` and `ephemeral public key` for easier message discovery. This is\n /// a very dense topic, and we will be writing more libraries and docs soon.\n ///\n /// > Currently, AES128 CBC encryption is the main scheme included in > aztec.nr. > We are currently making\n /// significant changes to the interfaces of the > encryption library.\n ///\n /// In some niche use cases, an app might be tempted to publish _un-encrypted_ data via a private log, because\n /// _public logs_ are not available to private functions. Be warned that emitting public data via private logs is\n /// strongly discouraged, and is considered a \"privacy anti-pattern\", because it reveals identifiable information\n /// about _which_ function has been executed. A tx which leaks such information does not contribute to the privacy\n /// set of the network.\n ///\n /// * Unlike `emit_raw_note_log_unsafe`, this log is not tied to any specific note\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]` of the emitted log. Used by recipients and nodes to identify and\n /// filter for relevant logs without scanning all of them.\n /// * `log` - The log data that will be publicly broadcast (so make sure it's already been encrypted before you\n /// call this function). Private logs are bounded in size (`PRIVATE_LOG_CIPHERTEXT_LEN`), to encourage all logs\n /// from all smart contracts look identical. The protocol's kernel circuits can then append random fields as\n /// \"padding\" after the log's length, so that the logs of this smart contract look indistinguishable from (the\n /// same length as) the logs of all other applications. It's up to wallets how much padding to apply, so\n /// ideally all wallets should agree on standards for this.\n ///\n /// ## Safety\n ///\n /// The `tag` should be domain-separated (e.g. via [`crate::protocol::hash::compute_log_tag`]) to prevent\n /// collisions between logs from different sources. Without domain separation, two unrelated log types that\n /// happen to share a raw tag value become indistinguishable. Prefer the higher-level APIs\n /// ([`crate::messages::delivery::MessageDelivery`] for messages, `self.emit(event)` for events) which\n /// handle tagging automatically.\n pub fn emit_private_log_unsafe(&mut self, tag: Field, log: BoundedVec<Field, PRIVATE_LOG_CIPHERTEXT_LEN>) {\n self.emit_raw_note_log_unsafe(tag, log, 0);\n }\n\n /// Emits a private log that is explicitly tied to a newly-emitted note_hash, to convey to the kernel: \"this log\n /// relates to this note\".\n ///\n /// This linkage is important in case the note gets squashed (due to being read later in this same tx), since we\n /// can then squash the log as well.\n ///\n /// See [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe) for more info about private log\n /// emission.\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]`. See\n /// [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe).\n /// * `log` - The log data as a `BoundedVec` of Field elements.\n /// * `note_hash_counter` - The side-effect counter that was assigned to the new note_hash when it was pushed to\n /// this `PrivateContext`.\n ///\n /// Important: If your application logic requires the log to always be emitted regardless of note squashing,\n /// consider using [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe) instead, or emitting\n /// additional events.\n ///\n /// ## Safety\n ///\n /// Same as [`PrivateContext::emit_private_log_unsafe`]: the `tag` should be domain-separated.\n pub fn emit_raw_note_log_unsafe(\n &mut self,\n tag: Field,\n log: BoundedVec<Field, PRIVATE_LOG_CIPHERTEXT_LEN>,\n note_hash_counter: u32,\n ) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log.storage());\n let private_log = PrivateLogData { log: PrivateLog::new(full_log, log.len() + 1), note_hash_counter };\n self.private_logs.push(private_log.count(counter));\n }\n\n /// Emits large data blobs.\n ///\n /// This reuses the Contract Class Log channel to emit blobs of up to [`CONTRACT_CLASS_LOG_SIZE_IN_FIELDS`].\n ///\n /// ## Privacy\n ///\n /// The address of the contract emitting these blobs is revelead.\n pub fn emit_contract_class_log<let N: u32>(&mut self, log: [Field; N]) {\n let contract_address = self.this_address();\n let counter = self.next_counter();\n\n let log_to_emit: [Field; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS] =\n log.concat([0; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS - N]);\n // Note: the length is not always N, it is the number of fields we want to broadcast, omitting trailing zeros\n // to save blob space.\n // Safety: The below length is constrained in the base rollup, which will make sure that all the fields beyond\n // length are zero. However, it won't be able to check that we didn't add extra padding (trailing zeroes) or\n // that we cut trailing zeroes from the end.\n let length = unsafe { trimmed_array_length_hint(log) };\n // We hash the entire padded log to ensure a user cannot pass a shorter length and so emit incorrect shorter\n // bytecode.\n let log_hash = compute_contract_class_log_hash(log_to_emit);\n // Safety: the below only exists to broadcast the raw log, so we can provide it to the base rollup later to be\n // constrained.\n unsafe {\n notify_created_contract_class_log(contract_address, log_to_emit, length, counter);\n }\n\n self.contract_class_logs_hashes.push(LogHash { value: log_hash, length: length }.count(counter));\n }\n\n /// Calls a private function on another contract (or the same contract).\n ///\n /// Very low-level function.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n /// This enables contracts to interact with each other while maintaining privacy. This \"composability\" of private\n /// contract functions is a key feature of the Aztec network.\n ///\n /// If a user's transaction includes multiple private function calls, then by the design of Aztec, the following\n /// information will remain private[1]:\n /// - The function selectors and contract addresses of all private function calls will remain private, so an\n /// observer of the public mempool will not be able to look at a tx and deduce which private functions have been\n /// executed.\n /// - The arguments and return values of all private function calls will remain private.\n /// - The person who initiated the tx will remain private.\n /// - The notes and nullifiers and private logs that are emitted by all private function calls will (if designed\n /// well) not leak any user secrets, nor leak which functions have been executed.\n ///\n /// [1] Caveats: Some of these privacy guarantees depend on how app developers design their smart contracts. Some\n /// actions _can_ leak information, such as:\n /// - Calling an internal public function.\n /// - Calling a public function and not setting msg_sender to Option::none (feature not built yet - see github).\n /// - Calling any public function will always leak details about the nature of the transaction, so devs should be\n /// careful in their contract designs. If it can be done in a private function, then that will give the best\n /// privacy.\n /// - Not padding the side-effects of a tx to some standardized, uniform size. The kernel circuits can take hints\n /// to pad side-effects, so a wallet should be able to request for a particular amount of padding. Wallets should\n /// ideally agree on some standard.\n /// - Padding should include:\n /// - Padding the lengths of note & nullifier arrays\n /// - Padding private logs with random fields, up to some standardized size. See also:\n /// https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Advanced\n /// * The call is added to the private call stack and executed by kernel circuits after this function completes\n /// * The called function can modify its own contract's private state\n /// * Side effects from the called function are included in this transaction\n /// * The call inherits the current transaction's context and gas limits\n ///\n pub fn call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, false)\n }\n\n /// Makes a read-only call to a private function on another contract.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state, emit L2->L2 messages, nor\n /// emit events. Any nested calls are constrained to also be staticcalls.\n ///\n /// See `call_private_function` for more general info on private function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract to call\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, true)\n }\n\n /// Calls a private function that takes no arguments.\n ///\n /// This is a convenience function for calling private functions that don't require any input parameters. It's\n /// equivalent to `call_private_function` but slightly more efficient to use when no arguments are needed.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, false)\n }\n\n /// Makes a read-only call to a private function which takes no arguments.\n ///\n /// This combines the optimisation of `call_private_function_no_args` with the safety of\n /// `static_call_private_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, true)\n }\n\n /// Low-level private function call.\n ///\n /// This is the underlying implementation used by all other private function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args_hash` - Pre-computed hash of the function arguments\n /// * `is_static_call` - Whether this should be a read-only call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values\n ///\n pub fn call_private_function_with_args_hash(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args_hash: Field,\n is_static_call: bool,\n ) -> ReturnsHash {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n let start_side_effect_counter = self.side_effect_counter;\n\n // Safety: The oracle simulates the private call and returns the value of the side effects counter after\n // execution of the call (which means that end_side_effect_counter - start_side_effect_counter is the number of\n // side effects that took place), along with the hash of the return values. We validate these by requesting a\n // private kernel iteration in which the return values are constrained to hash to `returns_hash` and the side\n // effects counter to increment from start to end.\n let (end_side_effect_counter, returns_hash) = unsafe {\n call_private_function_internal(\n contract_address,\n function_selector,\n args_hash,\n start_side_effect_counter,\n is_static_call,\n )\n };\n\n self.private_call_requests.push(\n PrivateCallRequest {\n call_context: CallContext {\n msg_sender: self.this_address(),\n contract_address,\n function_selector,\n is_static_call,\n },\n args_hash,\n returns_hash,\n start_side_effect_counter,\n end_side_effect_counter,\n },\n );\n\n // The kernel circuits ensure that end_side_effect_counter is greater than start_side_effect_counter, and that\n // all side effects emitted in the child call have counters within the range [start_side_effect_counter,\n // end_side_effect_counter]. Therefore, we only need to ensure that the next side effect from the current call\n // starts after the end side effect from the child call.\n self.side_effect_counter = end_side_effect_counter + 1;\n\n ReturnsHash::new(returns_hash)\n }\n\n /// Enqueues a call to a public function to be executed later.\n ///\n /// Unlike private functions which execute immediately on the user's device, public function calls are \"enqueued\"\n /// and executed some time later by a block proposer.\n ///\n /// This means a public function cannot return any values back to a private function, because by the time the\n /// public function is being executed, the private function which called it has already completed execution. (In\n /// fact, the private function has been executed and proven, along with all other private function calls of the\n /// user's tx. A single proof of the tx has been submitted to the Aztec network, and some time later a proposer has\n /// picked the tx up from the mempool and begun executing all of the enqueued public functions).\n ///\n /// # Privacy warning Enqueueing a public function call is an inherently leaky action. Many interesting applications will require some interaction with public state, but smart contract developers should try to use public function calls sparingly, and carefully. _Internal_ public function calls are especially leaky, because they completely leak which private contract made the call. See also: https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state or emit events. Any nested\n /// calls are constrained to also be staticcalls.\n ///\n /// See also `call_public_function` for more important information about making private -> public function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Enqueues a call to a public function that takes no arguments.\n ///\n /// This is an optimisation for calling public functions that don't take any input parameters. It's otherwise\n /// equivalent to `call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function with no arguments.\n ///\n /// This combines the optimisation of `call_public_function_no_args` with the safety of\n /// `static_call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Low-level public function call.\n ///\n /// This is the underlying implementation used by all other public function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `call_public_function` or `static_call_public_function` instead.\n /// This function is exposed for performance optimization and advanced use cases.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let counter = self.next_counter();\n\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n let call_request = PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n\n self.public_call_requests.push(Counted::new(call_request, counter));\n }\n\n /// Enqueues a public function call, and designates it to be the teardown function for this tx. Only one teardown\n /// function call can be made by a tx.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase ensures the fee payer has sufficient balance to pay the proposer their fees. The teardown phase is\n /// primarily intended to: calculate exactly how much the user owes, based on gas consumption, and refund the user\n /// any change.\n ///\n /// Note: in some cases, the cost of refunding the user (i.e. DA costs of tx side-effects) might exceed the refund\n /// amount. For app logic with fairly stable and predictable gas consumption, a material refund amount is unlikely.\n /// For app logic with unpredictable gas consumption, a refund might be important to the user (e.g. if a hefty\n /// function reverts very early). Wallet/FPC/Paymaster developers should be mindful of this.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - An array of fields to pass to the function.\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n pub fn set_public_teardown_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.set_public_teardown_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Low-level function to set the public teardown function.\n ///\n /// This is the underlying implementation for setting the teardown function call that will execute at the end of\n /// the transaction. Instead of taking raw arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `set_public_teardown_function` instead.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn set_public_teardown_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n self.public_teardown_call_request =\n PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n }\n\n /// Increments the side-effect counter.\n ///\n /// Very low-level function.\n ///\n /// # Advanced\n ///\n /// Every side-effect of a private function is given a \"side-effect counter\", based on when it is created. This\n /// PrivateContext is in charge of assigning the counters.\n ///\n /// The reason we have side-effect counters is complicated. Consider this illustrative pseudocode of inter-contract\n /// function calls:\n /// ```\n /// contract A {\n /// let x = 5; // pseudocode for storage var x.\n /// fn a1 {\n /// read x; // value: 5, counter: 1.\n /// x = x + 1;\n /// write x; // value: 6, counter: 2.\n ///\n /// B.b(); // start_counter: 2, end_counter: 4\n ///\n /// read x; // value: 36, counter: 5.\n /// x = x + 1;\n /// write x; // value: 37, counter: 6.\n /// }\n ///\n /// fn a2 {\n /// read x; // value: 6, counter: 3.\n /// x = x * x;\n /// write x; // value: 36, counter: 4.\n /// }\n /// }\n ///\n /// contract B {\n /// fn b() {\n /// A.a2();\n /// }\n /// }\n /// ```\n ///\n /// Suppose a1 is the first function called. The comments show the execution counter of each side-effect, and what\n /// the new value of `x` is.\n ///\n /// These (private) functions are processed by Aztec's kernel circuits in an order that is different from execution\n /// order: All of A.a1 is proven before B.b is proven, before A.a2 is proven. So when we're in the 2nd execution\n /// frame of A.a1 (after the call to B.b), the circuit needs to justify why x went from being `6` to `36`. But the\n /// circuit doesn't know why, and given the order of proving, the kernel hasn't _seen_ a value of 36 get written\n /// yet. The kernel needs to track big arrays of all side-effects of all private functions in a tx. Then, as it\n /// recurses and processes B.b(), it will eventually see a value of 36 get written.\n ///\n /// Suppose side-effect counters weren't exposed: The kernel would only see this ordering (in order of proof\n /// verification): [ A.a1.read, A.a1.write, A.a1.read, A.a1.write, A.a2.read, A.a2.write ]\n /// [ 5, 6, 36, 37, 6, 36 ]\n /// The kernel wouldn't know _when_ B.b() was called within A.a1(), because it can't see what's going on within an\n /// app circuit. So the kernel wouldn't know that the ordering of reads and writes should actually be: [ A.a1.read,\n /// A.a1.write, A.a2.read, A.a2.write, A.a1.read, A.a1.write ]\n /// [ 5, 6, 6, 36, 36, 37 ]\n ///\n /// And so, we introduced side-effect counters: every private function must assign side-effect counters alongside\n /// every side-effect that it emits, and also expose to the kernel the counters that it started and ended with.\n /// This gives the kernel enough information to arrange all side-effects in the correct order. It can then catch\n /// (for example) if a function tries to read state before it has been written (e.g. if A.a2() maliciously tried to\n /// read a value of x=37) (e.g. if A.a1() maliciously tried to read x=6).\n ///\n /// If a malicious app contract _lies_ and does not count correctly:\n /// - It cannot lie about its start and end counters because the kernel will catch this.\n /// - It _could_ lie about its intermediate counters:\n /// - 1. It could not increment its side-effects correctly\n /// - 2. It could label its side-effects with counters outside of its start and end counters' range. The kernel\n /// will catch 2. The kernel will not catch 1., but this would only cause corruption to the private state of the\n /// malicious contract, and not any other contracts (because a contract can only modify its own state). If a \"good\"\n /// contract is given _read access_ to a maliciously-counting contract (via an external getter function, or by\n /// reading historic state from the archive tree directly), and they then make state changes to their _own_ state\n /// accordingly, that could be dangerous. Developers should be mindful not to trust the claimed innards of external\n /// contracts unless they have audited/vetted the contracts including vetting the side-effect counter\n /// incrementation. This is a similar paradigm to Ethereum smart contract development: you must vet external\n /// contracts that your contract relies upon, and you must not make any presumptions about their claimed behaviour.\n /// (Hopefully if a contract imports a version of aztec-nr, we will get contract verification tooling that can\n /// validate the authenticity of the imported aztec-nr package, and hence infer that the side- effect counting will\n /// be correct, without having to re-audit such logic for every contract).\n ///\n fn next_counter(&mut self) -> u32 {\n let counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n counter\n }\n}\n\nimpl Empty for PrivateContext {\n fn empty() -> Self {\n PrivateContext {\n inputs: PrivateContextInputs::empty(),\n side_effect_counter: 0 as u32,\n min_revertible_side_effect_counter: 0 as u32,\n is_fee_payer: false,\n args_hash: 0,\n return_hash: 0,\n expiration_timestamp: 0,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n anchor_block_header: BlockHeader::empty(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n}\n"
|
|
3904
3638
|
},
|
|
3905
3639
|
"71": {
|
|
3906
3640
|
"function_locations": [
|
|
@@ -3953,7 +3687,7 @@
|
|
|
3953
3687
|
"start": 2891
|
|
3954
3688
|
}
|
|
3955
3689
|
],
|
|
3956
|
-
"path": "/home/
|
|
3690
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/context/utility_context.nr",
|
|
3957
3691
|
"source": "use crate::oracle::{execution::{get_utility_context, UtilityContextData}, storage::storage_read};\nuse crate::protocol::{\n abis::block_header::BlockHeader, address::AztecAddress, constants::NULL_MSG_SENDER_CONTRACT_ADDRESS,\n traits::Packable,\n};\n\n// If you'll modify this struct don't forget to update utility_context.ts as well.\npub struct UtilityContext {\n block_header: BlockHeader,\n contract_address: AztecAddress,\n msg_sender: AztecAddress,\n}\n\nimpl From<UtilityContextData> for UtilityContext {\n fn from(data: UtilityContextData) -> Self {\n Self { block_header: data.block_header, contract_address: data.contract_address, msg_sender: data.msg_sender }\n }\n}\n\nimpl UtilityContext {\n pub unconstrained fn new() -> Self {\n get_utility_context()\n }\n\n pub unconstrained fn at(contract_address: AztecAddress) -> Self {\n // We get a context with default contract address, and then we construct the final context with the provided\n // contract address.\n let default_context = get_utility_context();\n\n Self { block_header: default_context.block_header, contract_address, msg_sender: default_context.msg_sender }\n }\n\n pub fn block_header(self) -> BlockHeader {\n self.block_header\n }\n\n pub fn block_number(self) -> u32 {\n self.block_header.block_number()\n }\n\n pub fn timestamp(self) -> u64 {\n self.block_header.timestamp()\n }\n\n pub fn this_address(self) -> AztecAddress {\n self.contract_address\n }\n\n /// Returns the address that initiated this utility call.\n ///\n /// This is similar to `msg.sender` in Solidity (hence the name). A utility function called by another contract\n /// (via a nested utility call) sees that contract's address. A utility function invoked directly (e.g. by a wallet\n /// or dApp) has no caller and sees `Option::none`.\n ///\n /// Important Note: utility functions are simulated client-side and never proven, so this value is whatever the\n /// simulator (PXE) set it to: nothing about it is verified onchain. It exists to assist simulation in a\n /// cooperative environment and must not be relied on as a security guarantee.\n pub unconstrained fn maybe_msg_sender(self) -> Option<AztecAddress> {\n if self.msg_sender == NULL_MSG_SENDER_CONTRACT_ADDRESS {\n Option::none()\n } else {\n Option::some(self.msg_sender)\n }\n }\n\n pub fn version(self) -> Field {\n self.block_header.version()\n }\n\n pub fn chain_id(self) -> Field {\n self.block_header.chain_id()\n }\n\n pub unconstrained fn raw_storage_read<let N: u32>(self: Self, storage_slot: Field) -> [Field; N] {\n storage_read(self.block_header, self.this_address(), storage_slot)\n }\n\n pub unconstrained fn storage_read<T>(self, storage_slot: Field) -> T\n where\n T: Packable,\n {\n T::unpack(self.raw_storage_read(storage_slot))\n }\n}\n"
|
|
3958
3692
|
},
|
|
3959
3693
|
"76": {
|
|
@@ -4003,7 +3737,7 @@
|
|
|
4003
3737
|
"start": 3259
|
|
4004
3738
|
}
|
|
4005
3739
|
],
|
|
4006
|
-
"path": "/home/
|
|
3740
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/ephemeral/mod.nr",
|
|
4007
3741
|
"source": "use crate::oracle::ephemeral_oracles;\nuse crate::protocol::traits::{Deserialize, Serialize};\nuse crate::protocol::utils::{reader::Reader, writer::Writer};\nuse crate::unconstrained_array::{ArrayOracles, UnconstrainedArray};\n\n/// A dynamically sized array that exists only during a single contract call frame.\n///\n/// Ephemeral arrays are backed by in-memory storage on the PXE side rather than a persistent database. Each contract\n/// call frame gets its own isolated slot space of ephemeral arrays. Child simulations cannot see the parent's\n/// ephemeral arrays, and vice versa.\n///\n/// Each logical array operation (push, pop, get, etc.) is a single oracle call, making ephemeral arrays significantly\n/// cheaper than capsule arrays.\n///\n/// ## Use Cases\n///\n/// Ephemeral arrays are designed for passing data between PXE (TypeScript) and contracts (Noir) during simulation,\n/// for example, note validation requests or event validation responses. This data type is appropriate for data that\n/// is not supposed to be persisted.\n///\n/// For data that needs to persist across simulations, contract calls, etc, use\n/// [`CapsuleArray`](crate::capsules::CapsuleArray) instead.\n///\n/// For data that must be shared across all frames of the same contract (private and utility) within one top-level PXE\n/// call (transaction simulation or utility call) but not persisted, use\n/// [`TransientArray`](crate::transient::TransientArray).\npub type EphemeralArray<T> = UnconstrainedArray<T, EphemeralOracles>;\n\npub struct EphemeralOracles {}\n\nimpl ArrayOracles for EphemeralOracles {\n unconstrained fn len_oracle(slot: Field) -> u32 {\n ephemeral_oracles::len_oracle(slot)\n }\n\n unconstrained fn push_oracle<let N: u32>(slot: Field, values: [Field; N]) -> u32 {\n ephemeral_oracles::push_oracle(slot, values)\n }\n\n unconstrained fn pop_oracle<let N: u32>(slot: Field) -> [Field; N] {\n ephemeral_oracles::pop_oracle(slot)\n }\n\n unconstrained fn get_oracle<let N: u32>(slot: Field, index: u32) -> [Field; N] {\n ephemeral_oracles::get_oracle(slot, index)\n }\n\n unconstrained fn set_oracle<let N: u32>(slot: Field, index: u32, values: [Field; N]) {\n ephemeral_oracles::set_oracle(slot, index, values)\n }\n\n unconstrained fn remove_oracle(slot: Field, index: u32) {\n ephemeral_oracles::remove_oracle(slot, index)\n }\n\n unconstrained fn clear_oracle(slot: Field) {\n ephemeral_oracles::clear_oracle(slot)\n }\n}\n\n/// Serializes an `EphemeralArray` as its slot, allowing oracle function signatures to use ephemeral array types\n/// instead of opaque `Field` slots.\nimpl<T> Serialize for UnconstrainedArray<T, EphemeralOracles> {\n let N: u32 = 1;\n\n fn serialize(self) -> [Field; Self::N] {\n [self.slot]\n }\n\n fn stream_serialize<let K: u32>(self, writer: &mut Writer<K>) {\n writer.write(self.slot);\n }\n}\n\n/// Deserializes a single Field into an `EphemeralArray` handle, treating the field value as the slot identifier.\nimpl<T> Deserialize for UnconstrainedArray<T, EphemeralOracles> {\n let N: u32 = 1;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n Self { slot: fields[0] }\n }\n\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n Self { slot: reader.read() }\n }\n}\n\n#[crate::unconstrained_array::test_suite::unconstrained_array_tests(quote { crate::ephemeral::EphemeralOracles })]\nmod test {}\n"
|
|
4008
3742
|
},
|
|
4009
3743
|
"78": {
|
|
@@ -4025,7 +3759,7 @@
|
|
|
4025
3759
|
"start": 2814
|
|
4026
3760
|
}
|
|
4027
3761
|
],
|
|
4028
|
-
"path": "/home/
|
|
3762
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/event/event_interface.nr",
|
|
4029
3763
|
"source": "use crate::{event::EventSelector, messages::logs::event::MAX_EVENT_SERIALIZED_LEN};\nuse crate::protocol::{\n constants::DOM_SEP__EVENT_COMMITMENT,\n hash::{poseidon2_hash_with_separator, poseidon2_hash_with_separator_bounded_vec},\n traits::{Serialize, ToField},\n};\n\npub trait EventInterface {\n fn get_event_type_id() -> EventSelector;\n}\n\n/// A private event's commitment is a value stored on-chain which is used to verify that the event was indeed emitted.\n///\n/// It requires a `randomness` value that must be produced alongside the event in order to perform said validation.\n/// This random value prevents attacks in which someone guesses plausible events (e.g. 'Alice transfers to Bob an\n/// amount of 10'), since they will not be able to test for existence of their guessed events without brute-forcing the\n/// entire `Field` space by guessing `randomness` values.\npub fn compute_private_event_commitment<Event>(event: Event, randomness: Field) -> Field\nwhere\n Event: EventInterface + Serialize,\n{\n poseidon2_hash_with_separator(\n [randomness, Event::get_event_type_id().to_field()].concat(event.serialize()),\n DOM_SEP__EVENT_COMMITMENT,\n )\n}\n\n/// Unconstrained variant of [`compute_private_event_commitment`] which takes the event in serialized form.\n///\n/// This function is unconstrained as the mechanism it uses to compute the commitment would be very inefficient in a\n/// constrained environment (due to the hashing of a dynamically sized array). This is not an issue as it is typically\n/// invoked when processing event messages, which is an unconstrained operation.\npub unconstrained fn compute_private_serialized_event_commitment(\n serialized_event: BoundedVec<Field, MAX_EVENT_SERIALIZED_LEN>,\n randomness: Field,\n event_type_id: Field,\n) -> Field {\n let mut commitment_preimage =\n BoundedVec::<_, 2 + MAX_EVENT_SERIALIZED_LEN>::from_array([randomness, event_type_id]);\n commitment_preimage.extend_from_bounded_vec(serialized_event);\n\n poseidon2_hash_with_separator_bounded_vec(commitment_preimage, DOM_SEP__EVENT_COMMITMENT)\n}\n\nmod test {\n use crate::event::event_interface::{\n compute_private_event_commitment, compute_private_serialized_event_commitment, EventInterface,\n };\n use crate::messages::logs::event::MAX_EVENT_SERIALIZED_LEN;\n use crate::protocol::traits::{Serialize, ToField};\n use crate::test::mocks::mock_event::MockEvent;\n\n global VALUE: Field = 7;\n global RANDOMNESS: Field = 10;\n\n #[test]\n unconstrained fn max_size_serialized_event_commitment() {\n let serialized_event = BoundedVec::from_array([0; MAX_EVENT_SERIALIZED_LEN]);\n let _ = compute_private_serialized_event_commitment(serialized_event, 0, 0);\n }\n\n #[test]\n unconstrained fn event_commitment_equivalence() {\n let event = MockEvent::new(VALUE).build_event();\n\n assert_eq(\n compute_private_event_commitment(event, RANDOMNESS),\n compute_private_serialized_event_commitment(\n BoundedVec::from_array(event.serialize()),\n RANDOMNESS,\n MockEvent::get_event_type_id().to_field(),\n ),\n );\n }\n}\n"
|
|
4030
3764
|
},
|
|
4031
3765
|
"80": {
|
|
@@ -4055,7 +3789,7 @@
|
|
|
4055
3789
|
"start": 985
|
|
4056
3790
|
}
|
|
4057
3791
|
],
|
|
4058
|
-
"path": "/home/
|
|
3792
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/event/event_selector.nr",
|
|
4059
3793
|
"source": "use crate::protocol::{hash::poseidon2_hash_bytes, traits::{Deserialize, Empty, FromField, Serialize, ToField}};\n\n#[derive(Deserialize, Eq, Serialize)]\npub struct EventSelector {\n // Low 32 bits of the poseidon2 hash of the event signature.\n inner: u32,\n}\n\nimpl FromField for EventSelector {\n fn from_field(field: Field) -> Self {\n Self { inner: field as u32 }\n }\n}\n\nimpl ToField for EventSelector {\n fn to_field(self) -> Field {\n self.inner as Field\n }\n}\n\nimpl Empty for EventSelector {\n fn empty() -> Self {\n Self { inner: 0 as u32 }\n }\n}\n\nimpl EventSelector {\n pub fn from_u32(value: u32) -> Self {\n Self { inner: value }\n }\n\n pub fn from_signature<let N: u32>(signature: str<N>) -> Self {\n let bytes = signature.as_bytes();\n let hash = poseidon2_hash_bytes(bytes);\n\n // `hash` is automatically truncated to fit within 32 bits.\n EventSelector::from_field(hash)\n }\n\n pub fn zero() -> Self {\n Self { inner: 0 }\n }\n}\n"
|
|
4060
3794
|
},
|
|
4061
3795
|
"82": {
|
|
@@ -4137,7 +3871,7 @@
|
|
|
4137
3871
|
"start": 12385
|
|
4138
3872
|
}
|
|
4139
3873
|
],
|
|
4140
|
-
"path": "/home/
|
|
3874
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/facts/mod.nr",
|
|
4141
3875
|
"source": "//! Per-contract storage of immutable facts grouped into collections.\n//!\n//! A fact is a contract-defined, typed, immutable datum. Facts are grouped into collections identified by a\n//! `(collection type, collection id)` tuple.\n//!\n//! They are stored in PXE's FactStore, which automatically deals with reorgs by removing any facts\n//! associated with blocks that have been pruned.\nuse crate::ephemeral::EphemeralArray;\nuse crate::oracle::fact_store::{\n delete_fact_collection_oracle, get_fact_collection_oracle, get_fact_collections_by_type_oracle, record_fact_oracle,\n};\nuse crate::protocol::{address::AztecAddress, traits::{Deserialize, Serialize}};\n\nmod origin_state;\npub use origin_state::OriginBlockState;\n\n/// The block a retractable fact originates from.\n#[derive(Deserialize, Eq, Serialize)]\npub struct OriginBlock {\n pub block_number: u32,\n pub block_hash: Field,\n}\n\n/// A retractable fact's origin block.\n#[derive(Deserialize, Eq, Serialize)]\npub struct RetractableFactOrigin {\n pub block_number: u32,\n pub block_hash: Field,\n pub block_state: OriginBlockState,\n}\n\n/// A single immutable fact in a collection.\n#[derive(Deserialize, Serialize)]\npub struct Fact {\n /// A user-defined identifier for fact kinds. Typically used to determine how to deserialize `payload`.\n pub fact_type_id: Field,\n pub payload: EphemeralArray<Field>,\n /// The block the fact is associated to, if any. A fact with an origin block is said to be a 'retractable' fact,\n /// and will be automatically deleted if its origin block gets pruned in a reorg. Typically used by facts\n /// associated with a transaction (e.g. 'processed entry X using data from tx Y in block Z').\n pub origin_block: Option<RetractableFactOrigin>,\n}\n\n/// A fact collection as returned by the store.\n#[derive(Deserialize, Serialize)]\npub struct FactCollection {\n pub contract_address: AztecAddress,\n pub scope: AztecAddress,\n /// The collection's type. A single contract may have facts in collections of different types (e.g. one for the\n /// processing offchain messages, another for partial notes, etc.).\n pub fact_collection_type_id: Field,\n /// The collection's unique identifier among the other collections of this type in this contract and scope.\n pub fact_collection_id: Field,\n pub facts: EphemeralArray<Fact>,\n}\n\n/// Records a retractable fact into a collection: PXE prunes it if `origin_block` is reorg'd away. Re-recording an\n/// identical fact is a no-op.\npub unconstrained fn record_retractable_fact(\n contract_address: AztecAddress,\n scope: AztecAddress,\n fact_collection_type_id: Field,\n fact_collection_id: Field,\n fact_type_id: Field,\n payload: EphemeralArray<Field>,\n origin_block: OriginBlock,\n) {\n record_fact_oracle(\n contract_address,\n scope,\n fact_collection_type_id,\n fact_collection_id,\n fact_type_id,\n payload,\n Option::some(origin_block),\n );\n}\n\n/// Records a non-retractable fact into a collection: it survives reorgs and will persist until the fact collection\n/// itself is deleted. Re-recording an identical fact is a no-op.\npub unconstrained fn record_non_retractable_fact(\n contract_address: AztecAddress,\n scope: AztecAddress,\n fact_collection_type_id: Field,\n fact_collection_id: Field,\n fact_type_id: Field,\n payload: EphemeralArray<Field>,\n) {\n record_fact_oracle(\n contract_address,\n scope,\n fact_collection_type_id,\n fact_collection_id,\n fact_type_id,\n payload,\n Option::none(),\n );\n}\n\n/// Deletes a fact collection, removing all its facts from PXE storage.\n///\n/// Collections must be eventually deleted to reclaim storage and to stop reprocessing past the lifespan of the\n/// workflows they enable.\n///\n/// A no-op if no such collection exists.\npub unconstrained fn delete_fact_collection(\n contract_address: AztecAddress,\n scope: AztecAddress,\n fact_collection_type_id: Field,\n fact_collection_id: Field,\n) {\n delete_fact_collection_oracle(\n contract_address,\n scope,\n fact_collection_type_id,\n fact_collection_id,\n );\n}\n\n/// Fetches a fact collection.\npub unconstrained fn get_fact_collection(\n contract_address: AztecAddress,\n scope: AztecAddress,\n fact_collection_type_id: Field,\n fact_collection_id: Field,\n) -> Option<FactCollection> {\n get_fact_collection_oracle(\n contract_address,\n scope,\n fact_collection_type_id,\n fact_collection_id,\n )\n}\n\n/// Returns every fact collection of `fact_collection_type_id`.\npub unconstrained fn get_fact_collections_by_type(\n contract_address: AztecAddress,\n scope: AztecAddress,\n fact_collection_type_id: Field,\n) -> EphemeralArray<FactCollection> {\n get_fact_collections_by_type_oracle(contract_address, scope, fact_collection_type_id)\n}\n\nmod test {\n use crate::ephemeral::EphemeralArray;\n use crate::facts::{\n delete_fact_collection, get_fact_collection, get_fact_collections_by_type, OriginBlock,\n record_non_retractable_fact, record_retractable_fact,\n };\n use crate::protocol::address::AztecAddress;\n use crate::protocol::traits::{FromField, ToField};\n use crate::test::helpers::test_environment::TestEnvironment;\n\n global TYPE_ID: Field = 42;\n global COLLECTION_ID: Field = 7;\n global FACT_TYPE_ID: Field = 99;\n global PAYLOAD: [Field; 3] = [123, 456, 789];\n\n unconstrained fn setup() -> (TestEnvironment, AztecAddress) {\n let mut env = TestEnvironment::new();\n let scope = env.create_light_account();\n (env, scope)\n }\n\n unconstrained fn make_payload<let N: u32>(values: [Field; N]) -> EphemeralArray<Field> {\n let payload: EphemeralArray<Field> = EphemeralArray::empty();\n for i in 0..N {\n payload.push(values[i]);\n }\n payload\n }\n\n unconstrained fn assert_payload(payload: EphemeralArray<Field>) {\n assert_eq(payload.len(), PAYLOAD.len());\n for i in 0..PAYLOAD.len() {\n assert_eq(payload.get(i), PAYLOAD[i]);\n }\n }\n\n unconstrained fn record_fact(contract_address: AztecAddress, scope: AztecAddress) {\n record_non_retractable_fact(\n contract_address,\n scope,\n TYPE_ID,\n COLLECTION_ID,\n FACT_TYPE_ID,\n make_payload(PAYLOAD),\n );\n }\n\n #[test]\n unconstrained fn records_and_reads_a_fact() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n record_fact(contract_address, scope);\n\n let collection = get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).unwrap();\n assert_eq(collection.contract_address, contract_address);\n assert_eq(collection.scope, scope);\n assert_eq(collection.fact_collection_type_id, TYPE_ID);\n assert_eq(collection.fact_collection_id, COLLECTION_ID);\n assert_eq(collection.facts.len(), 1);\n\n let fact = collection.facts.get(0);\n assert_eq(fact.fact_type_id, FACT_TYPE_ID);\n assert_payload(fact.payload);\n assert(fact.origin_block.is_none());\n });\n }\n\n #[test]\n unconstrained fn reads_collections_by_type() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n record_fact(contract_address, scope);\n\n let collections = get_fact_collections_by_type(contract_address, scope, TYPE_ID);\n assert_eq(collections.len(), 1);\n\n let collection = collections.get(0);\n assert_eq(collection.fact_collection_id, COLLECTION_ID);\n assert_eq(collection.facts.len(), 1);\n\n let fact = collection.facts.get(0);\n assert_eq(fact.fact_type_id, FACT_TYPE_ID);\n assert_payload(fact.payload);\n });\n }\n\n #[test]\n unconstrained fn records_a_retractable_fact_finalized_at_latest_block() {\n let (env, scope) = setup();\n let origin_block_number = env.last_block_number();\n env.private_context(|context| {\n let contract_address = context.this_address();\n record_retractable_fact(\n contract_address,\n scope,\n TYPE_ID,\n COLLECTION_ID,\n FACT_TYPE_ID,\n make_payload(PAYLOAD),\n OriginBlock { block_number: origin_block_number, block_hash: 0xabc },\n );\n\n let collection = get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).unwrap();\n assert_eq(collection.facts.len(), 1);\n\n let fact = collection.facts.get(0);\n assert_eq(fact.fact_type_id, FACT_TYPE_ID);\n assert_payload(fact.payload);\n\n let origin = fact.origin_block.unwrap();\n assert_eq(origin.block_number, origin_block_number);\n assert_eq(origin.block_hash, 0xabc);\n // TXE finalizes every mined block, so an origin at the latest block is Finalized.\n assert(origin.block_state.is_finalized());\n });\n }\n\n #[test]\n unconstrained fn retractable_fact_above_proven_tip_is_pending() {\n let (env, scope) = setup();\n let future_block_number = env.last_block_number() + 100;\n env.private_context(|context| {\n let contract_address = context.this_address();\n record_retractable_fact(\n contract_address,\n scope,\n TYPE_ID,\n COLLECTION_ID,\n FACT_TYPE_ID,\n make_payload(PAYLOAD),\n OriginBlock { block_number: future_block_number, block_hash: 0xabc },\n );\n\n let origin = get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID)\n .unwrap()\n .facts\n .get(0)\n .origin_block\n .unwrap();\n assert(origin.block_state.is_pending());\n });\n }\n\n #[test]\n unconstrained fn deletes_a_fact_collection() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n record_fact(contract_address, scope);\n delete_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID);\n\n let collections = get_fact_collections_by_type(contract_address, scope, TYPE_ID);\n assert_eq(collections.len(), 0);\n });\n }\n\n #[test]\n unconstrained fn reading_unknown_collection_returns_none() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n let collection = get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID);\n assert(collection.is_none());\n });\n }\n\n #[test(should_fail_with = \"not allowed to access\")]\n unconstrained fn cannot_record_for_other_contract() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let other = AztecAddress::from_field(context.this_address().to_field() + 1);\n record_fact(other, scope);\n });\n }\n\n #[test]\n unconstrained fn re_recording_an_identical_fact_is_a_no_op() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n record_fact(contract_address, scope);\n record_fact(contract_address, scope);\n\n let collection = get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).unwrap();\n assert_eq(collection.facts.len(), 1);\n });\n }\n\n #[test]\n unconstrained fn deleting_a_non_existing_collection_is_a_no_op() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n delete_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID);\n\n assert(get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).is_none());\n });\n }\n\n #[test]\n unconstrained fn recording_a_fact_after_delete_recreates_the_collection() {\n let (env, scope) = setup();\n env.private_context(|context| {\n let contract_address = context.this_address();\n\n record_fact(contract_address, scope);\n let collection_before_delete =\n get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).unwrap();\n assert_eq(collection_before_delete.facts.len(), 1);\n\n delete_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID);\n assert(get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).is_none());\n\n record_fact(contract_address, scope);\n let collection_after_recreate =\n get_fact_collection(contract_address, scope, TYPE_ID, COLLECTION_ID).unwrap();\n assert_eq(collection_after_recreate.facts.len(), 1);\n });\n }\n}\n"
|
|
4142
3876
|
},
|
|
4143
3877
|
"83": {
|
|
@@ -4199,54 +3933,54 @@
|
|
|
4199
3933
|
"start": 3216
|
|
4200
3934
|
}
|
|
4201
3935
|
],
|
|
4202
|
-
"path": "/home/
|
|
3936
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/facts/origin_state.nr",
|
|
4203
3937
|
"source": "use crate::protocol::{traits::{Deserialize, Serialize}, utils::reader::Reader};\n\n/// Chain state of a retractable fact's origin block, mirroring the L2 chain tips.\n#[derive(Serialize)]\npub struct OriginBlockState {\n // Noir has no enums, so this wraps a `u8` discriminant. The discriminant values must stay in sync with the\n // TypeScript `OriginBlockState` enum in `yarn-project/pxe/src/storage/fact_store/origin_state.ts`, which PXE\n // serializes into the `Fact` oracle response that `from_u8` below deserializes.\n inner: u8,\n}\n\nimpl OriginBlockState {\n pub fn pending() -> Self {\n Self { inner: 1 }\n }\n\n pub fn proven() -> Self {\n Self { inner: 2 }\n }\n\n pub fn finalized() -> Self {\n Self { inner: 3 }\n }\n\n /// Whether the origin block is still above the proven tip.\n pub fn is_pending(self) -> bool {\n self == Self::pending()\n }\n\n /// Whether the origin block is proven but not yet finalized.\n pub fn is_proven(self) -> bool {\n self == Self::proven()\n }\n\n /// Whether the origin block is finalized, and thus facts related to it can no longer be retracted.\n pub fn is_finalized(self) -> bool {\n self == Self::finalized()\n }\n\n fn from_u8(inner: u8) -> Self {\n let state = Self { inner };\n assert(state.is_valid(), \"unrecognized origin state\");\n state\n }\n\n fn is_valid(self) -> bool {\n self.is_pending() | self.is_proven() | self.is_finalized()\n }\n}\n\nimpl Eq for OriginBlockState {\n fn eq(self, other: Self) -> bool {\n self.inner == other.inner\n }\n}\n\nimpl Deserialize for OriginBlockState {\n let N: u32 = <u8 as Deserialize>::N;\n\n fn deserialize(fields: [Field; Self::N]) -> Self {\n Self::from_u8(<u8 as Deserialize>::deserialize(fields))\n }\n\n fn stream_deserialize<let K: u32>(reader: &mut Reader<K>) -> Self {\n Self::from_u8(reader.read() as u8)\n }\n}\n\nmod test {\n use crate::protocol::traits::{Deserialize, Serialize};\n use super::OriginBlockState;\n\n #[test]\n fn query_functions_identify_each_state() {\n assert(OriginBlockState::pending().is_pending());\n assert(!OriginBlockState::pending().is_proven());\n assert(!OriginBlockState::pending().is_finalized());\n\n assert(OriginBlockState::proven().is_proven());\n assert(!OriginBlockState::proven().is_pending());\n assert(!OriginBlockState::proven().is_finalized());\n\n assert(OriginBlockState::finalized().is_finalized());\n assert(!OriginBlockState::finalized().is_pending());\n assert(!OriginBlockState::finalized().is_proven());\n }\n\n #[test]\n fn origin_state_roundtrips_through_serialization() {\n let pending = OriginBlockState::pending();\n let proven = OriginBlockState::proven();\n let finalized = OriginBlockState::finalized();\n assert(OriginBlockState::deserialize(pending.serialize()) == pending);\n assert(OriginBlockState::deserialize(proven.serialize()) == proven);\n assert(OriginBlockState::deserialize(finalized.serialize()) == finalized);\n }\n\n #[test(should_fail_with = \"unrecognized origin state\")]\n fn deserializing_invalid_state_fails() {\n let _ = OriginBlockState::deserialize([99]);\n }\n}\n"
|
|
4204
3938
|
},
|
|
4205
3939
|
"84": {
|
|
4206
3940
|
"function_locations": [
|
|
4207
3941
|
{
|
|
4208
3942
|
"name": "compute_secret_hash",
|
|
4209
|
-
"start":
|
|
3943
|
+
"start": 519
|
|
4210
3944
|
},
|
|
4211
3945
|
{
|
|
4212
3946
|
"name": "compute_l1_to_l2_message_hash",
|
|
4213
|
-
"start":
|
|
3947
|
+
"start": 800
|
|
4214
3948
|
},
|
|
4215
3949
|
{
|
|
4216
3950
|
"name": "compute_l1_to_l2_message_nullifier",
|
|
4217
|
-
"start":
|
|
3951
|
+
"start": 1858
|
|
4218
3952
|
},
|
|
4219
3953
|
{
|
|
4220
3954
|
"name": "hash_args",
|
|
4221
|
-
"start":
|
|
3955
|
+
"start": 2110
|
|
4222
3956
|
},
|
|
4223
3957
|
{
|
|
4224
3958
|
"name": "hash_calldata_array",
|
|
4225
|
-
"start":
|
|
3959
|
+
"start": 2362
|
|
4226
3960
|
},
|
|
4227
3961
|
{
|
|
4228
3962
|
"name": "compute_public_bytecode_commitment",
|
|
4229
|
-
"start":
|
|
3963
|
+
"start": 2994
|
|
4230
3964
|
},
|
|
4231
3965
|
{
|
|
4232
3966
|
"name": "secret_hash_matches_typescript",
|
|
4233
|
-
"start":
|
|
3967
|
+
"start": 4153
|
|
4234
3968
|
},
|
|
4235
3969
|
{
|
|
4236
3970
|
"name": "var_args_hash_matches_typescript",
|
|
4237
|
-
"start":
|
|
3971
|
+
"start": 4512
|
|
4238
3972
|
},
|
|
4239
3973
|
{
|
|
4240
3974
|
"name": "compute_calldata_hash",
|
|
4241
|
-
"start":
|
|
3975
|
+
"start": 4922
|
|
4242
3976
|
},
|
|
4243
3977
|
{
|
|
4244
3978
|
"name": "public_bytecode_commitment",
|
|
4245
|
-
"start":
|
|
3979
|
+
"start": 5385
|
|
4246
3980
|
}
|
|
4247
3981
|
],
|
|
4248
|
-
"path": "/home/
|
|
4249
|
-
"source": "//! Aztec hash functions.\n\nuse crate::protocol::{\n address::{AztecAddress, EthAddress},\n constants::{\n DOM_SEP__FUNCTION_ARGS, DOM_SEP__MESSAGE_NULLIFIER, DOM_SEP__PUBLIC_BYTECODE, DOM_SEP__PUBLIC_CALLDATA,\n DOM_SEP__SECRET_HASH, MAX_PACKED_PUBLIC_BYTECODE_SIZE_IN_FIELDS,\n },\n hash::{poseidon2_hash_subarray, poseidon2_hash_with_separator, sha256_to_field},\n traits::ToField,\n};\n\npub use crate::protocol::hash::compute_siloed_nullifier;\n\npub fn compute_secret_hash
|
|
3982
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/hash.nr",
|
|
3983
|
+
"source": "//! Aztec hash functions.\n\nuse crate::protocol::{\n address::{AztecAddress, EthAddress},\n constants::{\n DOM_SEP__FUNCTION_ARGS, DOM_SEP__MESSAGE_NULLIFIER, DOM_SEP__PUBLIC_BYTECODE, DOM_SEP__PUBLIC_CALLDATA,\n DOM_SEP__SECRET_HASH, MAX_PACKED_PUBLIC_BYTECODE_SIZE_IN_FIELDS,\n },\n hash::{poseidon2_hash_subarray, poseidon2_hash_with_separator, sha256_to_field},\n traits::ToField,\n};\n\npub use crate::protocol::hash::compute_siloed_nullifier;\n\npub fn compute_secret_hash(secret: Field) -> Field {\n poseidon2_hash_with_separator([secret], DOM_SEP__SECRET_HASH)\n}\n\npub fn compute_l1_to_l2_message_hash(\n sender: EthAddress,\n chain_id: Field,\n recipient: AztecAddress,\n version: Field,\n content: Field,\n secret_hash: Field,\n leaf_index: Field,\n) -> Field {\n let mut hash_bytes = [0 as u8; 224];\n let sender_bytes: [u8; 32] = sender.to_field().to_be_bytes();\n let chain_id_bytes: [u8; 32] = chain_id.to_be_bytes();\n let recipient_bytes: [u8; 32] = recipient.to_field().to_be_bytes();\n let version_bytes: [u8; 32] = version.to_be_bytes();\n let content_bytes: [u8; 32] = content.to_be_bytes();\n let secret_hash_bytes: [u8; 32] = secret_hash.to_be_bytes();\n let leaf_index_bytes: [u8; 32] = leaf_index.to_be_bytes();\n\n for i in 0..32 {\n hash_bytes[i] = sender_bytes[i];\n hash_bytes[i + 32] = chain_id_bytes[i];\n hash_bytes[i + 64] = recipient_bytes[i];\n hash_bytes[i + 96] = version_bytes[i];\n hash_bytes[i + 128] = content_bytes[i];\n hash_bytes[i + 160] = secret_hash_bytes[i];\n hash_bytes[i + 192] = leaf_index_bytes[i];\n }\n\n sha256_to_field(hash_bytes)\n}\n\n// The nullifier of a l1 to l2 message is the hash of the message salted with the secret\npub fn compute_l1_to_l2_message_nullifier(message_hash: Field, secret: Field) -> Field {\n poseidon2_hash_with_separator([message_hash, secret], DOM_SEP__MESSAGE_NULLIFIER)\n}\n\n// Computes the hash of input arguments or return values for private functions, or for authwit creation.\npub fn hash_args<let N: u32>(args: [Field; N]) -> Field {\n if args.len() == 0 {\n 0\n } else {\n poseidon2_hash_with_separator(args, DOM_SEP__FUNCTION_ARGS)\n }\n}\n\n// Computes the hash of calldata for public functions.\npub fn hash_calldata_array<let N: u32>(calldata: [Field; N]) -> Field {\n poseidon2_hash_with_separator(calldata, DOM_SEP__PUBLIC_CALLDATA)\n}\n\n/// Computes the public bytecode commitment for a contract class. The commitment is `hash([(length | separator),\n/// ...bytecode])`.\n///\n/// @param packed_bytecode - The packed bytecode of the contract class. 0th word is the length in bytes.\n/// packed_bytecode is mutable so that we can avoid copying the array to construct one starting with first_field\n/// instead of length. @returns The public bytecode commitment.\npub fn compute_public_bytecode_commitment(\n mut packed_public_bytecode: [Field; MAX_PACKED_PUBLIC_BYTECODE_SIZE_IN_FIELDS],\n) -> Field {\n // First field element contains the length of the bytecode\n let bytecode_length_in_bytes: u32 = packed_public_bytecode[0] as u32;\n let bytecode_length_in_fields: u32 = (bytecode_length_in_bytes / 31) + (bytecode_length_in_bytes % 31 != 0) as u32;\n // Don't allow empty public bytecode. AVM doesn't handle execution of contracts that exist with empty bytecode.\n assert(bytecode_length_in_fields != 0);\n assert(bytecode_length_in_fields < MAX_PACKED_PUBLIC_BYTECODE_SIZE_IN_FIELDS);\n\n // Packed_bytecode's 0th entry is the length. Append it to the separator before hashing.\n let first_field = DOM_SEP__PUBLIC_BYTECODE.to_field() + (packed_public_bytecode[0] as u64 << 32) as Field;\n packed_public_bytecode[0] = first_field;\n\n // `fields_to_hash` is the number of fields from the start of `packed_public_bytecode` that should be included in\n // the hash. Fields after this length are ignored. +1 to account for the prepended field.\n let num_fields_to_hash = bytecode_length_in_fields + 1;\n\n poseidon2_hash_subarray(packed_public_bytecode, num_fields_to_hash)\n}\n\n#[test]\nunconstrained fn secret_hash_matches_typescript() {\n let secret = 8;\n let hash = compute_secret_hash(secret);\n\n // The following value was generated by `yarn-project/stdlib/src/hash/hash.test.ts`\n let secret_hash_from_ts = 0x1848b066724ab0ffb50ecb0ee3398eb839f162823d262bad959721a9c13d1e96;\n\n assert_eq(hash, secret_hash_from_ts);\n}\n\n#[test]\nunconstrained fn var_args_hash_matches_typescript() {\n let mut input = [0; 100];\n for i in 0..100 {\n input[i] = i as Field;\n }\n let hash = hash_args(input);\n\n // The following value was generated by `yarn-project/stdlib/src/hash/hash.test.ts`\n let var_args_hash_from_ts = 0x262e5e121a8efc0382566ab42f0ae2a78bd85db88484f83018fe07fc2552ba0c;\n\n assert_eq(hash, var_args_hash_from_ts);\n}\n\n#[test]\nunconstrained fn compute_calldata_hash() {\n let mut input = [0; 100];\n for i in 0..input.len() {\n input[i] = i as Field;\n }\n let hash = hash_calldata_array(input);\n\n // The following value was generated by `yarn-project/stdlib/src/hash/hash.test.ts`\n let calldata_hash_from_ts = 0x14a1539bdb1d26e03097cf4d40c87e02ca03f0bb50a3e617ace5a7bfd3943944;\n\n // Used in cpp vm2 tests:\n assert_eq(hash, calldata_hash_from_ts);\n}\n\n#[test]\nunconstrained fn public_bytecode_commitment() {\n let mut input = [0; MAX_PACKED_PUBLIC_BYTECODE_SIZE_IN_FIELDS];\n let len = 99;\n for i in 1..len + 1 {\n input[i] = i as Field;\n }\n input[0] = (len as Field) * 31;\n let hash = compute_public_bytecode_commitment(input);\n // Used in cpp vm2 tests:\n assert_eq(hash, 0x09348974e76c3602893d7a4b4bb52c2ec746f1ade5004ac471d0fbb4587a81a6);\n}\n"
|
|
4250
3984
|
},
|
|
4251
3985
|
"95": {
|
|
4252
3986
|
"function_locations": [
|
|
@@ -4283,7 +4017,7 @@
|
|
|
4283
4017
|
"start": 5055
|
|
4284
4018
|
}
|
|
4285
4019
|
],
|
|
4286
|
-
"path": "/home/
|
|
4020
|
+
"path": "/home/aztec-dev/aztec-packages-private/noir-projects/aztec-nr/aztec/src/keys/ecdh_shared_secret.nr",
|
|
4287
4021
|
"source": "use crate::protocol::{\n address::aztec_address::AztecAddress,\n constants::{DOM_SEP__APP_SILOED_ECDH_SHARED_SECRET, DOM_SEP__ECDH_FIELD_MASK, DOM_SEP__ECDH_SUBKEY},\n hash::poseidon2_hash_with_separator,\n point::EmbeddedCurvePoint,\n scalar::Scalar,\n traits::{FromField, ToField},\n};\nuse std::{embedded_curve_ops::multi_scalar_mul, ops::Neg};\n\n/// Computes a standard ECDH shared secret: secret * public_key = shared_secret.\n///\n/// The input secret is known only to one party. The output shared secret can be derived given knowledge of\n/// `public_key`'s key-pair and the public ephemeral secret, using this same function (with reversed inputs).\n///\n/// E.g.: Epk = esk * G // ephemeral key-pair\n/// Pk = sk * G // recipient key-pair\n/// Shared secret S = esk * Pk = sk * Epk\n///\n/// See also: https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman\npub fn derive_ecdh_shared_secret(secret: Scalar, public_key: EmbeddedCurvePoint) -> EmbeddedCurvePoint {\n multi_scalar_mul([public_key], [secret])\n}\n\n/// Computes an app-siloed shared secret from a raw ECDH shared secret point and a contract address.\n///\n/// `s_app = h(DOM_SEP__APP_SILOED_ECDH_SHARED_SECRET, S.x, S.y, contract_address)`\npub fn compute_app_siloed_shared_secret(shared_secret: EmbeddedCurvePoint, contract_address: AztecAddress) -> Field {\n poseidon2_hash_with_separator(\n [shared_secret.x, shared_secret.y, contract_address.to_field()],\n DOM_SEP__APP_SILOED_ECDH_SHARED_SECRET,\n )\n}\n\n/// Derives an indexed subkey from an app-siloed shared secret, used for AES key/IV derivation.\n///\n/// `s_i = h(DOM_SEP__ECDH_SUBKEY + i, s_app)`\npub(crate) fn derive_shared_secret_subkey(s_app: Field, index: u32) -> Field {\n poseidon2_hash_with_separator([s_app], DOM_SEP__ECDH_SUBKEY + index)\n}\n\n/// Derives an indexed field mask from an app-siloed shared secret, used for masking ciphertext fields.\n///\n/// `m_i = h(DOM_SEP__ECDH_FIELD_MASK + i, s_app)`\npub(crate) fn derive_shared_secret_field_mask(s_app: Field, index: u32) -> Field {\n poseidon2_hash_with_separator([s_app], DOM_SEP__ECDH_FIELD_MASK + index)\n}\n\n#[test]\nunconstrained fn test_consistency_with_typescript() {\n let secret = Scalar {\n lo: 0x00000000000000000000000000000000649e7ca01d9de27b21624098b897babd,\n hi: 0x0000000000000000000000000000000023b3127c127b1f29a7adff5cccf8fb06,\n };\n let point = EmbeddedCurvePoint {\n x: 0x2688431c705a5ff3e6c6f2573c9e3ba1c1026d2251d0dbbf2d810aa53fd1d186,\n y: 0x1e96887b117afca01c00468264f4f80b5bb16d94c1808a448595f115556e5c8e,\n };\n\n let shared_secret = derive_ecdh_shared_secret(secret, point);\n\n // This is just pasted from a test run. The original typescript code from which this could be generated seems to\n // have been deleted by someone, and soon the typescript code for encryption and decryption won't be needed, so\n // this will have to do.\n let hard_coded_shared_secret = EmbeddedCurvePoint {\n x: 0x15d55a5b3b2caa6a6207f313f05c5113deba5da9927d6421bcaa164822b911bc,\n y: 0x0974c3d0825031ae933243d653ebb1a0b08b90ee7f228f94c5c74739ea3c871e,\n };\n assert_eq(shared_secret, hard_coded_shared_secret);\n}\n\n#[test]\nunconstrained fn test_shared_secret_computation_in_both_directions() {\n let secret_a = Scalar { lo: 0x1234, hi: 0x2345 };\n let secret_b = Scalar { lo: 0x3456, hi: 0x4567 };\n\n let pk_a = std::embedded_curve_ops::fixed_base_scalar_mul(secret_a);\n let pk_b = std::embedded_curve_ops::fixed_base_scalar_mul(secret_b);\n\n let shared_secret = derive_ecdh_shared_secret(secret_a, pk_b);\n let shared_secret_alt = derive_ecdh_shared_secret(secret_b, pk_a);\n\n assert_eq(shared_secret, shared_secret_alt);\n}\n\n#[test]\nunconstrained fn test_shared_secret_computation_from_address_in_both_directions() {\n let secret_a = Scalar { lo: 0x1234, hi: 0x2345 };\n let secret_b = Scalar { lo: 0x3456, hi: 0x4567 };\n\n let mut pk_a = std::embedded_curve_ops::fixed_base_scalar_mul(secret_a);\n let mut pk_b = std::embedded_curve_ops::fixed_base_scalar_mul(secret_b);\n\n let address_b = AztecAddress::from_field(pk_b.x);\n\n // We were lazy in deriving the secret keys, and didn't check the resulting y-coordinates of the pk_a or pk_b to be\n // less than half the field modulus. If needed, we negate the pk's so that they yield valid address points. (We\n // could also have negated the secrets, but there's no negate method for EmbeddedCurvesScalar).\n pk_a = if (AztecAddress::from_field(pk_a.x).to_address_point().unwrap().inner == pk_a) {\n pk_a\n } else {\n pk_a.neg()\n };\n pk_b = if (address_b.to_address_point().unwrap().inner == pk_b) {\n pk_b\n } else {\n pk_b.neg()\n };\n\n let shared_secret = derive_ecdh_shared_secret(secret_a, address_b.to_address_point().unwrap().inner);\n let shared_secret_alt = derive_ecdh_shared_secret(secret_b, pk_a);\n\n assert_eq(shared_secret, shared_secret_alt);\n}\n\n#[test]\nunconstrained fn test_app_siloed_shared_secret_differs_per_contract() {\n let secret_a = Scalar { lo: 0x1234, hi: 0x2345 };\n let pk_b = std::embedded_curve_ops::fixed_base_scalar_mul(Scalar { lo: 0x3456, hi: 0x4567 });\n\n let shared_secret = derive_ecdh_shared_secret(secret_a, pk_b);\n\n let contract_a = AztecAddress::from_field(0xAAAA);\n let contract_b = AztecAddress::from_field(0xBBBB);\n\n let s_app_a = compute_app_siloed_shared_secret(shared_secret, contract_a);\n let s_app_b = compute_app_siloed_shared_secret(shared_secret, contract_b);\n\n assert(s_app_a != s_app_b, \"app-siloed secrets must differ for different contracts\");\n}\n"
|
|
4288
4022
|
}
|
|
4289
4023
|
},
|
|
@@ -6144,14 +5878,14 @@
|
|
|
6144
5878
|
"visibility": "databus"
|
|
6145
5879
|
}
|
|
6146
5880
|
},
|
|
6147
|
-
"bytecode": "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",
|
|
5881
|
+
"bytecode": "H4sIAAAAAAAA/+39B5TVVPc//pPk5ubmXnrvvffepXdpAiIiSh1gYBhwGBAQERARESlDERER6QIKgtKU3uFuqkiRXhTpXaT+z+jzCG59zDtx9ue71n/9vsv1fO9nc2fvvHKSnOQkOdeIGzfpcPa2bdsPiI3o2DY6pm1kdGxETHT7qN5t20ZEx8b079VTRY6GHg1ZXCOqfcfuNXr2q9MnumPN9lFRQ2Y3q964bu24IXNfiIyNjujdW88OfMnQgC+lQDKlqgZ8KW14MPCtdNC3MiNLlQX5UlbkS9mQL2WHljwH9K2c0LdyQd/KjSx8PuRLBZANpiDypULIl4ogy1QMyVQc+VIJ5EulkGUqg2Qqi3ypHPKlCsgyVUIyVUa+9AzyparIMlVHMtVAvlRTG7KgRkxkVFRkl/h/n5Bo7NjxY8duyp7on/+fNmR+9d69I2JiW0fE9Bw/dlzcpuzFOzWOOVVieoEVTWsvGzKk1cv5S52v139lr3E1T90ef039CRmj/jntgSJnuntJ+/7/TPtH/G9WxFdNe/aOiOzUM7pk04iYHn1i28dG9oyOm/DHilGL+8fnvE/29qf+/f0JZIwmYwwZY8kY9+clHx/nvArzA99RFaB14JwqkfsFLAAt4BhoAcdLLGBBaAHHQgs4AVhAL1tR3FOfxz/1+envjFNb0kQyJpHxARmT3a+HQtB6mAithw8lGqowtICToAWcIrGARaAF/ABawI+EtqQPn/o85anPHz31ebLakqaS8TEZ08j4xP16KAqth6nQepgu0VDFoAX8GFrATyUWsDi0gNOgBZwhtCVNf+rzp099nvHU50/UljSTjFlkzCZjjvv1UAJaDzOh9TBXoqFKQgs4C1rAeRILWApawNnQAn4mtCXNferzvKc+f/bU5zlqS5pPxgIyFpLxufv1UBpaD/Oh9fCFREOVgRZwAbSAiyQWsCy0gAuhBVwstCV98dTnRU99XvzU58/VlvQlGUvIWErGV+7XQzloPXwJrYevJRqqPLSAS6AFXCaxgBWgBVwKLeByoS3p66c+L3vq8/KnPn+ltqQVZKwkYxUZ37hfDxWh9bACWg/fSjRUJWgBV0ILuFpiAStDC7gKWsA1QlvSt099Xv3U5zVPff5GbUlryVhHxnoyNrhfD89A62EttB42SjRUFWgB10ELuEliAatCC7geWsDNQlvSxqc+b3rq8+anPm9QW9IWMraSsY2M7e7XQzVoPWyB1sMOiYaqDi3gVmgBd0osYA1oAbdBCxgW2pJ2PPV551Ofw0993q62JCJjFxm7ydjjfj3UhNYDQethr0RD1YIWcBe0gPuEGmrvU5/3PfV591Of96iG2k/Gd2QcIOP7P6+HOMCYGxIeBIbzne8UqDzZ3S9hKmgJDzkk0p4bDC3hoWp/vpuhhuXnNI+M7hIV8fvNBKelze+8LfyWsUevqAgyDru/UzJuPLAQKvM4aAM/4rxuvVQ/MtbtPhsHLe5BaFv4wcMqdcpaQKGQZSwALeFRl6sHWe3KrRJjN7yOeTpi/XVvOZb9z3uL5nJvyeu8HGOxTN7WqdOaKqjSYlvmUWi9Hxdo9/gtczxQHdsyj0DfOiFw0FLr+gRy2PjTBqdPTPDDs7uE+RI6Yd6EToj03k9SIntFIQPZJ4A7yloh5yWLe9Jbnnzy8RRqP5FAR7qT2T0ckE+ov8MOHyeg3e50AmFOZ3d9JDQKjU+oNoeoZ1weKeOABlHr+Th40Me60bNeznIS6hh8zuUxOA7aZI+qTh3dtk9ja+lHtwd1t+fcRV2dc/8kc85dVGXGDknnBc65VfXzbs+5sWPYQbU9Qu0cWiNS/5zagLD6a72MEzhvvj8jjRpaA31rrYcNz2kJi6mmRzqZYpD2gkgj/qwSYweLiwnUxV38l1cmhRPwysTLOnVaU8VVWuzU4gK03i+5PUj74tyehjpcoD1+/Pjkk5T/fDDT4v/nqTPDy08+XsEO78g2dBn72pXs7ocfHS8Y46799q3LUONdAdas2w1MbTiqvEyfok4yzmKHg6sC9fPD53fXpPRnsPrXBernhfU3pM4nwPo33fbnWNpbSNpGET16xvSvHx0ZOz7x0UTT1YaotgbVIGqtqAVTSf6///7/6b85v7e3283Z/G1nBs9sbgPb3bzfl6NJr7jE4zeoPyHjjper3EvgCQS24L94uBSHepc70AFDffEX7EznDsS567IdNv7WDnc9bhsJeY72q/st6Fcy7rnegtTF5AW0De9hwHsQ8L77plHA+3JNo6NN88B90zwg46H7YbgSCTUMVwJyPZLa9x+i+/4jbAN7CHEeu9/AVDM9ltvADHAD8yVyvYH51F+5HwEsjO/7Pg1qGvU1BKi7bpp4oC7XND60aQz3TWOQz+dhLMpn/p+ORXnbtX0+cNdWGmj78UGrxu9++1Gt4Hd9BRM/3IY0Fjbcdh6yWQLj1cVVWvHbrcDIvLuERRI6YeGETqg264S/gwt0w09Gw3yBJx9tdKEtYKGBwTBfIPu/HSY84TiYddfjMKEv+ORjKMGGCX1B7GshT8OEJ5BhQl8QOoyEgDXrepjQZ6nyEsOE8XjoAtWXWGaQEKyeRKB6Prh6UpFBuhPoEKUvmcwQJahPLqU/hdVPITVECvpTSvlPYvVTuRxLTXI0UTW1v6qdRm25auNRLahWonKoVP/PBwFlxwoD8evVZ2HrNbWrk9kk8ZcUqcmXxsNYoc9CD/JpsLP1NBAwrUvgxt+AaT2udGzJLWjJ07lvmnTkS+9hEA5vmvQYMD0EzOC+aRQwg1zT6GjTZHTfNBnJl8l10xRx0TSZsKbJBAEzu28aBcws1zQG2jRZ3DdNFvJl9fAA2yMXjZMVa5ysEDGb+8ZRxGxyjeNDGye7+8bJTr4cHsYW8abJgTVNDgiY033TKGBOuaYx0abJ5b5pcpEvt/v9Jn6d22jj5MYaB3q3zJfHfeMoYh65xvGjjZPXfePkJV8+D41juthz8mGNkw8i5nffOIqYX65xLLRxCrhvnALkK+htzwmgjVMQa5yCELGQ+8ZRxELurwh/IybkSTQy6oqMqRXOztpQXaH5inh4KsjnPFKt8c1FnaEX81KquPMZLy+lButLeClV0vkMjpcqSb5SXkqVdj4f4aVKk6+Ml1JlnftXXqos+cp5KVXeubfgpcqTr4KXUhWdj328VEXyVfJSqrLzAZmXqky+Z7yUquJYyualqpCvqpdS1RxLBXkpNRhV3UupGo6lQrxUDfLV9FKqlmOpxLxULfLV9lKqjmOpJLxUHfLV9VKqnmOppLxUPfLV91KqgWOpZLxUA/I966VUQ8dSyXmphuRr5KVUY8dSKXipxuRr4qVUU8dSKXmppuR7zkupZo6lUvFSzcjX3EupFo6lUvNSLcj3vJdSLR1LpeGlWpLvBS+lWjmWSstLtSLfi15KtXYslY6Xak2+l7yUauNYKj0v1YZ8L3sp9YpjqQy81Cvka+ulVDvHUhl5qXbka++lVAfHUpl4qQ7k6+ilVCfHUpl5qU7ki/BSqrNjqSy8VGfydfFSqqtjqay8VFfyRXop1c2xVDZeqhv5vMx774tyLMWvr3xR5OvhpVS0Y6kcvFQ0+Xp6KdXLsVROXqoX+V71UirGsVQuXiqGfL29lIp1LJWbl4olXx8vpfo6lsrDS/Ul32teSvVzLJWXl+pHvv5eSg1wLJWPlxpAvte9lBroWCo/LzWQfG94KTXIsVQBXmoQ+d70UmqwY6mCvNRg8g3xUmqoY6lCvNRQ8r3lpdQwx1KFealh5HvbS6nhjqWK8FLDyfeOl1IjHEsV5aVGkO9dL6VGOpYqxkuNJN97XkqNcixVnJcaRb73vZQa7ViqBC81mnxjvJRyfniuJC81lnzjvJRyHsItxUvFkW+8l1LOv4ZSmpeaQL6JXkpNcixVhpeaRL4PvJSa7FiqLC81mXwfeinl/Csl5XipKeT7yEupqY6lyvNSU8n3sZdS0xxLVeClppHvEy+lnH89pCIvNZ18n3op5fwzG5V4qRnkm+ml1CzHUpV5qVnkm+2l1BzHUs/wUnPIN9dLKeefv6jCS80j32deSs13LFWVl5pPvgX89T11o2khi8XfEfqcx9Stmy94TN1jWcRj6mbIYh5Tdy2+5DF1e2EJj6n7AEt5TA3Yf8VjamT9ax6rRr5lPFaDfMt5TA0qr+AxNfq7ksfUMO0qHlPjqd/wmBr4/JbH1Ajlah5TQ4lreEyN+a3lMTU4t47H1Cjaeh5Tw10beEyNS23kMTWAtInH1EjPZh5TQzJbeKwD+bbymBrk2MZjajRiO4+pYYMdPKau73fymLoQD/OYumImHlOXtrt4TF2D7uYxdbG4h8fUVd1eHlOXX/t4TF0n7ecxdUHzHY+pK48DPKYuEb7nsaHkO8hj6qT7EI+ps+PDPKZOY4/wmDrf/IHH1InhUR5TZ3DHeEydah3nMXVOdILH1MnLSR5TZxmneEydDpzmMdVvn+Ex1cGe5THVE57jMdVl/chjM8j3E4+pTuA8j6mj9c88pg6rF3hMHf8uejnUOk8qVI2XukS+y15KXXEsVZ2XukK+q15KOc8KU4OXuka+615K3XAsVZOXukG+m15KOU+LUouXUl3gbS+l7jiWqs1L3SHfL15KOU/2UIeXuku+X72UuudYqi4vdY98972Ucp5toB4v9YB8D72Ucn7zsD4v9Yh8jz2UMp1fcW/ASpnqr7z8jqzp/LL5s7yUTqbhpZTPsVRDXspHpumllPMr0I14KT+ZlpdSAcdSjXmpAJm2l1JBx1JNeKkgmSEvpZxfJGzKSyUmM4mXUs7v7T3HSyUlM5mXUs4vyTXjpZKTmcJLqZSOpZrzUinJTOWllPMrUi14qdRkpvFSyvllped5qbRkpvNSKr1jqZa8VHoyM3gp5fy2zAu8VEYyM3kp5fzeSiteKjOZWbyUyupY6kVeKiuZ2byUcn5tojUvlZ3MHF5KOb/A8BIvlZPMXF5K5XYs1YaXyk1mHi+lnJ+ff5mXyktmPi+lnJ9jf4WXyk9mAS+lCjqWastLFSSzkJdSzo9Rt+OlCpPp5flo0/n56Pa8VFEyvTwfbTo/H92BlypOppfno82SjqU68lIlyfTyfLTp/Hx0J16qNJleno82nZ+PjuClypLp5flo0/n56M68VHkyvTwfbTo/H92Fl6pIppfno03n56O78lKVyfTyfLTp/Hx0JC9VhUwvz0ebzs9Hd+OlqpHp5flo0/n56O68VA0yvTwfbTo/Hx3FS9Ui08vz0abz89E9eKk6ZHp5Ptp0fj46mpeqR6aX56NN5+eje/JSDcj08ny06fx8dC9eqiGZXp6PNp2fj36Vl2pMppfno03n56NjeKmmZHp5Ptps5liqNy/VjEwvz0ebzs9Hx/JSLcj08ny06fx8dB9eqiWZXp6PNp2fj+7LS7Ui08vz0abz89Gv8VKtyfTyfLTp/Hx0P16qDZleno82nZ+P7s9LvUKml+ejTefnowfwUu3I9PJ8tOn8fPTrvFQHMr08H206Px89kJfqRKaX56NN5+ej3+ClOpPp5flo0/n56EG8VFcyvTwfbTo/H/0mL9WNTC/PR5vOz0cP5qWiyPTyfLTp/Hz0EF4qmkwvz0ebzs9HD+WlepHp5floM8ax1Fu8VAyZXp6PNp2fjx7GS8WS6eX5aNP5+ei3eam+ZHp5Ptp0fj56OC/Vj0wvz0ebzs9Hv8NLDSDTy/PRpvPz0SN4qYFkenk+2nR+PvpdXmoQmV6ejzadn48eyUsNJtPL89Gm8/PR7/FSQ8n08ny06fx89CheahiZXp6PNp2fj36flxpOppfno03n56NH81IjyPTyfLTp/Hz0GF5qJJleno82nZ+PHstLjSLTy/PRpvPz0eN4qdFkenk+2nR+PjqOlxpLppfno4HptcfzUnFkenk+2nR+PnoCLzWBTC/PR5vOz0dP5KUmkenl+WjT+fnoSbzUZDK9PB9tOj8f/QEvNYVML89Hm87PR0/mpaaS6eX5aNP5+egPealpZHp5Ptp0fj56Ci81nUwvz0ebzs9Hf8RLzSDTy/PRpvPz0VN5qVlkenk+2nR+PvpjXmoOmV6ejzadn4+exkvNI9PL89Gm8/PRn/BS88lc8OdS2A/dQrPfmwsdF8jLD91eIOMiOvdRYWzNfe6Y7l/+0K3zPaSnfujW/ELmh27VXakvkIUlc5HzSvNSfZHMjxKeJ58JtXPouER9c6HagLD6J1zWx35cxFyMNGroOPStEx42PKclLKOaHpmErAyk/VKkERerxNjBYglQH5gCzVzyL3/otqTzcqA/dOtpnTqtKXVn+ss4rDq03pe6PUg/9QsW8E+owz+fdhT7dauj0Lccfmf4X/zArvnVk49fJ9gvZ5hfYV/7mv1yxoSEXGf/vNH8/vsa5lfQpvU1sP7dbv5qs1bl3fZ48M+wXUV/q2khtqFehVbUMinONZTzOca5BnGWS3Guo5wvMM51iLNCinMD5SzCODcgzkopzk2Usxjj3IQ4q0ROftVSguct30jVX4LV/1aq/lKs/mqp+l9h9ddI1f8aq79Wqv4yrP46qfrLsfrrpeqvwOpvkKq/Equ/Uar+Kqz+Jqn632D1N0vV/xarv0Wq/mqs/lap+muw+tuk6q/F6m+Xqr8Oq79Dqv56rP5OqfobsPphqfobsfokVX8TVn+XVP3NWP3dUvW3YPX3SNXfitXfK1V/G1Z/n1T97Vj9/VL1d2D1v5OqvxOrf0Cqfhir/71UfcLqH5Sqvwurf0iq/m6s/mGp+nuw+kek6u/F6v8gVX8fVv+oVP39WP1jUvW/w+ofl6p/AKt/Qqr+91j9k1L1D2L1T0nVP4TVPy1V/zBW/4xU/SNY/bNS9X/A6p+Tqn8Uq/+jVP1jWP2fpOofx+qfl6qP/eS2+bNUfewnt80LUvWxnzw3L0rVP43VvyRVH/vBe/OyVP2zWP0rUvXPYfWvStX/Eat/Tar+T1j961L1z2P1b0jV/xmrf1Oq/gWs/i2p+hex+rel6l/G6t+Rqn8Vq/+LVP3rWP27UvVvYvV/lap/G6t/T6r+L1j9+1L1f8XqP5Cqfx+r/1Cq/kOs/iOp+o+x+o+F6psaVN+fSKq+gdXXpOpjD5/7dan6FlbfkKpvY/V9UvVDWH1Tqn4SrL5fqn4yrL4lVT8FVj8gVT8VVt+Wqp8Gqx+Uqp8Oqx+Sqp8Bq59Yqn4mrH4SqfpZsPpJpepnw+onk6qfA6ufXKp+Lqx+Cqn6ebD6KaXq58Pqp5KqXwCrn1qqfiGsfhqp+kWw+mml6hfD6qeTql8Cq59eqn4prH4GqfplsPoZpeqXw+pnkqpfAaufWap+Jax+Fqn6z2D1s0rVr4rVzyZVvzpWP7tU/ZpY/RxS9Wtj9XNK1a+L1c8lVb8+Vj+3VP1nsfp5pOo3wurnlarfBKufT6r+c1j9/FL1m2P1C0jVfx6rX1Cq/gtY/UJS9V/E6heWqv8SVr+IVP2XsfpFpeq3xeoXk6rfHqtfXKp+R6x+Can6EVj9klL1u2D1S0nVj8Tql5aq3x2rX0aqfg+sflmp+j2x+uWk6r+K1S8vVb83Vr+CVP0+WP2KUvVfw+pXkqrfH6tfWar+61j9Z6Tqv4HVryJV/02sflWp+kOw+tWk6r+F1a8uVf9trH4NqfrvYPVrStV/F6tfS6r+e1j92lL138fq15GqPwarX1eq/jisfj2p+uOx+vWl6k/E6jeQqv8BVv9ZqfofYvUbStX/CKvfSKr+x1j9xlL1P8HqN5Gq/ylWv6lU/ZlY/eek6s/G6jeTqj8Xq99cqv5nWP0WUvUXYPWfR+r/Pj12/ejI2PFJjyaaTuYyMpeTuYLMlWSuIvMbMr8lczWZa8hcS+Y6MteTuYHMjWRuInMzmVvI3ErmNjK3k7mDzJ1khskkMneRuZvMPWTuJXMfmfvJ/I7MA2R+T+ZBMg+ReZjMI2T+QOZRMo+ReZzME2SeJPMUmafJPEPmWTLPkfkjmT+ReZ7Mn8lU9otkXiLzMplXyLxK5jUyr5N5g8ybZN4i8zaZd8j8hcy7ZP5K5j0y75P5gMyHZD4i8zH54x+LJb9OfoP8PvKb5PeT3yJ/gPw2+YPkD5E/MfmTkD8p+ZORPzn5U5A/JflTkT81+dOQPy3506l7++r2urrDrW4yq/u86larutupbjiqe37qtpu686VuPqn7P+oWjLoLom5EqHsBajhejYirQWk1LqyGZtXoqBqgVGOEaphOjZSpwSo1XqSGbNSoiRq4UGMH6vJdXUGri1h1Haku5dTVlLqgUdcU6rRenVmrk1t1fqlO8dRZljrRUecaqrtXPa7q9FS/ow796uirDoDqGKQOA2pPVDuD2h7VJjHn9/b+03b326TLDhuKCc1Sqr51Ado0W0rsGuaXKjG2a7wA1H8yc3zS8RvUn5C/1Z+WCZliVy3U0vHOC1QWnYvZ/6LLFQdNERm/4lqha/hFaIpIfyuI09plO2z8rR1ae9w2EnByZv9L7regl8jfxvUWVFotENqGbbCmaQMBX3bfNAr4slzT6GjTvOK+aV4hf9u/LLlTJaMccODUDOA75SBXO6l9vy3aTO2wDawtxGnvfgNTzdRebgMz0A2sg/sNrAP5O7re90u62Pc7Yk3TEQJ2ct80CthJrml8aNNEuG+aCPJ3/uv5kHOpLsgKT7AfofC4a3dGW6ELtv10hlZNV/fbj2qFrq7PSrUEmjv/P4sd6ZzK2yYO3jDuBqw24FcI/N2yu17M+F8sQTZ77BdLFkHc7gKrW109dUd+guBPv5uhT0zwHzdyl7BUQicsmdAJ1QEi4VMCJzRPftjDH/XkYw+0QvcE2qOisv/LX1o5QT4LOWb7LPVdbBL+E8i3fA4vQT5+/Piux19a8Uc/+dgzwX5pxR+Nfa3nn49x4C+tgOvsnw9fv//Sij8aOsj1BNa/2wsPtV2r8iK/tBL/G3KJx0MriXxFoA3VlxhaUb2kOElQTjGMkwTivCrFSYpySmCcpBAnRoqTDOWUwjjJIE5vKU5ylFMG4ySHOLFSnBQopxzGSQFx+khxUqKcChgnJcTpK8VJhXIqYZxUEOc1ibH7+KUEXyvrJ1UffK2sv1R98LWyAVL1wdfKXpeqD75WNlCqPvha2RtS9cHXygZJ1QdfK3tTqj74Wtlgqfrga2VDpOqDr5UNlaoPvlb2llR98LWyYVL1wdfK3paqD75WNlyqPvha2TtS9cHXykZI1QdfK3tXqj74WtlIqfrga2XvSdUHXysbJVUffK3sfan64F2C0VL1wdfKxkjVB18rGytVH3ytbJxUffC1sjip+uBrZeOl6oOvlU2Qqg++VjZRqj74Wtkkqfrga2UfSNUHXyubLFUffK3sQ6n64GtlU6Tqg6+VfSRVH3ytbKpUffC1so+l6oOvlU2Tqg++VvaJVH3wtbLpUvXB18o+laoPvlY2Q6o++FrZTKn64Gtls6Tqg6+VzZaqD75WNkeqPvha2Vyp+uBrZfOk6oOvlX0mVR98rWy+VH3wtbIFUvXB18oWStUHXyv7XKo++FrZF1L1wdfKFiH1n3qtLNnRRNXI34v8r5I/Rt16V7er1S1edVtU3UpUd/PUDTV1T0vdVlJ3dtTNFXV/Q91iUKP8aqBdjXWr4WY14qsGXdW4pxp6VKN/agBOjYGpYSg1EqQGY9R4iBqSUKMC6sJcXRury1N1hagu0tR1krpUUVcL6oRdnTOr01Z15qhO3tT5kzqFUWcRqiNXfanqzlSPog7q6riqDm3q6KJ2cLWPqc1cbWmqsdX6VmSvr00FoEeOAo6PHP1n1S+WaPr4h4kWY03/JVD/yXO9yeKfrv6S/Es8vDbl744+B7UEe3B5CQRc6hK48TfgUo8rHVvy7tCSf+W+ab4i/9ce3kfCm+ZrDPg1BFzmvmkUcJlc0+ho0yx33zTLyb/CddOUctE0K7CmWQEBV7pvGgVcKdc0Bto0q9w3zSryf+O6acjfzkXjfIM1zjcQ8Vv3jaOI38o1jg9tnNXuG2c1+dd4eM0Kb5o1WNOsgYBr3TeNAq6VaxoTbZp17ptmHfnXe9hvusc/7Q82znqscdZDxA3uG0cRN8g1jh9tnI3uG0ct/CYPjdPFxZ6zCWucTRBxs/vGUf9tlmscC22cLe4bZwv5t3rbc6LQxtmKNc5WiLjNfeMo4jYvb/8lyPsc/1ns7c6pvG0/27GLqx3AakPejNmR3dtiRiXk5cjOBMLszM72BuMW+cMs5itKfuKx4uTfxWOqp9/NY+qCZg+PlSX/Xh4rT/59PFaR/Pt5rDL5v+OxKuQ/wGNqTOR7HqtB/oM8Vov8h3isDvkP81g98h/hsQbk/4HHGpL/KI81Jv8xHmtK/uM81oz8J3isBflP8lhL8p/isVbkP81jrcl/hsfakP8sj71C/nM8pk6of+SxDuT/icc6kf88j3Um/8881pX8F3isG/kv8lgU+S/xWDT5L/OYGvC6wmNq+Osqj6nBsGs8pobGrvOYGii7wWNq2Owmj6lBtFs8pobUbvOYGmC7w2NquO0XHlODb3d5TA3F/cpjamDuHo+pYbr7PKYG7R7wmBrCe8hjakDvEY+p4b3HPDaBLN5j+iaRpfHYZLJ0HptClsFjU8ny8dg0skwem06Wn8dmkGXx2CyyAjw2hyybx+aRFeSx+WSF2HQF6vhnJWYxdfyzkvBYcbKS8lhJspLxWGmykvNYWbJS8Fh5slLyWEWyUvFYZbJS81gVstLwWDWy0vJYDbLS8VgtstLzWB2yMvBYPbIy8lgDsjLxWEOyMvNYY7Ky8FhTsrLyWDOysvFYC7Ky81hLsnLwWCuycvJYa7Jy8VgbsnLz2Ctk5eGxdmTl5bEOZOXjsU5k5eexzmQV4LGuZBXksW5kFeKxKLIK81g0WUV4rBdZRXkshqxiPBZLVnEe60tWCR7rR1ZJHhtAVikeG0hWaR4bRFYZHhtMVlkeG0pWOR4bRlZ5HhtOVgUeG0FWRR4bSVYlHhtFVmUeG03WMzw2lqwqPBZHVlUeU8e/ajymjn/VeUwd/2rwmDr+1eQxdfyrxWPq+Febx9Txrw6PqeNfXR5Tx796PKaOf/V5TB3/GvCYOv49y2OXyGrIY1fIasRj18hqzGM3yGrCY+p42pTH7pD1HI/dJasZj90jqzmPPSCrBY89Iut5FjMTkdWSx3SyXuAxH1mteMxP1os8FiCrNY8FyXqJxxKT1YbHkpL1Mo8lJ+sVHktJVlseS01WOx5LS1Z7HktPVgcey0hWRx7LTFYnHstKVgSPZSerM4/lJKsLj+UmqyuP5SUrksfyk9WNxwqS1Z3HCpMVxWOq/+3BY6r/jeYx1f/25DHV//biMdX/vspjqv+N4THV//bmMdX/xvKY6n/78Jjqf/vymOp/X+Mx1f/24zHV//bnMdX/DuAx1f++zmOq/x3IY6r/fYPHVP87iMdU//smj6n+dzCPqf53CI+p/ncoj6n+9y0eU/3vMB5T/e/bPKb63+E8pvrfd3hM9b8jeEz1v+/ymOp/R/KY6n/f4zHV/47iMdX/vs9jqv8dzWOq/x3DY6r/Hctjqv8dx2Oq/43jMdX/jucx1f9O4DHV/07kMdX/TuIx1f9+wGOq/53MY6r//ZDHVP87hcdU//sRj6n+dyqPqf73Yx5T/e80HlP97yc8pvrf6Tym+t9PeUz1vzN4TPW/M3lM9b+zeEz1v7N5TPW/c3hM9b9zeUz1v/N4TPW/n/GY6n/n85jqfxf8eVguDhn9weZ/sha6HHCDhj3NL8lcgg557YRG5iy3T/xgawkbSbO+cLmW/u9HTq1FIusHm/HPWiyzfhJwXjkLeWzmT9NLGePcTaUF/NLSuD8ma7KWYJM1uR1EVicjS6BZuaylzivNS/WlIm+GmYvUfS7oOJFY5Ae/rYXqAITVd/uD39hEl9ZXSKMmTg99K4OHDc9pCSuppkfuXVSCtF+LNOJXKjHW2SxLmDsn1jI2ZZ3m8pgC/HrdWHAaPk/r1GlNqesc7PkyC3q+zFru9iDtdg7A+IlAu0Eby2LVZTgcyx4/fnzS47x91oonH1cm2Lx91grsays93J38bc1hh8CMIntvfINg9TO5PQRPiAPmGrSg5/CsldAhOCP0rUzA9ud63kLra0URmbcw/rR/GbgtWYmxHwJYBq30VVKc5SgnCcZZDnG+keKsQDlJMQ62S3wrxVmJcpJhnJUQZ7UUZxXKSY5xVkGcNVKcb1BOCowDPWprrZXifItyUmKcbyHOOinOapSTCuOshjjrpThrUE5qjAM9PGxtkOKsRTlpMM5aiLNRirMO5aTFOOsgziYpznqUkw7jQA9DW5ulOBtQTnqMswHibJHibEQ5GTDORoizVYqzCeVkxDjQw93WNinOZpSTCeNshjjbpThbUE5mjLMF4uyQ4mxFOVkwDvSwurVTirMN5WTFONsgTliKsx3lZMM42yEOSXF2oJzsGGcHxNklxdmJcnJgnJ0QZ7cUJ4xycmKcMMTZI8UhlJML4xDE2SvF2YVycmOcXRBnnxRnN8rJg3F2Q5z9Upw9KCcvxtkDcb6T4uxFOfkwzl6Ic0CKsw/l5Mc4+yDO91Kc/SinAMbZD3EOSnG+QzkFMc53EOeQFOcAyimEcQ5AnMNSnO9RTmGM8z3EOSLFOYhysJ/ZMg9CnB+kOIdQTlGMcwjiHJXiHEY52K+GmYchzjEpzhGUUxzjHIE4x6U4P6Ac7EfQzB8gjtSv9JpHUU5JjHMU4pyU4hxDOdhvupnHIM4pKc5xlFMa4xyHOKelOCdQDvYTdeYJiHNGinMS5ZTFOCchzlkpzimUg/3innkK4pyT4pxGOeUxzmmI86MU5wzKwX5A0DwDcX6S4pxFORUxzlmIc16Kcw7lYL+HaJ6DOD9LcX5EOZUxzo8Q54IU5yeU8wzG+QniXJTinEc5VTDOeYhzSYrzM8qpinF+hjiXpTgXUE41jIO96HNFinMR5VTHOBchzlUpziWUUwPjXII416Q4l1FOTYxzGeJcl+JcQTm1MM4ViHNDinMV5dTGOFchzk0pzjWUUwfjXIM4t6Q411FOXYxzHeLcluLcQDn1MM4NiHNHinMT5dTHODchzi9SnFsopwHGuQVx7kpxbqOcZzHObYjzqxTnDsppiHHuQJx7UpxfUE4jjPMLxLkvxbmLchpjnLsQ54EU51eU0wTj/ApxHkpx7qGcphjnHsR5JMW5j3Kewzj3Ic5jKc4DlNMM4zxAOIFEUpyHKKc5xnkIcTQpziOU0wLjPII4uhTnMcp5HuM8hjiGEMefCOW0xOavTgRxfFIcDeW8gHE0iGNKcXSU0wrj6BDHL8UxUM6LGMeAOJYUx4dyWmMcH8QJSHFMlPMSxjEhji3F8aOcNhjHD3GCUhwL5byMcaC5xwIhKU4A5byCcQIQJ7EUx0Y5bTGODXGSSHGCKKcdxglCnKRSnBDKaY9xQhAnmRQnMcrpgHESQ5zkUpwkKKcjxkkCcVJIcZKinE4YJynESSnFSYZyIjBOMoiTSoqTHOV0xjjJIU5qKU4KlNMF46SAOGmkOClRTleMkxLipJXipEI5kRgnFcRJJ8VJjXK6YZzUECe9FCcNyumOcdJAnAxSnLQoB/wlsrQQJ6MUJx3K6YFx0kGcTFKc9CgnGuOkhziZpTgZUE5PjJMB4mSR4mREOb0wTkaIk1WKkwnlvIpxMkGcbFKczCgnBuNkhjjZpThZUE5vjJMF4uSQ4mRFObEYJyvEySnFyYZy+mCcbBAnlxQnO8rpi3GyQ5zcUpwcKOc1jJMD4uSR4uREOf0wTk6Ik1eKkwvl9Mc4uSBOPilObpQzAOPkhjj5pTh5UM7rGCcPxCkgxcmLcgZinLwQp6AUJx/KeQPj5IM4haQ4+VHOIIyTH+IUluIUQDlvYpwCEKeIFKcgyhmMcQpCnKJSnEIoZwjGKQRxiklxCqOcoRinMMQpLsUpgnLewjhFIE4JKU5RlDMM4xSFOCWlOMVQztsYpxjEKSXFKY5yhmOc4hCntBSnBMp5B+OUgDhlpDglUc4IjFMS4pSV4pRCOe9inFIQp5wUpzTKGYlxSkOc8lKcMijnPYxTBuJUkOKURTmjME5ZiFNRilMO5byPccpBnEpSnPIoZzTGKQ9xKktxKqCcMRinAsR5RopTEeWMxTgVIU4VKU4llDMO40A/3RioKsWpjHLiME5liFNNivMMyhmPcZ6BONWlOFVQzgSMUwXi1JDiVEU5EzFOVYhTU4pTDeVMwjjVIE4tKU51lPMBxqkOcWpLcWqgnMkYpwbEqSPFqYlyPsQ4NSFOXSlOLZQzBePUgjj1pDi1Uc5HGKc2xKkvxamDcqZinDoQp4EUpy7K+Rjj1IU4z0px6qGcaRinHsRpKMWpj3I+wTj1IU4jKU4DlDMd4zSAOI2lOM+inE8xzrMQp4kUpyHKmYFxGkKcplKcRihnJsZpBHGek+I0RjmzME5jiNNMitME5czGOE0gTnMpTlOUMwfjNIU4LaQ4z6GcuRjnOYjzvBSnGcqZh3GaQZyWUpzmKOczjNMc4rwgxWmBcuZjnBYQp5UU53mUswDjPA9xXkQ4jSJ69IzpXz86MnZ88qOJppO1iqxvyPqWrNVkrSFrLVnryFpP1gayNpK1iazNZG0haytZ28jaTtYOsnaSFSaLyNpF1m6y9pC1l6x9ZO0n6zuyDpD1PVkHyTpE1mGyjpD1A1lHyTpG1nGyTpB1kqxTZJ0m6wxZZ8k6R9aPZP1E1nmyfibrAlkXybpE1mWyrpB1laxrZF0n6wZZN8m6RdZtsu6Q9QtZd8n6lax7ZN0n6wFZD8l6RNZjCsRPGUQBnQIGBXwUMCngp4BFgQAFbAoEKRCiQGIKJKFAUgoko0ByCqSgQEoKpKJAagqkoUBaCqSjQHoKZKBARgpkokBmCmShQFYKZKNAdgrkoEBOCuSiQG4K5KFAXgrko0B+ChSgQEEKFKJAYQoUoUBRChSjQHEKlKBASQqUUrfj1S1sddtX3SpVtxfVLTl1G0vd+lG3S9QtBjUsr4ay1fCvGjJVw4xqaE4NZ6khIDVsooYa1OW5uqRVl4Hq0kldbqhTdHVaq04F1emTOuVQ3bTq2lR3oA6h6rCjdlW1eatNYs7v7f2nzXjseGhzau28aZqUOCP0LbcvL41DdiDra7WQ4yDLS0D9eb+vqia94pKP36D+hAJt/rL3Oy2TWqjlwEGislp2bMFfljhExa+4NugaxibtCLSBOK+4bIeNv7XDKx63DWjJra+hJW/rfgtqS4F2rregimqB0DbEprhQX0OA7d03jQK2l2saHW2aDu6bpgMFOv5lyZ0qGc+MB9a3AXwHu2/WSWrf74g2EzYPRKAjxIlwv4GpZoqQ28AMdAPr7H4D60yBLq73/fIu9n1s1gT1NQTY1X3TKGBXuabxoU0T6b5pIinQzcv5UHdkhSdOD30rg9Su3Q1tBWzmgEA3aNVEud9+VCtEeWmFHtD6zQh9y/msVPO2iffATu6igdW2uEZU+47da/TsV6dPdMea7aOihsxuVr1x3dpxQ+a+EBkbHdG7t8qT3fViViJrKbLCoedvrKUQt6fA6lbXTT3HAqtxQY2YyKioyC7xa3CCPnHInOaR0V2iIsaPHQdsKciThq4SVkjohOUTOqE6QCR8SuCEJi4+Z49eUREU6PXk46tohZ4JtEf1yv7nLcYX94cV6cjJ3538O6CjxRdkLXLYgB8/fnz3yar+5y9r8f/z1EqMefKxt9Pf/vb30OqJwb7W2/1x6fc1Bx0+k3R12YmOgxsEqx/psv7YCf+cNu7ab9twDHQw7Y3sD0m6Qt+KBLY/txdLal9UlLEuVxF0nhO/ifRCt6UwNsLaC1rpsVKcV1EOYZxXIU4fKU4MytmFcbBdoq8UpzfK2Y1xekOc16Q4sShnD8aJhTj9pDh9UM5ejNMH4vSX4vRFOfswTl+IM0CK8xrK2Y9xXoM4r0tx+qGc7zBOP4gzUIrTH+UcwDj9Ic4bUpwBKOd7jDMA4gyS4ryOcg5inNchzptSnIEo5xDGGQhxBktx3kA5hzHOGxBniBRnEMo5gnEGQZyhUpw3Uc4PGOdNiPOWFGcwyjmKcQZDnGFSnCEo5xjGGQJx3pbiDEU5xzHOUIgzXIrzFso5gXHegjjvSHGGoZyTGGcYxBkhxXkb5ZzCOG9DnHelOMNRzmmMMxzijJTivINyzmCcdyDOe1KcESjnLMYZAXFGSXHeRTnnMM67EOd9Kc5IlPMjxhkJcUZLcd5DOT9hnPcgzhgpziiUcx7jjII4YkPu76OcnzHO+xBnnBRnNMq5gHFGQ5w4Kc4YlHMR44yBOOOlOGNRziWMMxbiTJDiwLc+L2Mc7PmSiVIc+B74FYwTB3EmSXHGo5yrGAd7kukDKc4ElHMN40yAOJOlOBNRznWMMxHifCjFmYRybmCcSRBnihTnA5RzE+N8AHE+kuJMRjm3MM5kiDNVivMhyrmNcT6EOB9LcaagnDsYZwrEmSbF+Qjl/IJxPoI4n0hxpqKcuxhnKsSZLsX5GOX8inE+hjifSnGmoZx7GGcaxJkhxfkE5dzHOJ9AnJlSnOko5wHGmQ5xZklxPkU5DzHOpxBnthRnBsp5hHFmQJw5UpyZKOcxxpkJceZKcWaBHCsRxpkFceZJcWajHA3jzIY4n0lx5qAcHePMgTjzpThzUY6BceZCnAVSnHkox4dx5kGchVKcz1COiXE+gzifS3Hmoxw/xpkPcb6Q4ixAORbGWQBxFklxFqKcAMZZCHEWS3E+Rzk2xvkc4nwpxfkC5QQxzhcQZ4kUZxHKCWGcRRBnKcJ5akqhFEcTVaNALAX6UKAvBV6jQD8K9KfAAAq8ToGBFHiDAoMo8CYFBlNgCAWGUuAtCgyjwNsUGE6BdygwggLvUmAkBd6jwCh161zdbla3aNVtTXUrUN0+U7ec1G0adWtD3Q5QQ+hq2FkN1arhTTUkqIbR1NCTGq5RQxxqWEBdSqvLT3XJpi5z1KWBOp1Wp6DqtE2d6qjTA9Wlqm5IHbrV4U4dItRupTZF1XyK/C+mzPnKedUHoJeyAu7fLoNuMcW/lPUVdvPoa6D+k3e6U8S/Wf81BZZ5mDIn0BPZCeIXfRn20voyCLjcJXDjb8DlHlc6tuQ9oSVf4b5pVlBgpYe5aPCmWYkBV0LAVe6bRgFXyTWNjjbNN+6b5hsKfOu6aSq4aJpvsab5FgKudt80CrharmkMtGnWuG+aNRRY67ppKNDJReOsxRpnLURc575xFHGdXOP40MZZ775x1lNgg4cpdvCm2YA1zQYIuNF90yjgRrmmMdGm2eS+aTZRYLOH/aZn/EwPYONsxhpnM0Tc4r5xFHGLXOP40cbZ6r5xtlJgm4fG6e5iz9mGNc42iLjdfeMo4na5xrHQxtnhvnF2UGCntz2nF9o4O7HG2QkRw+4bRxHDXi6uCFnshJnxIv5L3rYfwi6udgGrDZlhZVd2b4vZKyEvR3YnEGZ3drY3GLcosIfFfEUpsJfHilNgH4+VpMB+HitNge94rCwFDvCYOkv4nsfUxdBBHqtMgUM8VoUCh3lMjYkc4bEaFPiBx2pR4CiP1aHAMR6rR4HjPNaAAid4rCEFTvJYYwqc4rGmFDjNY80ocIbHWlDgLI+1pMA5HmtFgR95rDUFfuKxNhQ4z2OvUOBnHmtHgQs81oECF3lMnXhf4rHOFLjMY10pcIXHulHgKo9FUeAaj0VT4DqP9aLADR6LocBNHlMDY7d4TA2T3eYxNWh2h8fUENovPKYG1O7ymBpe+5XH1GDbPR5TQ2/3eUwNxD3gMTUs95DH1CDdIx5TQ3aPeWwU2byH840mW+OxsWTrPBZHtsFjE8j28dgksk0em0y2n8emkG3x2FSyAzw2jWybx6aTHeSxGWSHeGwW2Yl5bA7ZSXhsHtlJeWw+2cnYVJXq+GcnZzF1/LNT8FhxslPyWEmyU/FYabJT81hZstPwWHmy0/JYRbLT8VhlstPzWBWyM/BYNbIz8lgNsjPxWC2yM/NYHbKz8Fg9srPyWAOys/FYQ7Kz81hjsnPwWFOyc/JYM7Jz8VgLsnPzWEuy8/BYK7Lz8lhrsvPxWBuy8/PYK2QX4LF2ZBfksQ5kF+KxTmQX5rHOZBfhsa5kF+WxbmQX47EosovzWDTZJXisF9kleSyG7FI8Fkt2aR7rS3YZHutHdlkeG0B2OR4bSHZ5HhtEdgUeG0x2RR4bSnYlHhtGdmUeG072Mzw2guwqPDaS7Ko8po5/1XhMHf+q85g6/tXgMXX8q8lj6vhXi8fU8a82j6njXx0eU8e/ujymjn/1eEwd/+rzmDr+NeAxdfx7lsfU8a8hj6njXyMeU8e/xjymjn9NeOwS2U157ArZz/HYNbKb8dgNspvzmDqetuCxO2Q/z2N3yW7JY/fIfoHHHpDdiscekf0ii5mJyG7NYzrZL/GYj+w2POYn+2UeC5D9Co8FyW7LY4nJbsdjScluz2PJye7AYynJ7shjqcnuxGNpyY7gsfRkd+axjGR34bHMZHflsaxkR/JYdrK78VhOsrvzWG6yo3gsL9k9eCw/2dE8VpDsnjxWmOxePKb631d5TPW/MTym+t/ePKb631geU/1vHx5T/W9fHlP972s8pvrffjym+t/+PKb63wE8pvrf13lM9b8DeUz1v2/wmOp/B/GY6n/f5DHV/w7mMdX/DuEx1f8O5THV/77FY6r/HcZjqv99m8dU/zucx1T/+w6Pqf53BI+p/vddHlP970geU/3vezym+t9RPKb63/d5TPW/o3lM9b9jeEz1v2N5TPW/43hM9b9xPKb63/E8pvrfCTym+t+JPKb630k8pvrfD3hM9b+TeUz1vx/ymOp/p/CY6n8/4jHV/07lMdX/fsxjqv+dxmOq//2Ex1T/O53HVP/7KY+p/ncGj6n+dyaPqf53Fo+p/nc2j6n+dw6Pqf53Lo+p/ncej6n+9zMeU/3vfB5T/e8CHlP970IeU/3v5zym+t8veEz1v4v+PCwHvZWJzf1tL3Y54AYNe1pfk7UMHfLaDY3M2W6fR8LWEjaSZi9xuZawkVN76f/pyKmX9YP92oP9lcz6+RqRJ9hvCrDJ6I1x7qZRr+ZcYNwfk37by7BJv90OIqsTimXQjOz2cucG8FJ9udtpLrDJv5eq+1zY5N8PJOrbi9UBCKv/0O1+iO0KK6CDwAPoWw89bHhOS1hdNT1y76I6pF0p0ogrVGKss1mVMHdO7FXs5wo0l8eUKs7LMRb8CQZP69RpTalrFez5Mht6vsz+xu1B2u3vP8T/CEw0tLF8pbof599/OOnx9x/sb598XJ1gv/9gf4t9bbWHu5O/rTnsEPhIZO+NbxCs/mO3h2Do9x9s6Dk8ezV0CH4EfesxsP253WXVrqgoIpNRxZ/2rwK3JTs59iOQq6CVvkaK8w3KSYFxvoE4a6U436KclBgH2yXWSXFWo5xUGGc1xFkvxVmDclJjnDUQZ4MUZy3KSYNxoEdt7Y1SnHUoJy3GWQdxNklx1qOcdBhnPcTZLMXZgHLSYxzo4WF7ixRnI8rJgHE2QpytUpxNKCcjxtkEcbZJcTajnEwYB3oY2t4uxdmCcjJjnC0QZ4cUZyvKyYJxtkKcnVKcbSgnK8aBHu62w1Kc7SgnG8bZDnFIirMD5WTHODsgzi4pzk6UkwPjQA+r27ulOGGUkxPjhCHOHikOoZxcGIcgzl4pzi6Ukxvj7II4+6Q4u1FOHoyzG+Lsl+LsQTl5Mc4eiPOdFGcvysmHcfZCnANSnH0oJz/G2Qdxvpfi7Ec5BTDOfohzUIrzHcopiHG+gziHpDgHUE4hjHMA4hyW4nyPcgpjnO8hzhEpzkGUUwTjHIQ4P0hxDqGcohjnEMQ5KsU5jHKKYZzDEOeYFOcIyimOcY5AnONSnB9QTgmM8wPEOSHFOYpySmKcoxDnpBTnGMophXGOQZxTUpzjKKc0xjkOcU5LcU6gnDIY5wTEOSPFOYlyymKckxDnrBTnFMoph3FOQZxzUpzTKKc8xjkNcX6U4pxBORUwzhmI85MU5yzKqYhxzkKc81KccyinEsY5B3F+luL8iHIqY5wfIc4FKc5PKOcZjPMTxLkoxTmPcqpgnPMQ55IU52eUUxXj/AxxLktxLqCcahjnAsS5IsW5iHKqY5yLEOeqFOcSyqmBcS5BnGtSnMsopybGuQxxrktxrqCcWhjnCsS5IcW5inJqY5yrEOemFOcayqmDca5BnFtSnOsopy7GuQ5xbktxbqCcehjnBsS5I8W5iXLqY5ybEOcXKc4tlNMA49yCOHelOLdRzrMY5zbE+VWKcwflNMQ4dyDOPSnOLyinEcb5BeLcl+LcRTmNMc5diPNAivMrymmCcX6FOA+lOPdQTlOMcw/iPJLi3Ec5z2Gc+xDnsRTnAcpphnEeIJxgIinOQ5TTHOM8hDiaFOcRymmBcR5BHF2K8xjlPI9xHkMcQ4gTSIRyWmJz8CaCOD4pjoZyXsA4GsQxpTg6ymmFcXSI45fiGCjnRYxjQBxLiuNDOa0xjg/iBKQ4Jsp5CeOYEMeW4vhRThuM44c4QSmOhXJexjgWxAlJcQIo5xWME4A4iaU4Nsppi3FsiJNEihNEOe0wThDiJJXihFBOe4wTgjjJpDiJUU4HjJMY4iSX4iRBOR0xThKIk0KKkxTldMI4SSFOSilOMpQTgXGSQZxUUpzkKKczxkkOcVJLcVKgnC4YJwXESSPFSYlyumKclBAnrRQnFcqJxDipIE46KU5qlNMN46SGOOmlOGlQTneMkwbiZJDipEU5URgnLcTJKMVJh3J6YJx0ECeTFCc9yonGOOkhTmYpTgaU0xPjZIA4WaQ4GVEO+EtkGSFOVilOJpTzKsbJBHGySXEyo5wYjJMZ4mSX4mRBOb0xThaIk0OKkxXlxGKcrBAnpxQnG8rpg3GyQZxcUpzsKKcvxskOcXJLcXKgnNcwTg6Ik0eKkxPl9MM4OSFOXilOLpTTH+Pkgjj5pDi5Uc4AjJMb4uSX4uRBOa9jnDwQp4AUJy/KGYhx8kKcglKcfCjnDYyTD+IUkuLkRzmDME5+iFNYilMA5byJcQpAnCJSnIIoZzDGKQhxikpxCqGcIRinEMQpJsUpjHKGYpzCEKe4FKcIynkL4xSBOCWkOEVRzjCMUxTilJTiFEM5b2OcYhCnlBSnOMoZjnGKQ5zSUpwSKOcdjFMC4pSR4pREOSMwTkmIU1aKUwrlvItxSkGcclKc0ihnJMYpDXHKS3HKoJz3ME4ZiFNBilMW5YzCOGUhTkUpTjmU8z7GKQdxKklxyqOc0RinPMSpLMWpgHLGYJwKEOcZKU5FlDMW41SEOFWkOJVQzjiMUwniVJXiVEY5cRinMsSpJsV5BuWMxzjPQJzqUpwqKGcCxqkCcWpIcaqinIkYpyrEqSnFqYZyJmGcahCnlhSnOsr5AONAP6wZrC3FqYFyJmOcGhCnjhSnJsr5EOPUhDh1pTi1UM4UjFML4tST4tRGOR9hnNoQp74Upw7KmYpx6kCcBlKcuijnY4xTF+I8K8Wph3KmYZx6EKehFKc+yvkE49SHOI2kOA1QznSM0wDiNJbiPItyPsU4z0KcJlKchihnBsZpCHGaSnEaoZyZGKcRxHlOitMY5czCOI0hTjMpThOUMxvjNIE4zaU4TVHOHIzTFOK0kOI8h3LmYpznIM7zUpxmKGcexmkGcVpKcZqjnM8wTnOI84IUpwXKmY9xWkCcVlKc51HOAozzPMR5UYrTEuUsxDgtIU5rKc4LKOdzjPMCxHlJitMK5XyBcVpBnDZSnBdRziKM8yLEeRnhNIro0TOmf/3oyNjxKY8mmk72GrLXkr2O7PVkbyB7I9mbyN5M9hayt5K9jeztZO8geyfZYbKJ7F1k7yZ7D9l7yd5H9n6yvyP7ANnfk32Q7ENkHyb7CNk/kH2U7GNkHyf7BNknyT5F9mmyz5B9luxzZP9I9k9knyf7Z7IvkH2R7EtkXyb7CtlXyb5G9nWyb5B9k+xbZN8m+w7Zv5B9l+xfyb5H9n2yH5D9kOxHZD+mYPwUWxTUKWhQ0EdBk4J+CloUDFDQpmCQgiEKJqZgEgompWAyCianYAoKpqRgKgqmpmAaCqalYDoKpqdgBgpmpGAmCmamYBYKZqVgNgpmp2AOCuakYC4K5qZgHgrmpWA+CuanYAEKFqRgIQoWpmARChalYDEKFqdgCQqWpGApCpamYBkKlqVgOXU7Xt3CVrd91a1SdXtR3ZJTt7HUrR91u0TdYlDD8mooWw3/qiFTNcyohubUcJYaAlLDJmqoQV2eq0tadRmoLp3U5YY6RVentepUUJ0+qVMO1U2rrk11B+oQqg47aldVm7faJOb83t5/2ozHjoc2p1ecN02TkjyCvuV2crpxyA5kr1QLOQ6ytAXqz/t9VTXpFZdy/Ab1JxRs95e932mZ1EJ9Axwkaqhlxxa8vcQhKn7FtUPXMDZpR7AdxOngsh02/tYOHTxuG9CS2yuhJe/ofgvqSMFOrregamqB0DbEprhQX0OAEe6bRgEj5JpGR5ums/um6UzBLn9ZcqdKRs3xwPo2gO9gd2a6Su37XdBmwuaBCHaBOJHuNzDVTJFyG5iBbmDd3G9g3SjY3fW+X8XFvo/NmqC+hgCj3DeNAkbJNY0PbZoe7pumBwWjvZwP9URWeJIH0LceSu3a0WgrYDMHBKOhVdPL/fajWqGXl1Z4FVq/j6BvOZ+Vat428Vexk7sYYLUtrhHVvmP3Gj371ekT3bFm+6ioIbObVW9ct3bckLkvRMZGR/TurfJkd72Y1clejqxw6AkPeznE7S2wutUVU++xwGpcUCMmMioqskv8GpygTxwyp3lkdJeoiPFjxwFbCvIsm6uEVRM6YZWETqgOEAmfEjihiYvP2aNXVAQFY5987INW6J1Ae1Rs9j9vMb64P6xIR06BnhTYBR0tlpC91GEDfvz48d0nq/qfv6zF/89TK7Hvk4+vOf3tb38PrZ6+2Ndec39c+n3NQYfPZG4fVxgHNwhW3+3zBWMn/HPauGu/bcN9oYPpa8j+kKwh9K1GwPbn9mJJ7YuKMtblKoLOc+I3kVh0W9qDjbDGQiu9nxSnD8rZi3H6QJz+Upy+KGcfxsF2iQFSnNdQzn6M8xrEeV2K0w/lfIdx+kGcgVKc/ijnAMbpD3HekOIMQDnfY5wBEGeQFOd1lHMQ47wOcd6U4gxEOYcwzkCIM1iK8wbKOYxx3oA4Q6Q4g1DOEYwzCOIMleK8iXJ+wDhvQpy3pDiDUc5RjDMY4gyT4gxBOccwzhCI87YUZyjKOY5xhkKc4VKct1DOCYzzFsR5R4ozDOWcxDjDIM4IKc7bKOcUxnkb4rwrxRmOck5jnOEQZ6QU5x2UcwbjvANx3pPijEA5ZzHOCIgzSorzLso5h3HehTjvS3FGopwfMc5IiDNaivMeyvkJ47wHccZIcUahnPMYZxTEERs2fB/l/Ixx3oc446Q4o1HOBYwzGuLESXHGoJyLGGcMxBkvxRmLci5hnLEQZ4IUB759cxnjYPfIJ0px4Pt4VzBOHMSZJMUZj3KuYhzsaYwPpDgTUM41jDMB4kyW4kxEOdcxzkSI86EUZxLKuYFxJkGcKVKcD1DOTYzzAcT5SIozGeXcwjiTIc5UKc6HKOc2xvkQ4nwsxZmCcu5gnCkQZ5oU5yOU8wvG+QjifCLFmYpy7mKcqRBnuhTnY5TzK8b5GOJ8KsWZhnLuYZxpEGeGFOcTlHMf43wCcWZKcaajnAcYZzrEmSXF+RTlPMQ4n0Kc2VKcGSjnEcaZAXHmSHFmopzHGGcmxJkrxZkFcuxEGGcWxJknxZmNcjSMMxvifCbFmYNydIwzB+LMl+LMRTkGxpkLcRZIceahHB/GmQdxFkpxPkM5Jsb5DOJ8LsWZj3L8GGc+xPlCirMA5VgYZwHEWSTFWYhyAhhnIcRZLMX5HOXYGOdziPOlFOcLlBPEOF9AnCVSnEUoJ4RxFkGcpVKcxSgnMcZZDHG+kuJ8iXKSYJwvIc7XUpwlKCcpxlkCcZZJcZainGQYZynEWY5wnppSKNXRRNUo2I+C/Sk4gIKvU3AgBd+g4CAKvknBwRQcQsGhFHyLgsMo+DYFh1PwHQqOoOC7FBxJwfcoOIqC71NwNAXHUHCsunWubjerW7Tqtqa6Fahun6lbTuo2jbq1oW4HqCF0NeyshmrV8KYaElTDaGroSQ3XqCEONSygLqXV5ae6ZFOXOerSQJ1Oq1NQddqmTnXU6YHqUlU3pA7d6nCnDhFqt1Kbomo+Rf4XU+ascF71AeilrID7t8ug27PxL2WtwG68rgTqP3mnO1X8m/UrKbjKw5Q5wd7IThC/6Kuwl9ZXQcBvXAI3/gb8xuNKx5a8N7Tk37pvmm8puNrDXDR406zGgKsh4Br3TaOAa+SaRkebZq37pllLwXWum6aqi6ZZhzXNOgi43n3TKOB6uaYx0KbZ4L5p1H8bXTcNBbu6aJyNWONshIib3DeOIm6Saxwf2jib3TfOZgpu8TDFDt40W7Cm2QIBt7pvGgXcKtc0Jto029w3zTYKbvew3/SOn+kBbJztWONsh4g73DeOIu6Qaxw/2jg73TfOTgqGPTROTxd7ThhrnDBEJPeNo4gk1zgW2ji73DfOLgru9rbnxKKNsxtrnN0QcY/7xlHEPV4urvYii50wM17Ef8nb9rMXu7jaB6w2ZIaVfdm9LWZsQl6O7E8gzP7sbG8wblHwOxbzFaXgAR4rTsHveawkBQ/yWGkKHuKxshQ8zGPlKXiExypS8Aceq0zBozymzjCO8Zi6kDrOYzUoeILHalHwJI/VoeApHqtHwdM81oCCZ3isIQXP8lhjCp7jsaYU/JHHmlHwJx5rQcHzPNaSgj/zWCsKXuCx1hS8yGNtKHiJx16h4GUea0fBKzzWgYJXeawTBa/xWGcKXucxdYJ+g8e6UfAmj0VR8BaPRVPwNo/1ouAdHouh4C88FkvBuzzWl4K/8pgaQLvHY2o47T6PqcG1Bzymhtoe8pgaeHvEY2oY7jGPDaMQ75F8wymk8dgICuk8NpJCBo+NopCPx0ZTyOSxsRTy81gchSwem0ChAI9NopDNY5MpFOSxKRQK8dhUCiXmsWkUSsJj0ymUlMdmUCgZj82iUHIem0OhFDw2j0IpeWw+hVKxqSrV8S+UmsXU8S+UhseKUygtj5WkUDoeK02h9DxWlkIZeKw8hTLyWEUKZeKxyhTKzGNVKJSFx6pRKCuP1aBQNh6rRaHsPFaHQjl4rB6FcvJYAwrl4rGGFMrNY40plIfHmlIoL481o1A+HmtBofw81pJCBXisFYUK8lhrChXisTYUKsxjr1CoCI+1o1BRHutAoWI81olCxXmsM4VK8FhXCpXksW4UKsVjURQqzWPRFCrDY70oVJbHYihUjsdiKVSex/pSqAKP9aNQRR4bQKFKPDaQQpV5bBCFnuGxwRSqwmNDKVSVx9TxrxqPqeNfdR5Tx78aPKaOfzV5TB3/avGYOv7V5jF1/KvDY+r4V5fH1PGvHo+p4199HlPHvwY8po5/z/KYOv415DF1/GvEY+r415jH1PGvCY+p419THlPHv+d4TB3/mvGYOv4157FLFGrBY1co9DyPXaNQSx67QaEXeEwdT1vx2B0KvchjdynUmsfuUeglHntAoTY89ohCL7OYmYhCr/CYTqG2POajUDse81OoPY8FKNSBx4IU6shjiSnUiceSUiiCx5JTqDOPpaRQFx5LTaGuPJaWQpE8lp5C3XgsI4W681hmCkXxWFYK9eCx7BSK5rGcFOrJY7kp1IvH8lLoVR7LT6EYHitIod48VphCsTym+t8+PKb63748pvrf13hM9b/9eEz1v/15TPW/A3hM9b+v85jqfwfymOp/3+Ax1f8O4jHV/77JY6r/Hcxjqv8dwmOq/x3KY6r/fYvHVP87jMdU//s2j6n+dziPqf73HR5T/e8IHlP977s8pvrfkTym+t/3eEz1v6N4TPW/7/OY6n9H85jqf8fwmOp/x/KY6n/H8Zjqf+N4TPW/43lM9b8TeEz1vxN5TPW/k3hM9b8f8JjqfyfzmOp/P+Qx1f9O4THV/37EY6r/ncpjqv/9mMdU/zuNx1T/+wmPqf53Oo+p/vdTHlP97wweU/3vTB5T/e8sHlP972weU/3vHB5T/e9cHlP97zweU/3vZzym+t/5PKb63wU8pvrfhTym+t/PeUz1v1/wmOp/F/GY6n8X85jqf7/kMdX/LuEx1f8u/fOwHPRGMzb3d+grlwNu0LCnvZLsVeiQ135oZC7k9nkkbC1hI2mhZS7XEjZyGlr+fzpy6mX9YL/2EFohs35WIvIE+00BD+snEVC6tkRhDShcR6KwDhSuK1EY+fmeel4KOyWFftPc2O+2NDJvfgOJFekDCj8rUdgECjeUKOwHCoscPi2gcGOJwgGgcBOJwjZQuKlEYWDyI+05icIhoHAzicKJgcLNJQonAQq3kCicFCj8vEThZEDhlhKFkwOFX5AonAIo3EqicEqg8IsShVMBhVtLFE4NFH5JonAaoHAbicJpgcIvSxROBxR+RaJweqBwW4nCGYDC7SQKZwQKt5conAko3EGicGagcEeJwlmAwp0kCmcFCkdIFM4GFO4sUTg7ULiLROEcQOGuEoVzAoUjJQrnAgp3c1sYuejuLpE0yssqckraAxqZOCTROrmBxYt2WRj7LdXlFOyJfDH0lRozRpqmp0R795JI+qpE0hiJpL0lksZKJO0jkbSvRNLXJJL2k0jaXyLpAImkr0skHSiR9A2JpIMkkr4pkTQ8WCTrEJGsQ0WyviWSdZhI1rdFsg4XyfqOSNYRIlnfFck6UiTreyJZR4lkfV8k62iRrGNEso4VyTpOJGucSNbxIlkniGSdKJJ1kkjWD0SyThbJ+qFI1ikiWT8SyTpVJOvHIlmniWT9RCTrdJGsn4pknSGSdaZI1lkiWWeLZJ0jknWuSNZ5Ilk/E8k6XyTrApGsC0Wyfi6S9QuRrItEsi4WyfqlSNYlIlmXimT9SiTr1yJZl4lkXS6SdYVI1pUiWVeJZP1GJOu3IllXi2RdI5J1rUjWdSJZ14tk3SCSdaNI1k0iWTeLZN0iknWrSNZtIlm3i2TdIZJ1p0jWsEhWEsm6SyTrbpGse0Sy7hXJuk8kq8gbNOHvRLIeEMn6vUjWgyJZD4lkPSyS9YhI1h9Esh4VyXpMJOtxkawnRLKeFMl6SiTraZGsZ0SynhXJek4k648iWX8SyXpeJOvPIlkviGS9KJL1kkjWyyJZr4hkvSqS9ZpI1usiWW+IZL0pkvWWSNbbIlnviGT9RSTrXZGsv4pkvSeS9b5I1gciWR+KZH0kkvWxRFbSEsmk1WTS6jJpDZm0Ppdp4bnf+6Fzv38HzfutxU+h4ZyvnxSnP8o5gHH8EKe/FGcAyvke41gQZ4AU53WUcxDjBCDO61KcgSjnEMaxIc5AKc4bKOcwxglCnDekOINQzhGME4I4g6Q4b6KcHzBOYojzphRnMMo5inGSQJzBUpwhKOcYxkkKcYZIcYainOMYJxnEGSrFeQvlnMA4ySHOW1KcYSjnJMZJAXGGSXHeRjmnME5KiPO2FGc4yjmNcVJBnOFSnHdQzhmMkxrivCPFGYFyzmKcNBBnhBTnXZRzDuOkhTjvSnFGopwfMU46iDNSivMeyvkJ46SHOO9JcUahnPMYJwPEGSXFeR/l/IxxMkKc96U4o1HOBYyTCeKMluKMQTkXMU5miDNGijMW5VzCOFkgzlgpzjiUcxnjZIU446Q4cSjnCsbJBnHipDjjUc5VjJMd4oyX4kxAOdcwTg6IM0GKMxHlXMc4OSHORCnOJJRzA+PkgjiTpDgfoJybGCc3xPlAijMZ5dzCOHkgzmQpzoco5zbGyQtxPpTiTEE5dzBOPogzRYrzEcr5BePkhzgfSXGmopy7GKcAxJkqxfkY5fyKcQpCnI+lONNQzj2MUwjiTJPifIJy7mOcwhDnEynOdJTzAOMUgTjTpTifopyHGKcoxPlUijMD5TzCOMUgzgwpzkyU8xjjFIc4M6U4s0BOKBHGKQFxZklxZqMcDeOUhDizpThzUI6OcUpBnDlSnLkox8A4pSHOXCnOPJTjwzhlIM48Kc5nKMfEOGUhzmdSnPkox49xykGc+VKcBSjHwjjlIc4CKc5ClBPAOBUgzkIpzucox8Y4FSHO51KcL1BOEONUgjhfSHEWoZwQxqkMcRZJcRajnMQY5xmIs1iK8yXKSYJxqkCcL6U4S1BOUoxTFeIskeIsRTnJME41iLNUivMVykmOcapDnK+kOF+jnBQYpwbE+VqKswzlpMQ4NSHOMinOcpSTCuPUgjjLPXCgEY19yBdDyyi0HHvRqLbEeo//tfU1yIKqL4ZSY+u9DrLe7TVSnLUoJw3GqQtx1kpx1qGctBinHsRZJ8VZj3LSYRzoF7bt9VKcDSgnPcZpAHE2SHE2opwMGOdZiLNRirMJ5WTEOA0hziYpzmaUkwnjNII4m6U4W1BOZozTGOJskeJsRTlZME4TiLNVirMN5WTFOE0hzjYpznaUkw3jPAdxtktxdqCc7BinGcTZIcXZiXJyYJzmEGenFCeMcnJinBYQJyzFIZSTC+M8D3FIirML5eTGOC0hzi4pzm6UkwfjvABxdktx9qCcvBinFcTZI8XZi3LyYZwXIc5eKc4+lJMf47SGOPukOPtRTgGM8xLE2S/F+Q7lFMQ4bSDOd1KcAyinEMZ5GeIckOJ8j3IKY5xXIM73UpyDKKcIxmkLcQ5KcQ6hnKIYpx3EOSTFOYxyimGc9hDnsBTnCMopjnE6QJwjUpwfUE4JjNMR4vwgxTmKckpinE4Q56gU5xjKKYVxIiDOMSnOcZRTGuN0hjjHpTgnUE4ZjNMF4pyQ4pxEOWUxTleIc1KKcwrllMM4kRDnlBTnNMopj3G6QZzTUpwzKKcCxukOcc5Icc6inIoYJwrinJXinEM5lTBOD4hzTorzI8qpjHGiIc6PUpyfUM4zGKcnxPlJinMe5VTBOL0gznkpzs8opyrGeRXi/CzFuYByqmGcGIhzQYpzEeVUxzi9Ic5FKc4llFMD48RCnEtSnMsopybG6QNxLktxrqCcWhinL8S5IsW5inJqY5zXIM5VKc41lFMH4/SDONekONdRTl2M0x/iXJfi3EA59TDOAIhzQ4pzE+XUxzivQ5ybUpxbKKcBxhkIcW5JcW6jnGcxzhsQ57YU5w7KaYhxBkGcO1KcX1BOI4zzJsT5RYpzF+U0xjiDIc5dKc6vKKcJxhkCcX6V4txDOU0xzlCIc0+Kcx/lPIdx3oI496U4D1BOM4wzDOI8kOI8RDnNMc7bEOehFOcRymmBcYZDnEdSnMco53mM8w7EeSzECSZCOS0xzgiEE0wkxdFQzgsY512Io0lxdJTTCuOMhDi6FMdAOS9inPcgjiHF8aGc1hhnFMTxSXFMlPMSxnkf4phSHD/KaYNxRkMcvxTHQjkvY5wxEMeS4gRQzisYZyzECUhxbJTTFuOMgzi2FCeIctphnDiIE5TihFBOe4wzHuKEpDiJUU4HjDMB4iSW4iRBOR0xzkSIk0SKkxTldMI4kyBOUilOMpQTgXE+gDjJpDjJUU5njDMZ4iSX4qRAOV0wzocQJ4UUJyXK6YpxpkCclFKcVCgnEuN8BHFSSXFSo5xuGGcqxEktxUmDcrpjnI8hThopTlqUE4VxpkGctFKcdCinB8b5BOKkk+KkRznRGGc6xEkvxcmAcnpinE8hTgYpTkaU0wvjzIA4GaU4mVDOqxhnJsTJJMXJjHJiMM4siJNZipMF5fTGOLMhThYpTlaUE4tx5kCcrFKcbCinD8aZC3GySXGyo5y+GGcexMkuxcmBcl7DOJ9BnBxSnJwopx/GmQ9xckpxcqGc/hhnAcTJJcXJjXIGYJyFECe3FCcPynkd43wOcfJIcfKinIEY5wuIk1eKkw/lvIFxFkGcfFKc/ChnEMZZDHHyS3EKoJw3Mc6XEKeAFKcgyhmMcZZAnIJSnEIoZwjGWQpxCklxCqOcoRjnK4hTWIpTBOW8hXG+hjhFpDhFUc4wjLMM4hSV4hRDOW9jnOUQp5gUpzjKGY5xVkCc4lKcEijnHYyzEuKUkOKURDkjMM4qiFNSilMK5byLcb6BOKWkOKVRzkiM8y3EKS3FKYNy3sM4qyFOGSlOWZQzCuOsgThlpTjlUM77GGctxCknxSmPckZjnHUQp7wUpwLKGYNx1kOcClKciihnLMbZAHEqSnEqoZxxGGcjxKkkxamMcuIwziaIU1mK8wzKGY9xNkOcZ6Q4VVDOBIyzBeJUkeJURTkTMc5WiFNVilMN5UzCONsgTjUpTnWU8wHG2Q5xqktxaqCcyRhnB8SpIcWpiXI+xDg7IU5NKU4tlDMF44QhTi0pTm2U8xHGIYgj9btvwTooZyrG2QVx6khx6qKcjzHObohTV4pTD+VMwzh7IE49KU59lPMJxtkLcepLcRqgnOkYZx/EaSDFeRblfIpx9kOcZ6U4DVHODIzzHcRpKMVphHJmYpwDEKeRFKcxypmFcb6HOI2lOE1QzmyMcxDiNJHiNEU5czDOIYjTVIrzHMqZi3EOQ5znpDjNUM48jHME4jST4jRHOZ9hnB8gTnMpTguUMx/jHIU4LaQ4z6OcBRjnGMR5XorTEuUsxDjHIU5LKc4LKOdzjHMC4rwgxWmFcr7AOCchTispzosoZxHGOQVxXpTitEY5izHOaYjTWorzEsr5EuOcgTgvSXHaoJwlGOcsxGkjxXkZ5SzFOOcgzsseOMhSBmOQL4ZWUGjlOIjj9hcOxmJpf5JJe14m7c8yaS/IpL0ok/aSTNrLMmmvyKS9KpP2mkza6zJpb8ikvSmT9pZM2tsyae/IpP1FJu1dmbS/yqS9J5P2vkzaBzJpH8qkfSST9rFIWj2RTFpNJq0uk9aQSeuTSWvKpPXLpLVk0gZk0toyaYMyaUMyaRPLpE0ikzapTNpkMmmTy6RNIZM2pUzaVDJpU8ukTSOTNq1M2nQyadPLpM0gkzajTNpMMmkzy6TNIpM2q0zabDJps8ukzSGTNqdM2lwyaXPLpM0jkzavTNp8Mmnzy6QtIJO2oEzaQjJpC8ukLSKTtqhM2mIyaYvLpC0hk7akTNpSMmlLy6QtI5O2rEzacjJpy8ukrSCTtqJM2koyaSvLpH1GJm0VmbRVZdJWk0lbXSZtDZm0NWXS1pJJW1smbR2ZtHVl0taTSVtfJm0DmbTPyqRtKJO2kUzaxjJpm8ikbSqT9jmZtM1k0jaXSdtCJu3zMmlbyqR9QSZtK5m0L8qkbS2T9iWZtG1k0r4sk/YVmbRtZdK2k0nbXiZtB5m0HWXSdpJJGyGTtrNM2i4yabvKpI2USdtNJm13mbRRMml7yKSNlknbUyZtL5m0r8qkjZFJ21smbaxM2j4yafvKpH1NJm0/mbT9ZdIOkEn7ukzagTJp35BJO0gm7ZsyaQfLpB0ik3aoTNq3ZNIOk0n7tkza4TJp35FJO0Im7bsyaUfKpH1PJu0ombTvy6QdLZN2jEzasTJpx8mkjZNJO14m7QSZtBNl0k6SSfuBTNrJMmk/lEk7RSbtRzJpp8qk/Vgm7TSZtJ/IpJ0uk/ZTmbQzZNLOlEk7SybtbJm0c2TSzpVJO08m7WcyaefLpF0gk3ahTNrPZdJ+IZN2kUzaxTJpv5RJu0Qm7VKZtF/JpP1aJu0ymbTLZdKukEm7UibtKpm038ik/VYm7WqZtGtk0q6VSbtOJu16mbQbZNJulEm7SSbtZpm0W2TSbpVJu00m7XaZtDtk0u6USRuWSUsyaXfJpN0tk3aPTNq9Mmn3yaTdL5P2O5m0B2TSfi+T9qBM2kMyaQ/LpD0ik/YHmbRHZdIek0l7XCbtCZm0J2XSnpJJe1om7RmZtGdl0p6TSSsz/60uM/+tLjP/rS4z/60uM/+tLjP/rS4z/60uM/+tLjP/rS4z/60uM/+tLjP/rX5DJq3M/Le6zPy3usz8t7rM/Le6zPy3usz8t7rM/Le6zPy3usz8t7rM/Le6zPy3usz8t7rM/LeGzPy3hsz8t4bM/LeGzPy3hsz8t4bM/LeGzPy3hsz8t4bM/LeGzPy3hsz8t4bM/LeGzPy3hsz8t4bM/LeGzPy3hsz8t4bM/LdGSpm0MvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGjLz3xoy898aMvPfGiVl0srMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2vIzH9ryMx/a8jMf2s0k0krM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tITP/rSEz/60hM/+tESOTVmb+W0Nm/ltDZv5bQ2b+W0Nm/ltDZv5bQ2b+W0Nm/ltDZv5bQ2b+W0Nm/ltDZv5bQ2b+W0Nm/ltDZv5bQ2b+W0Nm/ltDZv5bQ2b+W0Nm/ltDZv5bQ2b+W0Nm/lvD9fy3cSpt8U6NY06VmF5gRdPay4YMafVy/lLn6/Vf2WtczVO3x19Tf5EHKg3NkdsookfPmP71oyNjx6c+atStXaduvfoNnm3YqHGTps81a97i+ZYvtHqx9UttXn6lbbv2HTp2iujcpWtkt+5RPaJ79no1pndsn76v9es/4PWBbwx6Mzw4PCQ8NPxWeFj47fDw8DvhEeF3wyPD74VHhd8Pjw6PCY8NjwvHhceHJ4QnhieFPwhPDn8YnhL+KDw1/HF4WviT8PTwp+EZ4ZnhWeHZ4TnhueF54c/C88MLwgvDn4e/CC8KLw5/GV4SXhr+Kvx1eFl4eXhFeGV4Vfib8Lfh1eE14bXhdeH14Q3hjeFN4c3hLeGt4W3h7eEd4Z3hcJjCu8K7w3vCe8P7wvvD34UPhL8PHwwfCh8OHwn/ED4aPhY+Hj4RPhk+FT4dPhM+Gz4X/jH8U/h8+OfwhfDF8KXw5fCV8NXwtfD18I3wzfCt8O3wnfAv4bvhX8P3wvfDD8IPw4/Cj0lLRJpGmk6aQZqPNJM0P2kWaQHSbNKCpIVIS0xaEtKSkpaMtOSkpSAtJWmpSEtNWhrS0pKWjrT0pGUgLSNpmUjLTFoW0rKSlo207KTlIC0nablIy01aHtLykpaPtPykFSCtIGmFSCtMWhHSipJWjLTipJUgrSRppUgrTVoZ0sqSVo608qRVIK0iaZVIq0zaM6RVIa0qadVIq05aDdJqklaLtNqk1SGtLmn1SKtPWgPSniWtIWmNSGtMWhPSmpL2HGnNSGtOWgvSnietJWkvkNaKtBdJa03aS6S1Ie1l0l4hrS1p7UhrT1oH0jqS1om0CNI6k9aFtK6kRZLWjbTupEWR1oO0aNJ6ktaLtFdJiyGtN2mxpPUhrS9pr5HWj7T+pA0g7XXSBpL2BmmDSHuTtMGkDSFtKGlvkTaMtLdJG07aO6SNIO1d0kaS9h5po0h7n7TRpI0hbSxp40iLI208aRNIm0jaJNI+IG0yaR+SNoW0j0ibStrHpE0j7RPSppP2KWkzSJtJ2izSZpM2h7S5pM0j7TPS5pO2gLSFpH1O2hekLSJtMWlfkraEtKWkfUXa16QtI205aStIW0naKtK+Ie1b0laTtoa0taStI209aRtI20jaJtI2k7aFtK2kbSNtO2k7SNtJWpg0Im0XabtJ20PaXtL2kbaftO9IO0Da96QdJO0QaYdJO0LaD6QdJe0YacdJO0HaSdJOkXaatDOknSXtHGk/kvYTaedJ+5m0C6RdJO0SaZdJu0LaVdKukXadtBuk3STtFmm3SbtD2i+k3SXtV9LukXaftAekPSTtEWmPSU9Euka6TrpBuo90k3Q/6RbpAdJt0oOkh0hPTHoS0pOSnoz05KSnID0l6alIT016GtLTkp6O9PSkZyA9I+mZSM9MehbSs5KejfTspOcgPSfpuUjPTXoe0vOSno/0/KQXIL0g6YVIL0x6EdKLkl6M9OKklyC9JOmlSC9NehnSy5JejvTypFcgvSLplUivTPozpFchvSrp1UivTnoN0muSXov02qTXIb0u6fVIr096A9KfJb0h6Y1Ib0x6E9Kbkv4c6c1Ib056C9KfJ70l6S+Q3or0F0lvTfpLpLch/WXSXyG9LentSG9PegfSO5LeifQI0juT3oX0rqRHkt6N9O6kR5Heg/Ro0nuS3ov0V0mPIb036bGk9yG9L+mvkd6P9P6kDyD9ddIHkv4G6YNIf5P0waQPIX0o6W+RPoz0t0kfTvo7pI8g/V3SR5L+HumjSH+f9NGkjyF9LOnjSI8jfTzpE0ifSPok0j8gfTLpH5I+hfSPSJ9K+sekTyP9E9Knk/4p6TNIn0n6LNJnkz6H9LmkzyP9M9Lnk76A9IWkf076F6QvIn0x6V+SvoT0paR/RfrXpC8jfTnpK0hfSfoq0r8h/VvSV5O+hvS1pK8jfT3pG0jfSPom0jeTvoX0raRvI3076TtI30l6mHQifRfpu0nfQ/pe0veRvp/070g/QPr3pB8k/RDph0k/QvoPpB8l/Rjpx0k/QfpJ0k+Rfpr0M6SfJf0c6T+S/hPp50n/mfQLpF8k/RLpl0m/QvpV0q+Rfp30G6TfJP0W6bdJv0P6L6TfJf1X0u+Rfp/0B6Q/JP0R6Y/JSESG6nZ1MgwyfGSYZPjJsMgIkGGTESQjREZiMpKQkZSMZGQkJyMFGSnJSEVGajLSkJGWjHRkpCcjAxkZychERmYyspCRlYxsZGQnIwcZOcnIRUZuMvKQkZeMfGTkJ6MAGQXJKERGYTKKkFGUjGJkFCejBBklyShFRmkyypBRloxyZJQnowIZFcmoREZlMp4howoZVcmoRkZ1MmqQUZOMWmTUVnf21V14dcdc3d1Wd6LVXWN1h1fdjVV3TtVdTnVHUt09VHf61F05dQdN3e1Sd6bUXSR1x0fdnVF3UtRdD3WHQt1NUCP/apRejair0W81Uq1GldUIsBqtVSOrahRUjViq0UU1EqhG7dQImxoNUyNXapRJjQip0Rs10qJGRdQIhhptUCMD6ipeXXGrq2N1JauuOtUVorqaU1de6ipJXdGoqw91paDO6tUZuDpbVme26ixUnTGqszt1JqbOiOY3i4jtExNdq31s+6OJaifSdMNn+q2AHQwlTpI0WfIUKVOlTpM2XfoMGTNlzpI1W/YcOXPlzpM3X/4CBQsVLlK0WPESJUuVLlO2XPkKFStVfqZK1WrVa9SsNXbs0UTZ4obMqt4xMqZJ3O491sVbO7d0GTv2P6Hn/hpq9ddQm7jdY45cPD4sOPrKf0Pt/vqtHn8NxcbtXlqmcMUkrfIO/m8oPOGvycIf/c33tvw1nTqm/V3whb/+tdpo/+abRpq/1lbb8N/9+ZC/+/O3/iboi/m74Ot/k9Ms9zffNCv8zSKZNf7uz+f+3Z9/9jdB/+S/C376Nzmtl//mm1bbv1kkq+vf/Tn93Z/vfio4Me5w/va/XT607dizR6/2sZEdoiLa9oxp31H9f30jYnpH9oxu+1pM+169ImKOJko+ZHbNntG9Y8cPmVMrMiaiY6w+ZG796NiILhExM58vVdL5qoL/vebq7wfX5n+fyF392kNm1WwfFTUu9Eeeec0iohS6b4RLSaK/ZjDcZlgYvyyd1LGkZs9e/f8g1X56mZ5K/vuSJ/3XS147AZZ8VvPYnr3Gxf2PJWVtVHN2nciIKOdbdln5H9YC/9Cc8/theciCOj1jIiK7RMevqYlqux4QG9GxbY/I3h3b/r6J1/xjC2/y2wbe8vftO37X+Pz3C9nqnTrFRPTu/cei/494rbghc5pH9ugVFfH7Iv75//rP4sQdLvyfPatv+6jITm179ekQFdmxbUe1cG3jW/2/e9l/9q6P/x/vW7X+5b5V619vV9pfM/gSZp+q+fQyPZV8ZqOeff+0Ff/x/YQ6TtQS39v+vNHn+n2j7xXT9z/bfMv4ba/pb5vef1fN2LHj+Hb9JPW4v9+W1/y22faKiezbPjaibec+0R1j43uGSAWJiW4fdTRR+v/Hm2+Df7n5NvhrQ1nuMph/zRBI8M3Xejq52kifPlw++fB0VfatOk8+/MO36j758N9vzXi+xD/sL+xfjCfLwv7F96SfY/9iPlky9i/+J0vz+36Z+j/f+E+43tOL9Kd/qf93/ZLXo0u9v2Yw3WXQ/7ov+55O9qd9efWTXTl+52v6+75X5z+7Xtz/3IWt//kvgT+6rT+3/Z/2+In/+9jwP//F+J//4vuf/2L+z3/xT/z73vUfFvofv/LPm/BT6+0vG/GTNfff4+DiTr9tVyqkjn3q/Dj2Q37cSfMvj3upE+aYkejJ8vyRmB+hwfOrREM+rxEZ3T6m/29fb9Jrwn8TGHNqv9qnfVTvv9RUB4YGfXr0qt/5jx3RCPzl+A5W1/5X9UQza0X2fdJb/LEM/93F/mD/d0XErXq68X5bxW1f7dMzNjIiOnYyX7yg2z2b/X0ogZsx+CTx/1gf+vz/FHxqtSR6sn7+x19pMxv1iXqq3Ry/3rxPh7/J/qej7lPbAWuM0B+c/x8V2TUMvesEAA==",
|
|
6148
5882
|
"custom_attributes": [
|
|
6149
5883
|
"abi_private"
|
|
6150
5884
|
],
|
|
6151
|
-
"debug_symbols": "tZ3djlxlkkXfxddc5I6I7yd4lVELGXC3LFkGGRhphPzukz9nr1NmVCljNDeccBfekVVZKzMjzuLrP9/8/O7HP/7zw/uP//7ltzff/9efb3789P7Dh/f/+eHDLz+9/f39Lx+v/+ufby63f6jefJ+fv3uj+x+u/4zrH+L2h7h+XZ+vf/Jf+uH3T+/e3b7yIuWa/evbT+8+/v7m+49/fPjw3Zv/fvvhj/u/9Nuvbz/er7+//XT96uW7N+8+/ny9XgP//f7Du1v1+bvzb19e/6vzUsdfXuv869rrqwPGdMBlERCX/bUBGpd1JGj0+RhCX/0YdoSOiB2rz29DXz6KevIocm8/ispvehSanY5Yo4ioS30RMV+PqJC/kXr5jVR9+YSu1yNylSNy6/JqxH49ouelj4iemi8i4psiMl+N0OWffye3H9k/
|
|
5885
|
+
"debug_symbols": "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",
|
|
6152
5886
|
"is_unconstrained": false,
|
|
6153
5887
|
"name": "entrypoint",
|
|
6154
|
-
"verification_key": "
|
|
5888
|
+
"verification_key": "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"
|
|
6155
5889
|
},
|
|
6156
5890
|
{
|
|
6157
5891
|
"abi": {
|
|
@@ -6164,10 +5898,6 @@
|
|
|
6164
5898
|
"error_kind": "string",
|
|
6165
5899
|
"string": "Index out of bounds"
|
|
6166
5900
|
},
|
|
6167
|
-
"4215903597095405243": {
|
|
6168
|
-
"error_kind": "string",
|
|
6169
|
-
"string": "offchain message anchor timestamp is implausibly far in the future"
|
|
6170
|
-
},
|
|
6171
5901
|
"9530675838293881722": {
|
|
6172
5902
|
"error_kind": "string",
|
|
6173
5903
|
"string": "Writer did not write all data"
|
|
@@ -6279,11 +6009,11 @@
|
|
|
6279
6009
|
],
|
|
6280
6010
|
"return_type": null
|
|
6281
6011
|
},
|
|
6282
|
-
"bytecode": "H4sIAAAAAAAA/+
|
|
6012
|
+
"bytecode": "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",
|
|
6283
6013
|
"custom_attributes": [
|
|
6284
6014
|
"abi_utility"
|
|
6285
6015
|
],
|
|
6286
|
-
"debug_symbols": "
|
|
6016
|
+
"debug_symbols": "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",
|
|
6287
6017
|
"is_unconstrained": true,
|
|
6288
6018
|
"name": "offchain_receive"
|
|
6289
6019
|
},
|
|
@@ -6321,11 +6051,6 @@
|
|
|
6321
6051
|
],
|
|
6322
6052
|
"length": 66
|
|
6323
6053
|
},
|
|
6324
|
-
"12706857619424059571": {
|
|
6325
|
-
"error_kind": "fmtstring",
|
|
6326
|
-
"item_types": [],
|
|
6327
|
-
"length": 37
|
|
6328
|
-
},
|
|
6329
6054
|
"12820178569648940736": {
|
|
6330
6055
|
"error_kind": "fmtstring",
|
|
6331
6056
|
"item_types": [
|
|
@@ -6428,11 +6153,11 @@
|
|
|
6428
6153
|
],
|
|
6429
6154
|
"return_type": null
|
|
6430
6155
|
},
|
|
6431
|
-
"bytecode": "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",
|
|
6156
|
+
"bytecode": "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",
|
|
6432
6157
|
"custom_attributes": [
|
|
6433
6158
|
"abi_utility"
|
|
6434
6159
|
],
|
|
6435
|
-
"debug_symbols": "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",
|
|
6160
|
+
"debug_symbols": "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",
|
|
6436
6161
|
"is_unconstrained": true,
|
|
6437
6162
|
"name": "sync_state"
|
|
6438
6163
|
},
|
|
@@ -6719,5 +6444,5 @@
|
|
|
6719
6444
|
}
|
|
6720
6445
|
},
|
|
6721
6446
|
"transpiled": true,
|
|
6722
|
-
"aztec_version": "0.0.1-commit.
|
|
6447
|
+
"aztec_version": "0.0.1-commit.b8a057fa"
|
|
6723
6448
|
}
|