@aztec/stdlib 5.0.0-nightly.20260320 → 5.0.0-nightly.20260321
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dest/abi/buffer.d.ts +14 -4
- package/dest/abi/buffer.d.ts.map +1 -1
- package/dest/abi/buffer.js +25 -4
- package/dest/avm/avm.d.ts +300 -300
- package/dest/block/l2_block_source.d.ts +5 -3
- package/dest/block/l2_block_source.d.ts.map +1 -1
- package/dest/contract/index.d.ts +1 -3
- package/dest/contract/index.d.ts.map +1 -1
- package/dest/contract/index.js +0 -2
- package/dest/contract/interfaces/contract_class.d.ts +3 -156
- package/dest/contract/interfaces/contract_class.d.ts.map +1 -1
- package/dest/contract/interfaces/contract_class.js +1 -28
- package/dest/epoch-helpers/index.d.ts +3 -1
- package/dest/epoch-helpers/index.d.ts.map +1 -1
- package/dest/epoch-helpers/index.js +6 -0
- package/dest/interfaces/proving-job.d.ts +34 -34
- package/dest/tests/factories.d.ts +2 -4
- package/dest/tests/factories.d.ts.map +1 -1
- package/dest/tests/factories.js +0 -27
- package/dest/tx/validator/error_texts.d.ts +5 -1
- package/dest/tx/validator/error_texts.d.ts.map +1 -1
- package/dest/tx/validator/error_texts.js +6 -0
- package/package.json +8 -8
- package/src/abi/buffer.ts +25 -4
- package/src/block/l2_block_source.ts +4 -2
- package/src/contract/index.ts +0 -2
- package/src/contract/interfaces/contract_class.ts +2 -82
- package/src/epoch-helpers/index.ts +11 -0
- package/src/tests/factories.ts +0 -33
- package/src/tx/validator/error_texts.ts +8 -0
- package/dest/contract/private_function_membership_proof.d.ts +0 -32
- package/dest/contract/private_function_membership_proof.d.ts.map +0 -1
- package/dest/contract/private_function_membership_proof.js +0 -124
- package/dest/contract/utility_function_membership_proof.d.ts +0 -27
- package/dest/contract/utility_function_membership_proof.d.ts.map +0 -1
- package/dest/contract/utility_function_membership_proof.js +0 -87
- package/src/contract/private_function_membership_proof.ts +0 -167
- package/src/contract/utility_function_membership_proof.ts +0 -118
|
@@ -1,124 +0,0 @@
|
|
|
1
|
-
import { poseidon2Hash } from '@aztec/foundation/crypto/poseidon';
|
|
2
|
-
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
|
-
import { createLogger } from '@aztec/foundation/log';
|
|
4
|
-
import { computeRootFromSiblingPath } from '@aztec/foundation/trees';
|
|
5
|
-
import { FunctionSelector, FunctionType } from '../abi/index.js';
|
|
6
|
-
import { computeArtifactFunctionTree, computeArtifactHash, computeArtifactHashPreimage, computeFunctionArtifactHash, computeFunctionMetadataHash, getArtifactMerkleTreeHasher } from './artifact_hash.js';
|
|
7
|
-
import { getContractClassPrivateFunctionFromArtifact } from './contract_class.js';
|
|
8
|
-
import { computePrivateFunctionLeaf, computePrivateFunctionsTree } from './private_function.js';
|
|
9
|
-
/**
|
|
10
|
-
* Creates a membership proof for a private function in a contract class, to be verified via `isValidPrivateFunctionMembershipProof`.
|
|
11
|
-
* @param selector - Selector of the function to create the proof for.
|
|
12
|
-
* @param artifact - Artifact of the contract class where the function is defined.
|
|
13
|
-
*/ export async function createPrivateFunctionMembershipProof(selector, artifact) {
|
|
14
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
15
|
-
// Locate private function definition and artifact
|
|
16
|
-
const privateFunctions = artifact.functions.filter((fn)=>fn.functionType === FunctionType.PRIVATE);
|
|
17
|
-
const privateFunctionsFromArtifact = await Promise.all(privateFunctions.map(getContractClassPrivateFunctionFromArtifact));
|
|
18
|
-
const privateFunction = privateFunctionsFromArtifact.find((fn)=>fn.selector.equals(selector));
|
|
19
|
-
const privateFunctionsAndSelectors = await Promise.all(privateFunctions.map(async (fn)=>({
|
|
20
|
-
fn,
|
|
21
|
-
selector: await FunctionSelector.fromNameAndParameters(fn.name, fn.parameters)
|
|
22
|
-
})));
|
|
23
|
-
const privateFunctionArtifact = privateFunctionsAndSelectors.find((fnAndSelector)=>selector.equals(fnAndSelector.selector))?.fn;
|
|
24
|
-
if (!privateFunction || !privateFunctionArtifact) {
|
|
25
|
-
throw new Error(`Private function with selector ${selector.toString()} not found`);
|
|
26
|
-
}
|
|
27
|
-
// Compute preimage for the artifact hash
|
|
28
|
-
const { utilityFunctionRoot: utilityFunctionsTreeRoot, metadataHash: artifactMetadataHash } = await computeArtifactHashPreimage(artifact);
|
|
29
|
-
// We need two sibling paths because private function information is split across two trees:
|
|
30
|
-
// The "private function tree" captures the selectors and verification keys, and is used in the kernel circuit for verifying the proof generated by the app circuit.
|
|
31
|
-
const functionLeaf = await computePrivateFunctionLeaf(privateFunction);
|
|
32
|
-
const functionsTree = await computePrivateFunctionsTree(privateFunctionsFromArtifact);
|
|
33
|
-
const functionsTreeLeafIndex = functionsTree.getIndex(functionLeaf);
|
|
34
|
-
const functionsTreeSiblingPath = functionsTree.getSiblingPath(functionsTreeLeafIndex).map(Fr.fromBuffer);
|
|
35
|
-
// And the "artifact tree" captures function bytecode and metadata, and is used by the pxe to check that its executing the code it's supposed to be executing, but it never goes into circuits.
|
|
36
|
-
const functionMetadataHash = computeFunctionMetadataHash(privateFunctionArtifact);
|
|
37
|
-
const functionArtifactHash = await computeFunctionArtifactHash({
|
|
38
|
-
...privateFunctionArtifact,
|
|
39
|
-
functionMetadataHash
|
|
40
|
-
});
|
|
41
|
-
const artifactTree = await computeArtifactFunctionTree(artifact, FunctionType.PRIVATE);
|
|
42
|
-
const artifactTreeLeafIndex = artifactTree.getIndex(functionArtifactHash.toBuffer());
|
|
43
|
-
const artifactTreeSiblingPath = artifactTree.getSiblingPath(artifactTreeLeafIndex).map(Fr.fromBuffer);
|
|
44
|
-
log.debug(`Computed proof for private function with selector ${selector.toString()}`, {
|
|
45
|
-
functionArtifactHash,
|
|
46
|
-
functionMetadataHash,
|
|
47
|
-
functionLeaf: '0x' + functionLeaf.toString('hex'),
|
|
48
|
-
artifactMetadataHash,
|
|
49
|
-
privateFunctionsTreeRoot: '0x' + functionsTree.root.toString('hex'),
|
|
50
|
-
utilityFunctionsTreeRoot,
|
|
51
|
-
artifactFunctionTreeSiblingPath: artifactTreeSiblingPath.map((fr)=>fr.toString()).join(','),
|
|
52
|
-
privateFunctionTreeSiblingPath: functionsTreeSiblingPath.map((fr)=>fr.toString()).join(',')
|
|
53
|
-
});
|
|
54
|
-
return {
|
|
55
|
-
artifactTreeSiblingPath,
|
|
56
|
-
artifactTreeLeafIndex,
|
|
57
|
-
artifactMetadataHash,
|
|
58
|
-
functionMetadataHash,
|
|
59
|
-
utilityFunctionsTreeRoot,
|
|
60
|
-
privateFunctionTreeSiblingPath: functionsTreeSiblingPath,
|
|
61
|
-
privateFunctionTreeLeafIndex: functionsTreeLeafIndex
|
|
62
|
-
};
|
|
63
|
-
}
|
|
64
|
-
/**
|
|
65
|
-
* Verifies that a private function with a membership proof as emitted by the ClassRegistry contract is valid,
|
|
66
|
-
* as defined in the protocol specs at contract-deployment/classes:
|
|
67
|
-
*
|
|
68
|
-
* ```
|
|
69
|
-
* // Load contract class from local db
|
|
70
|
-
* contract_class = db.get_contract_class(contract_class_id)
|
|
71
|
-
*
|
|
72
|
-
* // Compute function leaf and assert it belongs to the private functions tree
|
|
73
|
-
* function_leaf = pedersen([selector as Field, vk_hash], GENERATOR__PRIVATE_FUNCTION_LEAF)
|
|
74
|
-
* computed_private_function_tree_root = compute_root(function_leaf, private_function_tree_sibling_path)
|
|
75
|
-
* assert computed_private_function_tree_root == contract_class.private_functions_root
|
|
76
|
-
*
|
|
77
|
-
* // Compute artifact leaf and assert it belongs to the artifact
|
|
78
|
-
* artifact_function_leaf = sha256(selector, metadata_hash, sha256(bytecode))
|
|
79
|
-
* computed_artifact_private_function_tree_root = compute_root(artifact_function_leaf, artifact_function_tree_sibling_path)
|
|
80
|
-
* computed_artifact_hash = sha256(computed_artifact_private_function_tree_root, utility_functions_artifact_tree_root, artifact_metadata_hash)
|
|
81
|
-
* assert computed_artifact_hash == contract_class.artifact_hash
|
|
82
|
-
* ```
|
|
83
|
-
* @param fn - Function to check membership proof for.
|
|
84
|
-
* @param contractClass - In which contract class the function is expected to be.
|
|
85
|
-
*/ export async function isValidPrivateFunctionMembershipProof(fn, contractClass) {
|
|
86
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
87
|
-
// Check private function tree membership
|
|
88
|
-
const functionLeaf = await computePrivateFunctionLeaf(fn);
|
|
89
|
-
const rootBuffer = await computeRootFromSiblingPath(functionLeaf, fn.privateFunctionTreeSiblingPath.map((fr)=>fr.toBuffer()), fn.privateFunctionTreeLeafIndex, async (left, right)=>(await poseidon2Hash([
|
|
90
|
-
left,
|
|
91
|
-
right
|
|
92
|
-
])).toBuffer());
|
|
93
|
-
const computedPrivateFunctionTreeRoot = Fr.fromBuffer(rootBuffer);
|
|
94
|
-
if (!contractClass.privateFunctionsRoot.equals(computedPrivateFunctionTreeRoot)) {
|
|
95
|
-
log.debug(`Private function tree root mismatch`, {
|
|
96
|
-
expectedPrivateFunctionTreeRoot: contractClass.privateFunctionsRoot,
|
|
97
|
-
computedPrivateFunctionTreeRoot: computedPrivateFunctionTreeRoot,
|
|
98
|
-
computedFunctionLeaf: '0x' + functionLeaf.toString('hex')
|
|
99
|
-
});
|
|
100
|
-
return false;
|
|
101
|
-
}
|
|
102
|
-
// Check artifact hash
|
|
103
|
-
const functionArtifactHash = await computeFunctionArtifactHash(fn);
|
|
104
|
-
const computedArtifactPrivateFunctionTreeRootBuffer = await computeRootFromSiblingPath(functionArtifactHash.toBuffer(), fn.artifactTreeSiblingPath.map((fr)=>fr.toBuffer()), fn.artifactTreeLeafIndex, getArtifactMerkleTreeHasher());
|
|
105
|
-
const computedArtifactPrivateFunctionTreeRoot = Fr.fromBuffer(computedArtifactPrivateFunctionTreeRootBuffer);
|
|
106
|
-
const computedArtifactHash = await computeArtifactHash({
|
|
107
|
-
privateFunctionRoot: computedArtifactPrivateFunctionTreeRoot,
|
|
108
|
-
utilityFunctionRoot: fn.utilityFunctionsTreeRoot,
|
|
109
|
-
metadataHash: fn.artifactMetadataHash
|
|
110
|
-
});
|
|
111
|
-
if (!contractClass.artifactHash.equals(computedArtifactHash)) {
|
|
112
|
-
log.debug(`Artifact hash mismatch`, {
|
|
113
|
-
expected: contractClass.artifactHash,
|
|
114
|
-
computedArtifactHash,
|
|
115
|
-
computedFunctionArtifactHash: functionArtifactHash,
|
|
116
|
-
computedArtifactPrivateFunctionTreeRoot,
|
|
117
|
-
utilityFunctionRoot: fn.utilityFunctionsTreeRoot,
|
|
118
|
-
metadataHash: fn.artifactMetadataHash,
|
|
119
|
-
artifactFunctionTreeSiblingPath: fn.artifactTreeSiblingPath.map((fr)=>fr.toString()).join(',')
|
|
120
|
-
});
|
|
121
|
-
return false;
|
|
122
|
-
}
|
|
123
|
-
return true;
|
|
124
|
-
}
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
import { type ContractArtifact, FunctionSelector } from '../abi/index.js';
|
|
2
|
-
import type { ContractClassPublic, UtilityFunctionMembershipProof, UtilityFunctionWithMembershipProof } from './interfaces/index.js';
|
|
3
|
-
/**
|
|
4
|
-
* Creates a membership proof for a utility function in a contract class, to be verified via `isValidUtilityFunctionMembershipProof`.
|
|
5
|
-
* @param selector - Selector of the function to create the proof for.
|
|
6
|
-
* @param artifact - Artifact of the contract class where the function is defined.
|
|
7
|
-
*/
|
|
8
|
-
export declare function createUtilityFunctionMembershipProof(selector: FunctionSelector, artifact: ContractArtifact): Promise<UtilityFunctionMembershipProof>;
|
|
9
|
-
/**
|
|
10
|
-
* Verifies that a utility function with a membership proof as emitted by the ClassRegistry contract is valid,
|
|
11
|
-
* as defined in the protocol specs at contract-deployment/classes:
|
|
12
|
-
*
|
|
13
|
-
* ```
|
|
14
|
-
* // Load contract class from local db
|
|
15
|
-
* contract_class = db.get_contract_class(contract_class_id)
|
|
16
|
-
*
|
|
17
|
-
* // Compute artifact leaf and assert it belongs to the artifact
|
|
18
|
-
* artifact_function_leaf = sha256(selector, metadata_hash, sha256(bytecode))
|
|
19
|
-
* computed_artifact_utility_function_tree_root = compute_root(artifact_function_leaf, artifact_function_tree_sibling_path, artifact_function_tree_leaf_index)
|
|
20
|
-
* computed_artifact_hash = sha256(private_functions_artifact_tree_root, computed_artifact_utility_function_tree_root, artifact_metadata_hash)
|
|
21
|
-
* assert computed_artifact_hash == contract_class.artifact_hash
|
|
22
|
-
* ```
|
|
23
|
-
* @param fn - Function to check membership proof for.
|
|
24
|
-
* @param contractClass - In which contract class the function is expected to be.
|
|
25
|
-
*/
|
|
26
|
-
export declare function isValidUtilityFunctionMembershipProof(fn: UtilityFunctionWithMembershipProof, contractClass: Pick<ContractClassPublic, 'artifactHash'>): Promise<boolean>;
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"utility_function_membership_proof.d.ts","sourceRoot":"","sources":["../../src/contract/utility_function_membership_proof.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,gBAAgB,EAAE,gBAAgB,EAAgB,MAAM,iBAAiB,CAAC;AASxF,OAAO,KAAK,EACV,mBAAmB,EACnB,8BAA8B,EAC9B,kCAAkC,EACnC,MAAM,uBAAuB,CAAC;AAE/B;;;;GAIG;AACH,wBAAsB,oCAAoC,CACxD,QAAQ,EAAE,gBAAgB,EAC1B,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,8BAA8B,CAAC,CAsCzC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qCAAqC,CACzD,EAAE,EAAE,kCAAkC,EACtC,aAAa,EAAE,IAAI,CAAC,mBAAmB,EAAE,cAAc,CAAC,oBA+BzD"}
|
|
@@ -1,87 +0,0 @@
|
|
|
1
|
-
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
2
|
-
import { createLogger } from '@aztec/foundation/log';
|
|
3
|
-
import { computeRootFromSiblingPath } from '@aztec/foundation/trees';
|
|
4
|
-
import { FunctionSelector, FunctionType } from '../abi/index.js';
|
|
5
|
-
import { computeArtifactFunctionTree, computeArtifactHash, computeArtifactHashPreimage, computeFunctionArtifactHash, computeFunctionMetadataHash, getArtifactMerkleTreeHasher } from './artifact_hash.js';
|
|
6
|
-
/**
|
|
7
|
-
* Creates a membership proof for a utility function in a contract class, to be verified via `isValidUtilityFunctionMembershipProof`.
|
|
8
|
-
* @param selector - Selector of the function to create the proof for.
|
|
9
|
-
* @param artifact - Artifact of the contract class where the function is defined.
|
|
10
|
-
*/ export async function createUtilityFunctionMembershipProof(selector, artifact) {
|
|
11
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
12
|
-
// Locate function artifact
|
|
13
|
-
const utilityFunctions = artifact.functions.filter((fn)=>fn.functionType === FunctionType.UTILITY);
|
|
14
|
-
const utilityFunctionsAndSelectors = await Promise.all(utilityFunctions.map(async (fn)=>({
|
|
15
|
-
fn,
|
|
16
|
-
selector: await FunctionSelector.fromNameAndParameters(fn)
|
|
17
|
-
})));
|
|
18
|
-
const fn = utilityFunctionsAndSelectors.find((fnAndSelector)=>selector.equals(fnAndSelector.selector))?.fn;
|
|
19
|
-
if (!fn) {
|
|
20
|
-
throw new Error(`Utility function with selector ${selector.toString()} not found`);
|
|
21
|
-
}
|
|
22
|
-
// Compute preimage for the artifact hash
|
|
23
|
-
const { privateFunctionRoot: privateFunctionsArtifactTreeRoot, metadataHash: artifactMetadataHash } = await computeArtifactHashPreimage(artifact);
|
|
24
|
-
// Compute the sibling path for the "artifact tree"
|
|
25
|
-
const functionMetadataHash = computeFunctionMetadataHash(fn);
|
|
26
|
-
const functionArtifactHash = await computeFunctionArtifactHash({
|
|
27
|
-
...fn,
|
|
28
|
-
functionMetadataHash
|
|
29
|
-
});
|
|
30
|
-
const artifactTree = await computeArtifactFunctionTree(artifact, FunctionType.UTILITY);
|
|
31
|
-
const artifactTreeLeafIndex = artifactTree.getIndex(functionArtifactHash.toBuffer());
|
|
32
|
-
const artifactTreeSiblingPath = artifactTree.getSiblingPath(artifactTreeLeafIndex).map(Fr.fromBuffer);
|
|
33
|
-
log.debug(`Computed proof for utility function with selector ${selector.toString()}`, {
|
|
34
|
-
functionArtifactHash,
|
|
35
|
-
functionMetadataHash,
|
|
36
|
-
artifactMetadataHash,
|
|
37
|
-
artifactFunctionTreeSiblingPath: artifactTreeSiblingPath.map((fr)=>fr.toString()).join(','),
|
|
38
|
-
privateFunctionsArtifactTreeRoot
|
|
39
|
-
});
|
|
40
|
-
return {
|
|
41
|
-
artifactTreeSiblingPath,
|
|
42
|
-
artifactTreeLeafIndex,
|
|
43
|
-
artifactMetadataHash,
|
|
44
|
-
functionMetadataHash,
|
|
45
|
-
privateFunctionsArtifactTreeRoot
|
|
46
|
-
};
|
|
47
|
-
}
|
|
48
|
-
/**
|
|
49
|
-
* Verifies that a utility function with a membership proof as emitted by the ClassRegistry contract is valid,
|
|
50
|
-
* as defined in the protocol specs at contract-deployment/classes:
|
|
51
|
-
*
|
|
52
|
-
* ```
|
|
53
|
-
* // Load contract class from local db
|
|
54
|
-
* contract_class = db.get_contract_class(contract_class_id)
|
|
55
|
-
*
|
|
56
|
-
* // Compute artifact leaf and assert it belongs to the artifact
|
|
57
|
-
* artifact_function_leaf = sha256(selector, metadata_hash, sha256(bytecode))
|
|
58
|
-
* computed_artifact_utility_function_tree_root = compute_root(artifact_function_leaf, artifact_function_tree_sibling_path, artifact_function_tree_leaf_index)
|
|
59
|
-
* computed_artifact_hash = sha256(private_functions_artifact_tree_root, computed_artifact_utility_function_tree_root, artifact_metadata_hash)
|
|
60
|
-
* assert computed_artifact_hash == contract_class.artifact_hash
|
|
61
|
-
* ```
|
|
62
|
-
* @param fn - Function to check membership proof for.
|
|
63
|
-
* @param contractClass - In which contract class the function is expected to be.
|
|
64
|
-
*/ export async function isValidUtilityFunctionMembershipProof(fn, contractClass) {
|
|
65
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
66
|
-
const functionArtifactHash = await computeFunctionArtifactHash(fn);
|
|
67
|
-
const computedArtifactFunctionTreeRootBuffer = await computeRootFromSiblingPath(functionArtifactHash.toBuffer(), fn.artifactTreeSiblingPath.map((fr)=>fr.toBuffer()), fn.artifactTreeLeafIndex, getArtifactMerkleTreeHasher());
|
|
68
|
-
const computedArtifactFunctionTreeRoot = Fr.fromBuffer(computedArtifactFunctionTreeRootBuffer);
|
|
69
|
-
const computedArtifactHash = await computeArtifactHash({
|
|
70
|
-
privateFunctionRoot: fn.privateFunctionsArtifactTreeRoot,
|
|
71
|
-
utilityFunctionRoot: computedArtifactFunctionTreeRoot,
|
|
72
|
-
metadataHash: fn.artifactMetadataHash
|
|
73
|
-
});
|
|
74
|
-
if (!contractClass.artifactHash.equals(computedArtifactHash)) {
|
|
75
|
-
log.debug(`Artifact hash mismatch`, {
|
|
76
|
-
expected: contractClass.artifactHash,
|
|
77
|
-
computedArtifactHash,
|
|
78
|
-
computedFunctionArtifactHash: functionArtifactHash,
|
|
79
|
-
computedArtifactFunctionTreeRoot,
|
|
80
|
-
privateFunctionsArtifactTreeRoot: fn.privateFunctionsArtifactTreeRoot,
|
|
81
|
-
metadataHash: fn.artifactMetadataHash,
|
|
82
|
-
artifactFunctionTreeSiblingPath: fn.artifactTreeSiblingPath.map((fr)=>fr.toString()).join(',')
|
|
83
|
-
});
|
|
84
|
-
return false;
|
|
85
|
-
}
|
|
86
|
-
return true;
|
|
87
|
-
}
|
|
@@ -1,167 +0,0 @@
|
|
|
1
|
-
import { poseidon2Hash } from '@aztec/foundation/crypto/poseidon';
|
|
2
|
-
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
3
|
-
import { createLogger } from '@aztec/foundation/log';
|
|
4
|
-
import { computeRootFromSiblingPath } from '@aztec/foundation/trees';
|
|
5
|
-
|
|
6
|
-
import { type ContractArtifact, FunctionSelector, FunctionType } from '../abi/index.js';
|
|
7
|
-
import {
|
|
8
|
-
computeArtifactFunctionTree,
|
|
9
|
-
computeArtifactHash,
|
|
10
|
-
computeArtifactHashPreimage,
|
|
11
|
-
computeFunctionArtifactHash,
|
|
12
|
-
computeFunctionMetadataHash,
|
|
13
|
-
getArtifactMerkleTreeHasher,
|
|
14
|
-
} from './artifact_hash.js';
|
|
15
|
-
import { getContractClassPrivateFunctionFromArtifact } from './contract_class.js';
|
|
16
|
-
import type {
|
|
17
|
-
ContractClassPublic,
|
|
18
|
-
ExecutablePrivateFunctionWithMembershipProof,
|
|
19
|
-
PrivateFunctionMembershipProof,
|
|
20
|
-
} from './interfaces/index.js';
|
|
21
|
-
import { computePrivateFunctionLeaf, computePrivateFunctionsTree } from './private_function.js';
|
|
22
|
-
|
|
23
|
-
/**
|
|
24
|
-
* Creates a membership proof for a private function in a contract class, to be verified via `isValidPrivateFunctionMembershipProof`.
|
|
25
|
-
* @param selector - Selector of the function to create the proof for.
|
|
26
|
-
* @param artifact - Artifact of the contract class where the function is defined.
|
|
27
|
-
*/
|
|
28
|
-
export async function createPrivateFunctionMembershipProof(
|
|
29
|
-
selector: FunctionSelector,
|
|
30
|
-
artifact: ContractArtifact,
|
|
31
|
-
): Promise<PrivateFunctionMembershipProof> {
|
|
32
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
33
|
-
|
|
34
|
-
// Locate private function definition and artifact
|
|
35
|
-
const privateFunctions = artifact.functions.filter(fn => fn.functionType === FunctionType.PRIVATE);
|
|
36
|
-
const privateFunctionsFromArtifact = await Promise.all(
|
|
37
|
-
privateFunctions.map(getContractClassPrivateFunctionFromArtifact),
|
|
38
|
-
);
|
|
39
|
-
const privateFunction = privateFunctionsFromArtifact.find(fn => fn.selector.equals(selector));
|
|
40
|
-
const privateFunctionsAndSelectors = await Promise.all(
|
|
41
|
-
privateFunctions.map(async fn => ({
|
|
42
|
-
fn,
|
|
43
|
-
selector: await FunctionSelector.fromNameAndParameters(fn.name, fn.parameters),
|
|
44
|
-
})),
|
|
45
|
-
);
|
|
46
|
-
const privateFunctionArtifact = privateFunctionsAndSelectors.find(fnAndSelector =>
|
|
47
|
-
selector.equals(fnAndSelector.selector),
|
|
48
|
-
)?.fn;
|
|
49
|
-
if (!privateFunction || !privateFunctionArtifact) {
|
|
50
|
-
throw new Error(`Private function with selector ${selector.toString()} not found`);
|
|
51
|
-
}
|
|
52
|
-
|
|
53
|
-
// Compute preimage for the artifact hash
|
|
54
|
-
const { utilityFunctionRoot: utilityFunctionsTreeRoot, metadataHash: artifactMetadataHash } =
|
|
55
|
-
await computeArtifactHashPreimage(artifact);
|
|
56
|
-
|
|
57
|
-
// We need two sibling paths because private function information is split across two trees:
|
|
58
|
-
// The "private function tree" captures the selectors and verification keys, and is used in the kernel circuit for verifying the proof generated by the app circuit.
|
|
59
|
-
const functionLeaf = await computePrivateFunctionLeaf(privateFunction);
|
|
60
|
-
const functionsTree = await computePrivateFunctionsTree(privateFunctionsFromArtifact);
|
|
61
|
-
const functionsTreeLeafIndex = functionsTree.getIndex(functionLeaf);
|
|
62
|
-
const functionsTreeSiblingPath = functionsTree.getSiblingPath(functionsTreeLeafIndex).map(Fr.fromBuffer);
|
|
63
|
-
|
|
64
|
-
// And the "artifact tree" captures function bytecode and metadata, and is used by the pxe to check that its executing the code it's supposed to be executing, but it never goes into circuits.
|
|
65
|
-
const functionMetadataHash = computeFunctionMetadataHash(privateFunctionArtifact);
|
|
66
|
-
const functionArtifactHash = await computeFunctionArtifactHash({ ...privateFunctionArtifact, functionMetadataHash });
|
|
67
|
-
const artifactTree = (await computeArtifactFunctionTree(artifact, FunctionType.PRIVATE))!;
|
|
68
|
-
const artifactTreeLeafIndex = artifactTree.getIndex(functionArtifactHash.toBuffer());
|
|
69
|
-
const artifactTreeSiblingPath = artifactTree.getSiblingPath(artifactTreeLeafIndex).map(Fr.fromBuffer);
|
|
70
|
-
|
|
71
|
-
log.debug(`Computed proof for private function with selector ${selector.toString()}`, {
|
|
72
|
-
functionArtifactHash,
|
|
73
|
-
functionMetadataHash,
|
|
74
|
-
functionLeaf: '0x' + functionLeaf.toString('hex'),
|
|
75
|
-
artifactMetadataHash,
|
|
76
|
-
privateFunctionsTreeRoot: '0x' + functionsTree.root.toString('hex'),
|
|
77
|
-
utilityFunctionsTreeRoot,
|
|
78
|
-
artifactFunctionTreeSiblingPath: artifactTreeSiblingPath.map(fr => fr.toString()).join(','),
|
|
79
|
-
privateFunctionTreeSiblingPath: functionsTreeSiblingPath.map(fr => fr.toString()).join(','),
|
|
80
|
-
});
|
|
81
|
-
|
|
82
|
-
return {
|
|
83
|
-
artifactTreeSiblingPath,
|
|
84
|
-
artifactTreeLeafIndex,
|
|
85
|
-
artifactMetadataHash,
|
|
86
|
-
functionMetadataHash,
|
|
87
|
-
utilityFunctionsTreeRoot,
|
|
88
|
-
privateFunctionTreeSiblingPath: functionsTreeSiblingPath,
|
|
89
|
-
privateFunctionTreeLeafIndex: functionsTreeLeafIndex,
|
|
90
|
-
};
|
|
91
|
-
}
|
|
92
|
-
|
|
93
|
-
/**
|
|
94
|
-
* Verifies that a private function with a membership proof as emitted by the ClassRegistry contract is valid,
|
|
95
|
-
* as defined in the protocol specs at contract-deployment/classes:
|
|
96
|
-
*
|
|
97
|
-
* ```
|
|
98
|
-
* // Load contract class from local db
|
|
99
|
-
* contract_class = db.get_contract_class(contract_class_id)
|
|
100
|
-
*
|
|
101
|
-
* // Compute function leaf and assert it belongs to the private functions tree
|
|
102
|
-
* function_leaf = pedersen([selector as Field, vk_hash], GENERATOR__PRIVATE_FUNCTION_LEAF)
|
|
103
|
-
* computed_private_function_tree_root = compute_root(function_leaf, private_function_tree_sibling_path)
|
|
104
|
-
* assert computed_private_function_tree_root == contract_class.private_functions_root
|
|
105
|
-
*
|
|
106
|
-
* // Compute artifact leaf and assert it belongs to the artifact
|
|
107
|
-
* artifact_function_leaf = sha256(selector, metadata_hash, sha256(bytecode))
|
|
108
|
-
* computed_artifact_private_function_tree_root = compute_root(artifact_function_leaf, artifact_function_tree_sibling_path)
|
|
109
|
-
* computed_artifact_hash = sha256(computed_artifact_private_function_tree_root, utility_functions_artifact_tree_root, artifact_metadata_hash)
|
|
110
|
-
* assert computed_artifact_hash == contract_class.artifact_hash
|
|
111
|
-
* ```
|
|
112
|
-
* @param fn - Function to check membership proof for.
|
|
113
|
-
* @param contractClass - In which contract class the function is expected to be.
|
|
114
|
-
*/
|
|
115
|
-
export async function isValidPrivateFunctionMembershipProof(
|
|
116
|
-
fn: ExecutablePrivateFunctionWithMembershipProof,
|
|
117
|
-
contractClass: Pick<ContractClassPublic, 'privateFunctionsRoot' | 'artifactHash'>,
|
|
118
|
-
) {
|
|
119
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
120
|
-
|
|
121
|
-
// Check private function tree membership
|
|
122
|
-
const functionLeaf = await computePrivateFunctionLeaf(fn);
|
|
123
|
-
const rootBuffer = await computeRootFromSiblingPath(
|
|
124
|
-
functionLeaf,
|
|
125
|
-
fn.privateFunctionTreeSiblingPath.map(fr => fr.toBuffer()),
|
|
126
|
-
fn.privateFunctionTreeLeafIndex,
|
|
127
|
-
async (left, right) => (await poseidon2Hash([left, right])).toBuffer(),
|
|
128
|
-
);
|
|
129
|
-
const computedPrivateFunctionTreeRoot = Fr.fromBuffer(rootBuffer);
|
|
130
|
-
if (!contractClass.privateFunctionsRoot.equals(computedPrivateFunctionTreeRoot)) {
|
|
131
|
-
log.debug(`Private function tree root mismatch`, {
|
|
132
|
-
expectedPrivateFunctionTreeRoot: contractClass.privateFunctionsRoot,
|
|
133
|
-
computedPrivateFunctionTreeRoot: computedPrivateFunctionTreeRoot,
|
|
134
|
-
computedFunctionLeaf: '0x' + functionLeaf.toString('hex'),
|
|
135
|
-
});
|
|
136
|
-
return false;
|
|
137
|
-
}
|
|
138
|
-
|
|
139
|
-
// Check artifact hash
|
|
140
|
-
const functionArtifactHash = await computeFunctionArtifactHash(fn);
|
|
141
|
-
const computedArtifactPrivateFunctionTreeRootBuffer = await computeRootFromSiblingPath(
|
|
142
|
-
functionArtifactHash.toBuffer(),
|
|
143
|
-
fn.artifactTreeSiblingPath.map(fr => fr.toBuffer()),
|
|
144
|
-
fn.artifactTreeLeafIndex,
|
|
145
|
-
getArtifactMerkleTreeHasher(),
|
|
146
|
-
);
|
|
147
|
-
const computedArtifactPrivateFunctionTreeRoot = Fr.fromBuffer(computedArtifactPrivateFunctionTreeRootBuffer);
|
|
148
|
-
const computedArtifactHash = await computeArtifactHash({
|
|
149
|
-
privateFunctionRoot: computedArtifactPrivateFunctionTreeRoot,
|
|
150
|
-
utilityFunctionRoot: fn.utilityFunctionsTreeRoot,
|
|
151
|
-
metadataHash: fn.artifactMetadataHash,
|
|
152
|
-
});
|
|
153
|
-
if (!contractClass.artifactHash.equals(computedArtifactHash)) {
|
|
154
|
-
log.debug(`Artifact hash mismatch`, {
|
|
155
|
-
expected: contractClass.artifactHash,
|
|
156
|
-
computedArtifactHash,
|
|
157
|
-
computedFunctionArtifactHash: functionArtifactHash,
|
|
158
|
-
computedArtifactPrivateFunctionTreeRoot,
|
|
159
|
-
utilityFunctionRoot: fn.utilityFunctionsTreeRoot,
|
|
160
|
-
metadataHash: fn.artifactMetadataHash,
|
|
161
|
-
artifactFunctionTreeSiblingPath: fn.artifactTreeSiblingPath.map(fr => fr.toString()).join(','),
|
|
162
|
-
});
|
|
163
|
-
return false;
|
|
164
|
-
}
|
|
165
|
-
|
|
166
|
-
return true;
|
|
167
|
-
}
|
|
@@ -1,118 +0,0 @@
|
|
|
1
|
-
import { Fr } from '@aztec/foundation/curves/bn254';
|
|
2
|
-
import { createLogger } from '@aztec/foundation/log';
|
|
3
|
-
import { computeRootFromSiblingPath } from '@aztec/foundation/trees';
|
|
4
|
-
|
|
5
|
-
import { type ContractArtifact, FunctionSelector, FunctionType } from '../abi/index.js';
|
|
6
|
-
import {
|
|
7
|
-
computeArtifactFunctionTree,
|
|
8
|
-
computeArtifactHash,
|
|
9
|
-
computeArtifactHashPreimage,
|
|
10
|
-
computeFunctionArtifactHash,
|
|
11
|
-
computeFunctionMetadataHash,
|
|
12
|
-
getArtifactMerkleTreeHasher,
|
|
13
|
-
} from './artifact_hash.js';
|
|
14
|
-
import type {
|
|
15
|
-
ContractClassPublic,
|
|
16
|
-
UtilityFunctionMembershipProof,
|
|
17
|
-
UtilityFunctionWithMembershipProof,
|
|
18
|
-
} from './interfaces/index.js';
|
|
19
|
-
|
|
20
|
-
/**
|
|
21
|
-
* Creates a membership proof for a utility function in a contract class, to be verified via `isValidUtilityFunctionMembershipProof`.
|
|
22
|
-
* @param selector - Selector of the function to create the proof for.
|
|
23
|
-
* @param artifact - Artifact of the contract class where the function is defined.
|
|
24
|
-
*/
|
|
25
|
-
export async function createUtilityFunctionMembershipProof(
|
|
26
|
-
selector: FunctionSelector,
|
|
27
|
-
artifact: ContractArtifact,
|
|
28
|
-
): Promise<UtilityFunctionMembershipProof> {
|
|
29
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
30
|
-
|
|
31
|
-
// Locate function artifact
|
|
32
|
-
const utilityFunctions = artifact.functions.filter(fn => fn.functionType === FunctionType.UTILITY);
|
|
33
|
-
const utilityFunctionsAndSelectors = await Promise.all(
|
|
34
|
-
utilityFunctions.map(async fn => ({ fn, selector: await FunctionSelector.fromNameAndParameters(fn) })),
|
|
35
|
-
);
|
|
36
|
-
const fn = utilityFunctionsAndSelectors.find(fnAndSelector => selector.equals(fnAndSelector.selector))?.fn;
|
|
37
|
-
if (!fn) {
|
|
38
|
-
throw new Error(`Utility function with selector ${selector.toString()} not found`);
|
|
39
|
-
}
|
|
40
|
-
// Compute preimage for the artifact hash
|
|
41
|
-
const { privateFunctionRoot: privateFunctionsArtifactTreeRoot, metadataHash: artifactMetadataHash } =
|
|
42
|
-
await computeArtifactHashPreimage(artifact);
|
|
43
|
-
|
|
44
|
-
// Compute the sibling path for the "artifact tree"
|
|
45
|
-
const functionMetadataHash = computeFunctionMetadataHash(fn);
|
|
46
|
-
const functionArtifactHash = await computeFunctionArtifactHash({ ...fn, functionMetadataHash });
|
|
47
|
-
const artifactTree = (await computeArtifactFunctionTree(artifact, FunctionType.UTILITY))!;
|
|
48
|
-
const artifactTreeLeafIndex = artifactTree.getIndex(functionArtifactHash.toBuffer());
|
|
49
|
-
const artifactTreeSiblingPath = artifactTree.getSiblingPath(artifactTreeLeafIndex).map(Fr.fromBuffer);
|
|
50
|
-
|
|
51
|
-
log.debug(`Computed proof for utility function with selector ${selector.toString()}`, {
|
|
52
|
-
functionArtifactHash,
|
|
53
|
-
functionMetadataHash,
|
|
54
|
-
artifactMetadataHash,
|
|
55
|
-
artifactFunctionTreeSiblingPath: artifactTreeSiblingPath.map(fr => fr.toString()).join(','),
|
|
56
|
-
privateFunctionsArtifactTreeRoot,
|
|
57
|
-
});
|
|
58
|
-
|
|
59
|
-
return {
|
|
60
|
-
artifactTreeSiblingPath,
|
|
61
|
-
artifactTreeLeafIndex,
|
|
62
|
-
artifactMetadataHash,
|
|
63
|
-
functionMetadataHash,
|
|
64
|
-
privateFunctionsArtifactTreeRoot,
|
|
65
|
-
};
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
/**
|
|
69
|
-
* Verifies that a utility function with a membership proof as emitted by the ClassRegistry contract is valid,
|
|
70
|
-
* as defined in the protocol specs at contract-deployment/classes:
|
|
71
|
-
*
|
|
72
|
-
* ```
|
|
73
|
-
* // Load contract class from local db
|
|
74
|
-
* contract_class = db.get_contract_class(contract_class_id)
|
|
75
|
-
*
|
|
76
|
-
* // Compute artifact leaf and assert it belongs to the artifact
|
|
77
|
-
* artifact_function_leaf = sha256(selector, metadata_hash, sha256(bytecode))
|
|
78
|
-
* computed_artifact_utility_function_tree_root = compute_root(artifact_function_leaf, artifact_function_tree_sibling_path, artifact_function_tree_leaf_index)
|
|
79
|
-
* computed_artifact_hash = sha256(private_functions_artifact_tree_root, computed_artifact_utility_function_tree_root, artifact_metadata_hash)
|
|
80
|
-
* assert computed_artifact_hash == contract_class.artifact_hash
|
|
81
|
-
* ```
|
|
82
|
-
* @param fn - Function to check membership proof for.
|
|
83
|
-
* @param contractClass - In which contract class the function is expected to be.
|
|
84
|
-
*/
|
|
85
|
-
export async function isValidUtilityFunctionMembershipProof(
|
|
86
|
-
fn: UtilityFunctionWithMembershipProof,
|
|
87
|
-
contractClass: Pick<ContractClassPublic, 'artifactHash'>,
|
|
88
|
-
) {
|
|
89
|
-
const log = createLogger('circuits:function_membership_proof');
|
|
90
|
-
|
|
91
|
-
const functionArtifactHash = await computeFunctionArtifactHash(fn);
|
|
92
|
-
const computedArtifactFunctionTreeRootBuffer = await computeRootFromSiblingPath(
|
|
93
|
-
functionArtifactHash.toBuffer(),
|
|
94
|
-
fn.artifactTreeSiblingPath.map(fr => fr.toBuffer()),
|
|
95
|
-
fn.artifactTreeLeafIndex,
|
|
96
|
-
getArtifactMerkleTreeHasher(),
|
|
97
|
-
);
|
|
98
|
-
const computedArtifactFunctionTreeRoot = Fr.fromBuffer(computedArtifactFunctionTreeRootBuffer);
|
|
99
|
-
const computedArtifactHash = await computeArtifactHash({
|
|
100
|
-
privateFunctionRoot: fn.privateFunctionsArtifactTreeRoot,
|
|
101
|
-
utilityFunctionRoot: computedArtifactFunctionTreeRoot,
|
|
102
|
-
metadataHash: fn.artifactMetadataHash,
|
|
103
|
-
});
|
|
104
|
-
if (!contractClass.artifactHash.equals(computedArtifactHash)) {
|
|
105
|
-
log.debug(`Artifact hash mismatch`, {
|
|
106
|
-
expected: contractClass.artifactHash,
|
|
107
|
-
computedArtifactHash,
|
|
108
|
-
computedFunctionArtifactHash: functionArtifactHash,
|
|
109
|
-
computedArtifactFunctionTreeRoot,
|
|
110
|
-
privateFunctionsArtifactTreeRoot: fn.privateFunctionsArtifactTreeRoot,
|
|
111
|
-
metadataHash: fn.artifactMetadataHash,
|
|
112
|
-
artifactFunctionTreeSiblingPath: fn.artifactTreeSiblingPath.map(fr => fr.toString()).join(','),
|
|
113
|
-
});
|
|
114
|
-
return false;
|
|
115
|
-
}
|
|
116
|
-
|
|
117
|
-
return true;
|
|
118
|
-
}
|