@zkasm/zkevm-rom 0.0.1-security → 6.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of @zkasm/zkevm-rom might be problematic. Click here for more details.

Files changed (232) hide show
  1. package/.eslintrc.js +33 -0
  2. package/.github/CODEOWNERS +14 -0
  3. package/.github/ISSUE_TEMPLATE/bug.yml +38 -0
  4. package/.github/ISSUE_TEMPLATE/feature.yml +26 -0
  5. package/.github/ISSUE_TEMPLATE/question.yml +26 -0
  6. package/.github/workflows/main.yaml +40 -0
  7. package/LICENSE +636 -0
  8. package/README.md +23 -5
  9. package/audits/Hexens_Polygon_zkEVM_PUBLIC_27.02.23.pdf +0 -0
  10. package/audits/Polygon-zkEVM-Public-v1.1-verichains-19-03-2024.pdf +0 -0
  11. package/audits/zkEVM-ROM-upgrade-1-Spearbit-30-May.pdf +0 -0
  12. package/audits/zkEVM-ROM-upgrade-2-Spearbit-21-August.pdf +0 -0
  13. package/audits/zkEVM-engagement-1-Spearbit-27-March.pdf +0 -0
  14. package/audits/zkEVM-engagement-2-Spearbit-27-March.pdf +0 -0
  15. package/audits/zkEVM-engagement-3-Spearbit-6-April.pdf +0 -0
  16. package/counters/README.md +45 -0
  17. package/counters/counters-executor.js +80 -0
  18. package/counters/countersConstants.zkasm +370 -0
  19. package/counters/endIncludes.zkasm +18 -0
  20. package/counters/initIncludes.zkasm +2 -0
  21. package/counters/tests/MLOAD32.zkasm +27 -0
  22. package/counters/tests/MLOADX.zkasm +30 -0
  23. package/counters/tests/MSTORE32.zkasm +32 -0
  24. package/counters/tests/MSTOREX.zkasm +36 -0
  25. package/counters/tests/SHLarith.zkasm +28 -0
  26. package/counters/tests/SHLarithBit.zkasm +28 -0
  27. package/counters/tests/SHRarith.zkasm +28 -0
  28. package/counters/tests/SHRarithBit.zkasm +28 -0
  29. package/counters/tests/abs.zkasm +29 -0
  30. package/counters/tests/addBatchHashByteByByte.zkasm +31 -0
  31. package/counters/tests/computeGasSendCall.zkasm +30 -0
  32. package/counters/tests/divArith.zkasm +27 -0
  33. package/counters/tests/expAD.zkasm +30 -0
  34. package/counters/tests/getLenBits.zkasm +30 -0
  35. package/counters/tests/getLenBytes.zkasm +32 -0
  36. package/counters/tests/isEmptyAccount.zkasm +30 -0
  37. package/counters/tests/mulARITH.zkasm +28 -0
  38. package/counters/tests/offsetUtil.zkasm +29 -0
  39. package/counters/tests/opADDMOD.zkasm +28 -0
  40. package/counters/tests/opAdd.zkasm +27 -0
  41. package/counters/tests/opBLOCKHASH.zkasm +28 -0
  42. package/counters/tests/opCALL.zkasm +41 -0
  43. package/counters/tests/opCALLCODE.zkasm +41 -0
  44. package/counters/tests/opCALLDATACOPY.zkasm +28 -0
  45. package/counters/tests/opCALLDATALOAD.zkasm +27 -0
  46. package/counters/tests/opCODECOPY.zkasm +28 -0
  47. package/counters/tests/opCREATE.zkasm +35 -0
  48. package/counters/tests/opCREATE2.zkasm +35 -0
  49. package/counters/tests/opDELEGATECALL.zkasm +35 -0
  50. package/counters/tests/opDIV.zkasm +27 -0
  51. package/counters/tests/opEXP.zkasm +29 -0
  52. package/counters/tests/opEXTCODECOPY.zkasm +29 -0
  53. package/counters/tests/opMOD.zkasm +27 -0
  54. package/counters/tests/opMUL.zkasm +27 -0
  55. package/counters/tests/opMULMOD.zkasm +28 -0
  56. package/counters/tests/opRETURN.zkasm +32 -0
  57. package/counters/tests/opRETURNDATACOPY.zkasm +29 -0
  58. package/counters/tests/opREVERT.zkasm +32 -0
  59. package/counters/tests/opSDIV.zkasm +28 -0
  60. package/counters/tests/opSHA3.zkasm +28 -0
  61. package/counters/tests/opSIGNEXTEND.zkasm +27 -0
  62. package/counters/tests/opSMOD.zkasm +28 -0
  63. package/counters/tests/opSTATICCALL.zkasm +35 -0
  64. package/counters/tests/opSUB.zkasm +27 -0
  65. package/counters/tests/saveMem.zkasm +31 -0
  66. package/docs/opcode-cost-zk-counters.md +315 -0
  67. package/docs/usage-ecrecover.md +51 -0
  68. package/index.js +43 -0
  69. package/main/block-info.zkasm +204 -0
  70. package/main/constants.zkasm +145 -0
  71. package/main/ecrecover/addFpEc.zkasm +31 -0
  72. package/main/ecrecover/checkSqrtFpEc.zkasm +1558 -0
  73. package/main/ecrecover/constEc.zkasm +13 -0
  74. package/main/ecrecover/ecrecover.zkasm +280 -0
  75. package/main/ecrecover/invFnEc.zkasm +44 -0
  76. package/main/ecrecover/invFpEc.zkasm +45 -0
  77. package/main/ecrecover/mulFnEc.zkasm +36 -0
  78. package/main/ecrecover/mulFpEc.zkasm +36 -0
  79. package/main/ecrecover/mulPointEc.zkasm +311 -0
  80. package/main/ecrecover/sqFpEc.zkasm +38 -0
  81. package/main/ecrecover/sqrtFpEc.zkasm +70 -0
  82. package/main/end.zkasm +4 -0
  83. package/main/l2-tx-hash.zkasm +159 -0
  84. package/main/load-change-l2-block-utils.zkasm +11 -0
  85. package/main/load-change-l2-block.zkasm +28 -0
  86. package/main/load-tx-rlp-utils.zkasm +72 -0
  87. package/main/load-tx-rlp.zkasm +431 -0
  88. package/main/main.zkasm +237 -0
  89. package/main/map-opcodes.zkasm +274 -0
  90. package/main/modexp/array_lib/array_add_AGTB.zkasm +123 -0
  91. package/main/modexp/array_lib/array_add_short.zkasm +85 -0
  92. package/main/modexp/array_lib/array_div.zkasm +215 -0
  93. package/main/modexp/array_lib/array_div_long.zkasm +284 -0
  94. package/main/modexp/array_lib/array_div_short.zkasm +222 -0
  95. package/main/modexp/array_lib/array_mul.zkasm +97 -0
  96. package/main/modexp/array_lib/array_mul_long.zkasm +156 -0
  97. package/main/modexp/array_lib/array_mul_short.zkasm +127 -0
  98. package/main/modexp/array_lib/array_square.zkasm +246 -0
  99. package/main/modexp/array_lib/unused/array_add.zkasm +100 -0
  100. package/main/modexp/array_lib/unused/array_is_odd.zkasm +23 -0
  101. package/main/modexp/array_lib/unused/array_is_one.zkasm +33 -0
  102. package/main/modexp/array_lib/unused/array_is_zero.zkasm +34 -0
  103. package/main/modexp/array_lib/unused/array_sub_AGTB.zkasm +111 -0
  104. package/main/modexp/array_lib/unused/array_unshift.zkasm +37 -0
  105. package/main/modexp/array_lib/utils/array_compare.zkasm +82 -0
  106. package/main/modexp/array_lib/utils/array_trim.zkasm +49 -0
  107. package/main/modexp/constants.zkasm +5 -0
  108. package/main/modexp/modexp.zkasm +296 -0
  109. package/main/modexp/modexp_utils.zkasm +230 -0
  110. package/main/opcodes/arithmetic.zkasm +357 -0
  111. package/main/opcodes/block.zkasm +163 -0
  112. package/main/opcodes/calldata-returndata-code.zkasm +619 -0
  113. package/main/opcodes/comparison.zkasm +446 -0
  114. package/main/opcodes/context-information.zkasm +169 -0
  115. package/main/opcodes/create-terminate-context.zkasm +1011 -0
  116. package/main/opcodes/crypto.zkasm +96 -0
  117. package/main/opcodes/flow-control.zkasm +126 -0
  118. package/main/opcodes/logs.zkasm +193 -0
  119. package/main/opcodes/stack-operations.zkasm +658 -0
  120. package/main/opcodes/storage-memory.zkasm +313 -0
  121. package/main/pairings/BN254/addPointBN254.zkasm +245 -0
  122. package/main/pairings/BN254/ecAdd.zkasm +312 -0
  123. package/main/pairings/BN254/ecMul.zkasm +159 -0
  124. package/main/pairings/BN254/escalarMulBN254.zkasm +155 -0
  125. package/main/pairings/BN254/lineDiffPointsBN254.zkasm +83 -0
  126. package/main/pairings/BN254/lineSamePointsBN254.zkasm +96 -0
  127. package/main/pairings/FP12BN254/CYCLOFP12BN254/compressFp12BN254.zkasm +49 -0
  128. package/main/pairings/FP12BN254/CYCLOFP12BN254/decompressFp12BN254.zkasm +236 -0
  129. package/main/pairings/FP12BN254/CYCLOFP12BN254/expByXCompCycloFp12BN254.zkasm +444 -0
  130. package/main/pairings/FP12BN254/CYCLOFP12BN254/squareCompCycloFp12BN254.zkasm +212 -0
  131. package/main/pairings/FP12BN254/CYCLOFP12BN254/squareCycloFp12BN254.zkasm +228 -0
  132. package/main/pairings/FP12BN254/CYCLOFP12BN254/xBinDecompBN254.zkasm +64 -0
  133. package/main/pairings/FP12BN254/frob2Fp12BN254.zkasm +80 -0
  134. package/main/pairings/FP12BN254/frob3Fp12BN254.zkasm +96 -0
  135. package/main/pairings/FP12BN254/frobFp12BN254.zkasm +96 -0
  136. package/main/pairings/FP12BN254/inverseFp12BN254.zkasm +289 -0
  137. package/main/pairings/FP12BN254/mulFp12BN254.zkasm +408 -0
  138. package/main/pairings/FP12BN254/sparseMulAFp12BN254.zkasm +296 -0
  139. package/main/pairings/FP12BN254/sparseMulBFp12BN254.zkasm +291 -0
  140. package/main/pairings/FP12BN254/squareFp12BN254.zkasm +376 -0
  141. package/main/pairings/FP2BN254/addFp2BN254.zkasm +19 -0
  142. package/main/pairings/FP2BN254/escalarMulFp2BN254.zkasm +20 -0
  143. package/main/pairings/FP2BN254/invFp2BN254.zkasm +66 -0
  144. package/main/pairings/FP2BN254/mulFp2BN254.zkasm +19 -0
  145. package/main/pairings/FP2BN254/squareFp2BN254.zkasm +21 -0
  146. package/main/pairings/FP2BN254/subFp2BN254.zkasm +19 -0
  147. package/main/pairings/FP4BN254/squareFp4BN254.zkasm +76 -0
  148. package/main/pairings/FP6BN254/addFp6BN254.zkasm +59 -0
  149. package/main/pairings/FP6BN254/escalarMulFp6BN254.zkasm +51 -0
  150. package/main/pairings/FP6BN254/inverseFp6BN254.zkasm +208 -0
  151. package/main/pairings/FP6BN254/mulFp6BN254.zkasm +201 -0
  152. package/main/pairings/FP6BN254/sparseMulAFp6BN254.zkasm +65 -0
  153. package/main/pairings/FP6BN254/sparseMulBFp6BN254.zkasm +134 -0
  154. package/main/pairings/FP6BN254/sparseMulCFp6BN254.zkasm +128 -0
  155. package/main/pairings/FP6BN254/squareFp6BN254.zkasm +147 -0
  156. package/main/pairings/FP6BN254/subFp6BN254.zkasm +59 -0
  157. package/main/pairings/FPBN254/addFpBN254.zkasm +29 -0
  158. package/main/pairings/FPBN254/invFpBN254.zkasm +55 -0
  159. package/main/pairings/FPBN254/mulFpBN254.zkasm +29 -0
  160. package/main/pairings/FPBN254/reduceFpBN254.zkasm +25 -0
  161. package/main/pairings/FPBN254/squareFpBN254.zkasm +31 -0
  162. package/main/pairings/FPBN254/subFpBN254.zkasm +36 -0
  163. package/main/pairings/FRBN254/reduceFrBN254.zkasm +25 -0
  164. package/main/pairings/constants.zkasm +62 -0
  165. package/main/pairings/ecPairing.zkasm +244 -0
  166. package/main/pairings/finalExpBN254.zkasm +2095 -0
  167. package/main/pairings/halfPairingBN254.zkasm +428 -0
  168. package/main/pairings/loopLengthBN254.zkasm +75 -0
  169. package/main/pairings/millerLoopBN254.zkasm +741 -0
  170. package/main/pairings/pairingBN254.zkasm +481 -0
  171. package/main/pairings/unused/addFp12BN254.zkasm +130 -0
  172. package/main/pairings/unused/expByXCycloFp12BN254.zkasm +411 -0
  173. package/main/pairings/unused/expFp12BN254.zkasm +333 -0
  174. package/main/pairings/unused/subFp12BN254.zkasm +130 -0
  175. package/main/pairings/unused/xPseudoBinDecompBN254.zkasm +68 -0
  176. package/main/pairings/utilsTests/expCycloFp12BN254.zkasm +334 -0
  177. package/main/precompiled/end.zkasm +42 -0
  178. package/main/precompiled/identity.zkasm +99 -0
  179. package/main/precompiled/pre-ecAdd.zkasm +84 -0
  180. package/main/precompiled/pre-ecMul.zkasm +82 -0
  181. package/main/precompiled/pre-ecPairing.zkasm +72 -0
  182. package/main/precompiled/pre-ecrecover.zkasm +71 -0
  183. package/main/precompiled/pre-modexp.zkasm +367 -0
  184. package/main/precompiled/pre-sha2-256.zkasm +125 -0
  185. package/main/precompiled/revert-precompiled.zkasm +25 -0
  186. package/main/precompiled/selector.zkasm +77 -0
  187. package/main/process-change-l2-block.zkasm +147 -0
  188. package/main/process-tx.zkasm +587 -0
  189. package/main/tables/2-exp.zkasm +260 -0
  190. package/main/touched.zkasm +118 -0
  191. package/main/utils.zkasm +2335 -0
  192. package/main/vars.zkasm +117 -0
  193. package/package.json +62 -3
  194. package/test/bytes-length.zkasm +39 -0
  195. package/test/ecrecover.zkasm +538 -0
  196. package/test/lt4-test.zkasm +38 -0
  197. package/test/mstorex.zkasm +191 -0
  198. package/test/opcalldatacopy.ignore.zkasm +331 -0
  199. package/test/performance/read-push.zkasm +71 -0
  200. package/test/read-push.zkasm +304 -0
  201. package/test/testArrayArith.zkasm +1099 -0
  202. package/test/testArrayUtils.zkasm +335 -0
  203. package/test/testCycloFp12ArithBN254.zkasm +548 -0
  204. package/test/testEcAdd.zkasm +252 -0
  205. package/test/testEcMul.zkasm +231 -0
  206. package/test/testEcPairing.zkasm +436 -0
  207. package/test/testFinalExpBn254.zkasm +139 -0
  208. package/test/testFp12ArithBN254.zkasm +692 -0
  209. package/test/testFp2ArithBN254.zkasm +185 -0
  210. package/test/testFp4ArithBN254.zkasm +128 -0
  211. package/test/testFp6ArithBN254.zkasm +260 -0
  212. package/test/testFpArithBN254.zkasm +159 -0
  213. package/test/testFrArithBN254.zkasm +113 -0
  214. package/test/testHalfPairingBN254.zkasm +285 -0
  215. package/test/testModExp.zkasm +586 -0
  216. package/test/testModExpReturn.zkasm +81 -0
  217. package/test/testPairingBN254.zkasm +463 -0
  218. package/test/testPointArithBN254.zkasm +270 -0
  219. package/test/testSHA256.zkasm +27 -0
  220. package/test/touched-assert.zkasm +59 -0
  221. package/test/utils-expAD.zkasm +48 -0
  222. package/test/utils-getLenBytes.zkasm +36 -0
  223. package/tools/audit-tools/registry-op-checker.js +71 -0
  224. package/tools/get-not-used-labels.js +31 -0
  225. package/tools/helpers/helpers.js +47 -0
  226. package/tools/modexp-utils/README.md +5 -0
  227. package/tools/modexp-utils/modexp-test-gen.js +168 -0
  228. package/tools/modexp-utils/modexp-test-int.sage +37 -0
  229. package/tools/parallel-testing/checker.sh +6 -0
  230. package/tools/parallel-testing/gen-parallel-tests.js +78 -0
  231. package/tools/parallel-testing/parallel-tests-sample/sample.test.js +136 -0
  232. package/tools/run-tests-zkasm.js +83 -0
package/test/testEcAdd.zkasm ADDED
@@ -0,0 +1,252 @@
1
+ ; constants needed by executor C++
2
+ CONST %N = 2**19
3
+ CONST %MAX_CNT_STEPS_LIMIT = %N
4
+ CONST %MAX_CNT_ARITH_LIMIT = %N
5
+ CONST %MAX_CNT_BINARY_LIMIT = %N
6
+ CONST %MAX_CNT_MEM_ALIGN_LIMIT = %N
7
+ CONST %MAX_CNT_KECCAK_F_LIMIT = %N
8
+ CONST %MAX_CNT_PADDING_PG_LIMIT = %N
9
+ CONST %MAX_CNT_POSEIDON_G_LIMIT = %N
10
+
11
+ CONSTL %BN254_P = 21888242871839275222246405745257275088696311157297823662689037894645226208583n
12
+ CONSTL %BN254_P_MINUS_ONE = 21888242871839275222246405745257275088696311157297823662689037894645226208582n
13
+ CONSTL %BN254_E_B = 3n
14
+
15
+ VAR GLOBAL lastHashKId
16
+ VAR GLOBAL lastHashPId
17
+
18
+ VAR GLOBAL initial_A
19
+ VAR GLOBAL initial_B
20
+ VAR GLOBAL initial_C
21
+ VAR GLOBAL initial_D
22
+ VAR GLOBAL initial_E
23
+ VAR GLOBAL initial_CTX
24
+ VAR GLOBAL initial_SP
25
+ VAR GLOBAL initial_PC
26
+ VAR GLOBAL initial_GAS
27
+ VAR GLOBAL initial_SR
28
+ VAR GLOBAL initial_RR
29
+ VAR GLOBAL initial_HASHPOS
30
+ VAR GLOBAL initial_RCX
31
+
32
+ start:
33
+
34
+ STEP => A
35
+ 0 :ASSERT
36
+
37
+
38
+ A :MSTORE(initial_A)
39
+ B :MSTORE(initial_B)
40
+ C :MSTORE(initial_C)
41
+ D :MSTORE(initial_D)
42
+ E :MSTORE(initial_E)
43
+ CTX :MSTORE(initial_CTX)
44
+ SP :MSTORE(initial_SP)
45
+ PC :MSTORE(initial_PC)
46
+ GAS :MSTORE(initial_GAS)
47
+ SR :MSTORE(initial_SR)
48
+ RR :MSTORE(initial_RR)
49
+ HASHPOS :MSTORE(initial_HASHPOS)
50
+ RCX :MSTORE(initial_RCX)
51
+ 0 => A,B,C,D,E,CTX, SP, PC, GAS, SR, RR, HASHPOS, RCX
52
+
53
+ -1 :MSTORE(lastHashKId)
54
+ -1 :MSTORE(lastHashPId)
55
+
56
+ ; 1] 0 + 0 = 0
57
+ 0n :MSTORE(ecAdd_P1_x)
58
+ 0n :MSTORE(ecAdd_P1_y)
59
+ 0n :MSTORE(ecAdd_P2_x)
60
+ 0n :MSTORE(ecAdd_P2_y)
61
+ :CALL(ecAdd)
62
+ 0n :MLOAD(ecAdd_P3_x)
63
+ 0n :MLOAD(ecAdd_P3_y)
64
+
65
+
66
+ ; 2] 0 + P = P
67
+ 0n :MSTORE(ecAdd_P1_x)
68
+ 0n :MSTORE(ecAdd_P1_y)
69
+ 1n :MSTORE(ecAdd_P2_x)
70
+ 2n :MSTORE(ecAdd_P2_y)
71
+ :CALL(ecAdd)
72
+ 1n :MLOAD(ecAdd_P3_x)
73
+ 2n :MLOAD(ecAdd_P3_y)
74
+
75
+ ; 3] P + 0 = P
76
+ 1n :MSTORE(ecAdd_P1_x)
77
+ 2n :MSTORE(ecAdd_P1_y)
78
+ 0n :MSTORE(ecAdd_P2_x)
79
+ 0n :MSTORE(ecAdd_P2_y)
80
+ :CALL(ecAdd)
81
+ 1n :MLOAD(ecAdd_P3_x)
82
+ 2n :MLOAD(ecAdd_P3_y)
83
+
84
+ ; 4] P1 not in range
85
+ 21888242871839275222246405745257275088696311157297823662689037894645226208584n :MSTORE(ecAdd_P1_x)
86
+ 2n :MSTORE(ecAdd_P1_y)
87
+ 3n :MSTORE(ecAdd_P2_x)
88
+ 3n :MSTORE(ecAdd_P2_y)
89
+ :CALL(ecAdd)
90
+ 1 => A
91
+ 1 :EQ
92
+
93
+ 1n :MSTORE(ecAdd_P1_x)
94
+ 21888242871839275222246405745257275088696311157297823662689037894645226208585n :MSTORE(ecAdd_P1_y)
95
+ 3n :MSTORE(ecAdd_P2_x)
96
+ 3n :MSTORE(ecAdd_P2_y)
97
+ :CALL(ecAdd)
98
+ 2 => A
99
+ 1 :EQ
100
+
101
+ ; 5] P2 not in range
102
+ 1n :MSTORE(ecAdd_P1_x)
103
+ 2n :MSTORE(ecAdd_P1_y)
104
+ 21888242871839275222246405745257275088696311157297823662689037894645226208583n :MSTORE(ecAdd_P2_x)
105
+ 0n :MSTORE(ecAdd_P2_y)
106
+ :CALL(ecAdd)
107
+ 3 => A
108
+ 1 :EQ
109
+
110
+ 1n :MSTORE(ecAdd_P1_x)
111
+ 2n :MSTORE(ecAdd_P1_y)
112
+ 0n :MSTORE(ecAdd_P2_x)
113
+ 21888242871839275222246405745257275088696311157297823662689037894645226208583n :MSTORE(ecAdd_P2_y)
114
+ :CALL(ecAdd)
115
+ 4 => A
116
+ 1 :EQ
117
+
118
+ ; 6] P1 not in E
119
+ 1n :MSTORE(ecAdd_P1_x)
120
+ 0n :MSTORE(ecAdd_P1_y)
121
+ 0n :MSTORE(ecAdd_P2_x)
122
+ 0n :MSTORE(ecAdd_P2_y)
123
+ :CALL(ecAdd)
124
+ 5 => A
125
+ 1 :EQ
126
+
127
+ 1n :MSTORE(ecAdd_P1_x)
128
+ 0n :MSTORE(ecAdd_P1_y)
129
+ 1n :MSTORE(ecAdd_P2_x)
130
+ 2n :MSTORE(ecAdd_P2_y)
131
+ :CALL(ecAdd)
132
+ 5 => A
133
+ 1 :EQ
134
+
135
+ ; 7] P2 not in E
136
+ 0n :MSTORE(ecAdd_P1_x)
137
+ 0n :MSTORE(ecAdd_P1_y)
138
+ 1n :MSTORE(ecAdd_P2_x)
139
+ 0n :MSTORE(ecAdd_P2_y)
140
+ :CALL(ecAdd)
141
+ 6 => A
142
+ 1 :EQ
143
+
144
+ 1n :MSTORE(ecAdd_P1_x)
145
+ 2n :MSTORE(ecAdd_P1_y)
146
+ 1n :MSTORE(ecAdd_P2_x)
147
+ 0n :MSTORE(ecAdd_P2_y)
148
+ :CALL(ecAdd)
149
+ 6 => A
150
+ 1 :EQ
151
+
152
+ ; 8] P + (-P) = 0
153
+ 10744596414106452074759370245733544594153395043370666422502510773307029471145n :MSTORE(ecAdd_P1_x)
154
+ 848677436511517736191562425154572367705380862894644942948681172815252343932n :MSTORE(ecAdd_P1_y)
155
+ 10744596414106452074759370245733544594153395043370666422502510773307029471145n :MSTORE(ecAdd_P2_x)
156
+ 21039565435327757486054843320102702720990930294403178719740356721829973864651n :MSTORE(ecAdd_P2_y)
157
+ :CALL(ecAdd)
158
+ 0n :MLOAD(ecAdd_P3_x)
159
+ 0n :MLOAD(ecAdd_P3_y)
160
+
161
+ ; 9] P + Q when P != Q
162
+ 2893332206675025542079383054128180540025417352513932043566889211329192179032n :MSTORE(ecAdd_P1_x)
163
+ 6530629491743359417280396166892081514007566149119717903717756741482263401518n :MSTORE(ecAdd_P1_y)
164
+ 15490799329273967747501973647822742581714860109251269127154113506193693607878n :MSTORE(ecAdd_P2_x)
165
+ 4229358293223510599397432508631487048670295788986070026939193461742686527076n :MSTORE(ecAdd_P2_y)
166
+ :CALL(ecAdd)
167
+ 13154776318592227270778558029295227935378730842313609923118896637591559850250n :MLOAD(ecAdd_P3_x)
168
+ 11035980320923476543935377623718958678920911311849399323950347759358969041431n :MLOAD(ecAdd_P3_y)
169
+ 1745860766704548035074878643814414425056208216948549237180537806484993001172n :MSTORE(ecAdd_P1_x)
170
+ 10428992577810537311515619307712828512800028181521723820412159824785899508051n :MSTORE(ecAdd_P1_y)
171
+ 10744596414106452074759370245733544594153395043370666422502510773307029471145n :MSTORE(ecAdd_P2_x)
172
+ 848677436511517736191562425154572367705380862894644942948681172815252343932n :MSTORE(ecAdd_P2_y)
173
+ :CALL(ecAdd)
174
+ 20109137777308224484751705964830245061785572657602899297228633767392913518415n :MLOAD(ecAdd_P3_x)
175
+ 14499175368639637950478596677291617168262069295802020711454610174461584835979n :MLOAD(ecAdd_P3_y)
176
+
177
+ ; 10] P + P
178
+ 2893332206675025542079383054128180540025417352513932043566889211329192179032n :MSTORE(ecAdd_P1_x)
179
+ 6530629491743359417280396166892081514007566149119717903717756741482263401518n :MSTORE(ecAdd_P1_y)
180
+ 2893332206675025542079383054128180540025417352513932043566889211329192179032n :MSTORE(ecAdd_P2_x)
181
+ 6530629491743359417280396166892081514007566149119717903717756741482263401518n :MSTORE(ecAdd_P2_y)
182
+ :CALL(ecAdd)
183
+ 11220622501868821308995844886766009822833441579384302982823096531245924405698n :MLOAD(ecAdd_P3_x)
184
+ 2355690023525969090855462437460037724073976772193253577110863269987724684477n :MLOAD(ecAdd_P3_y)
185
+ 15490799329273967747501973647822742581714860109251269127154113506193693607878n :MSTORE(ecAdd_P1_x)
186
+ 4229358293223510599397432508631487048670295788986070026939193461742686527076n :MSTORE(ecAdd_P1_y)
187
+ 15490799329273967747501973647822742581714860109251269127154113506193693607878n :MSTORE(ecAdd_P2_x)
188
+ 4229358293223510599397432508631487048670295788986070026939193461742686527076n :MSTORE(ecAdd_P2_y)
189
+ :CALL(ecAdd)
190
+ 14301632400969957113316344359548233118734763289927867040319376723985850943059n :MLOAD(ecAdd_P3_x)
191
+ 19259402839901377893267670172732143592044261932601111690978918426524987173751n :MLOAD(ecAdd_P3_y)
192
+ 1745860766704548035074878643814414425056208216948549237180537806484993001172n :MSTORE(ecAdd_P1_x)
193
+ 10428992577810537311515619307712828512800028181521723820412159824785899508051n :MSTORE(ecAdd_P1_y)
194
+ 1745860766704548035074878643814414425056208216948549237180537806484993001172n :MSTORE(ecAdd_P2_x)
195
+ 10428992577810537311515619307712828512800028181521723820412159824785899508051n :MSTORE(ecAdd_P2_y)
196
+ :CALL(ecAdd)
197
+ 7635241416710394435863784018619353890364763495262225661273147225960091861733n :MLOAD(ecAdd_P3_x)
198
+ 21716464559528323959695889215160185865818678200951896286120725092340748527691n :MLOAD(ecAdd_P3_y)
199
+ 10744596414106452074759370245733544594153395043370666422502510773307029471145n :MSTORE(ecAdd_P1_x)
200
+ 848677436511517736191562425154572367705380862894644942948681172815252343932n :MSTORE(ecAdd_P1_y)
201
+ 10744596414106452074759370245733544594153395043370666422502510773307029471145n :MSTORE(ecAdd_P2_x)
202
+ 848677436511517736191562425154572367705380862894644942948681172815252343932n :MSTORE(ecAdd_P2_y)
203
+ :CALL(ecAdd)
204
+ 4444740815889402603535294170722302758225367627362056425101568584910268024244n :MLOAD(ecAdd_P3_x)
205
+ 10537263096529483164618820017164668921386457028564663708352735080900270541420n :MLOAD(ecAdd_P3_y)
206
+
207
+ ; 11] Worst case scenario in terms of ARITH calls and therefore in terms of number of steps
208
+ ; In this case, we only need to perform a doubling, since the cost of ecAdd is constant
209
+ ; on its input and doubling strictly dominates addition in terms of cost.
210
+ 2893332206675025542079383054128180540025417352513932043566889211329192179032n :MSTORE(ecAdd_P1_x)
211
+ 6530629491743359417280396166892081514007566149119717903717756741482263401518n :MSTORE(ecAdd_P1_y)
212
+ 2893332206675025542079383054128180540025417352513932043566889211329192179032n :MSTORE(ecAdd_P2_x)
213
+ 6530629491743359417280396166892081514007566149119717903717756741482263401518n :MSTORE(ecAdd_P2_y)
214
+ :CALL(ecAdd)
215
+ 11220622501868821308995844886766009822833441579384302982823096531245924405698n :MLOAD(ecAdd_P3_x)
216
+ 2355690023525969090855462437460037724073976772193253577110863269987724684477n :MLOAD(ecAdd_P3_y)
217
+
218
+ end:
219
+
220
+ $ => A :MLOAD(initial_A)
221
+ $ => B :MLOAD(initial_B)
222
+ $ => C :MLOAD(initial_C)
223
+ $ => D :MLOAD(initial_D)
224
+ $ => E :MLOAD(initial_E)
225
+ $ => CTX :MLOAD(initial_CTX)
226
+ $ => SP :MLOAD(initial_SP)
227
+ $ => PC :MLOAD(initial_PC)
228
+ $ => GAS :MLOAD(initial_GAS)
229
+ $ => SR :MLOAD(initial_SR)
230
+ $ => RR :MLOAD(initial_RR)
231
+ $ => HASHPOS :MLOAD(initial_HASHPOS)
232
+ $ => RCX :MLOAD(initial_RCX)
233
+
234
+ ; label finalizeExecution needed by executor C++
235
+ finalizeExecution:
236
+ ${beforeLast()} : JMPN(finalizeExecution)
237
+
238
+ : JMP(start)
239
+ opINVALID:
240
+ ; label checkAndSaveFrom needed by executor C++
241
+ checkAndSaveFrom:
242
+ :JMP(opINVALID)
243
+
244
+
245
+ INCLUDE "../main/pairings/BN254/ecAdd.zkasm"
246
+
247
+ INCLUDE "../main/pairings/FPBN254/reduceFpBN254.zkasm"
248
+ INCLUDE "../main/pairings/FPBN254/addFpBN254.zkasm"
249
+ INCLUDE "../main/pairings/FPBN254/subFpBN254.zkasm"
250
+ INCLUDE "../main/pairings/FPBN254/mulFpBN254.zkasm"
251
+ INCLUDE "../main/pairings/FPBN254/squareFpBN254.zkasm"
252
+ INCLUDE "../main/pairings/FPBN254/invFpBN254.zkasm"
package/test/testEcMul.zkasm ADDED
@@ -0,0 +1,231 @@
1
+ ; constants needed by executor C++
2
+ CONST %N = 2**19
3
+ CONST %MAX_CNT_STEPS_LIMIT = %N
4
+ CONST %MAX_CNT_ARITH_LIMIT = %N
5
+ CONST %MAX_CNT_BINARY_LIMIT = %N
6
+ CONST %MAX_CNT_MEM_ALIGN_LIMIT = %N
7
+ CONST %MAX_CNT_KECCAK_F_LIMIT = %N
8
+ CONST %MAX_CNT_PADDING_PG_LIMIT = %N
9
+ CONST %MAX_CNT_POSEIDON_G_LIMIT = %N
10
+
11
+ CONSTL %BN254_P = 21888242871839275222246405745257275088696311157297823662689037894645226208583n
12
+ CONSTL %BN254_P_MINUS_ONE = 21888242871839275222246405745257275088696311157297823662689037894645226208582n
13
+ CONSTL %BN254_R = 21888242871839275222246405745257275088548364400416034343698204186575808495617n
14
+ CONSTL %BN254_E_B = 3n
15
+
16
+ VAR GLOBAL lastHashKId
17
+ VAR GLOBAL lastHashPId
18
+
19
+ VAR GLOBAL initial_A
20
+ VAR GLOBAL initial_B
21
+ VAR GLOBAL initial_C
22
+ VAR GLOBAL initial_D
23
+ VAR GLOBAL initial_E
24
+ VAR GLOBAL initial_CTX
25
+ VAR GLOBAL initial_SP
26
+ VAR GLOBAL initial_PC
27
+ VAR GLOBAL initial_GAS
28
+ VAR GLOBAL initial_SR
29
+ VAR GLOBAL initial_RR
30
+ VAR GLOBAL initial_HASHPOS
31
+ VAR GLOBAL initial_RCX
32
+
33
+ start:
34
+
35
+ STEP => A
36
+ 0 :ASSERT
37
+
38
+
39
+ A :MSTORE(initial_A)
40
+ B :MSTORE(initial_B)
41
+ C :MSTORE(initial_C)
42
+ D :MSTORE(initial_D)
43
+ E :MSTORE(initial_E)
44
+ CTX :MSTORE(initial_CTX)
45
+ SP :MSTORE(initial_SP)
46
+ PC :MSTORE(initial_PC)
47
+ GAS :MSTORE(initial_GAS)
48
+ SR :MSTORE(initial_SR)
49
+ RR :MSTORE(initial_RR)
50
+ HASHPOS :MSTORE(initial_HASHPOS)
51
+ RCX :MSTORE(initial_RCX)
52
+ 0 => A,B,C,D,E,CTX, SP, PC, GAS, SR, RR, HASHPOS, RCX
53
+
54
+ -1 :MSTORE(lastHashKId)
55
+ -1 :MSTORE(lastHashPId)
56
+
57
+ ; 1] 0·O = O
58
+ 0n :MSTORE(ecMul_k)
59
+ 0n :MSTORE(ecMul_P_x)
60
+ 0n :MSTORE(ecMul_P_y)
61
+ :CALL(ecMul)
62
+ 0n :MLOAD(ecMul_Q_x)
63
+ 0n :MLOAD(ecMul_Q_y)
64
+
65
+ ; 2] k·O = O
66
+ 5n :MSTORE(ecMul_k)
67
+ 0n :MSTORE(ecMul_P_x)
68
+ 0n :MSTORE(ecMul_P_y)
69
+ :CALL(ecMul)
70
+ 0n :MLOAD(ecMul_Q_x)
71
+ 0n :MLOAD(ecMul_Q_y)
72
+
73
+ ; 3] 0·P = O, where P != O
74
+ 0n :MSTORE(ecMul_k)
75
+ 1n :MSTORE(ecMul_P_x)
76
+ 2n :MSTORE(ecMul_P_y)
77
+ :CALL(ecMul)
78
+ 0n :MLOAD(ecMul_Q_x)
79
+ 0n :MLOAD(ecMul_Q_y)
80
+
81
+ ; 4] P not in range
82
+ 0n :MSTORE(ecMul_k)
83
+ 21888242871839275222246405745257275088696311157297823662689037894645226208584n :MSTORE(ecMul_P_x)
84
+ 2n :MSTORE(ecMul_P_y)
85
+ :CALL(ecMul)
86
+ 1 => A
87
+ 1 :EQ
88
+
89
+ 0n :MSTORE(ecMul_k)
90
+ 1n :MSTORE(ecMul_P_x)
91
+ 21888242871839275222246405745257275088696311157297823662689037894645226208585n :MSTORE(ecMul_P_y)
92
+ :CALL(ecMul)
93
+ 2 => A
94
+ 1 :EQ
95
+
96
+ ; 5] P not in E
97
+ 0n :MSTORE(ecMul_k)
98
+ 1n :MSTORE(ecMul_P_x)
99
+ 0n :MSTORE(ecMul_P_y)
100
+ :CALL(ecMul)
101
+ 3 => A
102
+ 1 :EQ
103
+
104
+ 65n :MSTORE(ecMul_k)
105
+ 1n :MSTORE(ecMul_P_x)
106
+ 0n :MSTORE(ecMul_P_y)
107
+ :CALL(ecMul)
108
+ 3 => A
109
+ 1 :EQ
110
+
111
+ ; 6] k·P when k != 0
112
+ 1n :MSTORE(ecMul_k)
113
+ 1n :MSTORE(ecMul_P_x)
114
+ 2n :MSTORE(ecMul_P_y)
115
+ :CALL(ecMul)
116
+ 1n :MLOAD(ecMul_Q_x)
117
+ 2n :MLOAD(ecMul_Q_y)
118
+
119
+ 2n :MSTORE(ecMul_k)
120
+ 1n :MSTORE(ecMul_P_x)
121
+ 2n :MSTORE(ecMul_P_y)
122
+ :CALL(ecMul)
123
+ 1368015179489954701390400359078579693043519447331113978918064868415326638035n :MLOAD(ecMul_Q_x)
124
+ 9918110051302171585080402603319702774565515993150576347155970296011118125764n :MLOAD(ecMul_Q_y)
125
+ 65n :MSTORE(ecMul_k)
126
+ 1n :MSTORE(ecMul_P_x)
127
+ 2n :MSTORE(ecMul_P_y)
128
+ :CALL(ecMul)
129
+ 21184532036463169063041779836861514142873086093180850953095098556309204188255n :MLOAD(ecMul_Q_x)
130
+ 16870949628445799017882714788639508275834535486794531840392367353784571921174n :MLOAD(ecMul_Q_y)
131
+ 10000000089n :MSTORE(ecMul_k)
132
+ 1n :MSTORE(ecMul_P_x)
133
+ 2n :MSTORE(ecMul_P_y)
134
+ :CALL(ecMul)
135
+ 4768044760451824005417871472283223457728569810854115125480649095031772328870n :MLOAD(ecMul_Q_x)
136
+ 21389337952468851259287213083493638952853622949895525580347877121675081015727n :MLOAD(ecMul_Q_y)
137
+ 57n :MSTORE(ecMul_k)
138
+ 1745860766704548035074878643814414425056208216948549237180537806484993001172n :MSTORE(ecMul_P_x)
139
+ 10428992577810537311515619307712828512800028181521723820412159824785899508051n :MSTORE(ecMul_P_y)
140
+ :CALL(ecMul)
141
+ 21092868577100313210583214784627729175513062432513303686654820611840644382013n :MLOAD(ecMul_Q_x)
142
+ 10293123368529248350591404721829100625076077203595282162629899903703630633665n :MLOAD(ecMul_Q_y)
143
+ 123456789n :MSTORE(ecMul_k)
144
+ 1745860766704548035074878643814414425056208216948549237180537806484993001172n :MSTORE(ecMul_P_x)
145
+ 10428992577810537311515619307712828512800028181521723820412159824785899508051n :MSTORE(ecMul_P_y)
146
+ :CALL(ecMul)
147
+ 9551410454255481932113938269904288675272239827491596157984458647610565008967n :MLOAD(ecMul_Q_x)
148
+ 17781856861347070862134441477208204792978952663354273425763774350233183876915n :MLOAD(ecMul_Q_y)
149
+ 21888242871839275222246405745257275088548364400416034343698204186575808495617n :MSTORE(ecMul_k)
150
+ 1n :MSTORE(ecMul_P_x)
151
+ 2n :MSTORE(ecMul_P_y)
152
+ :CALL(ecMul)
153
+ 0n :MLOAD(ecMul_Q_x)
154
+ 0n :MLOAD(ecMul_Q_y)
155
+
156
+ 21888242871839275222246405745257275088548364400416034343698204186575808495618n :MSTORE(ecMul_k)
157
+ 1n :MSTORE(ecMul_P_x)
158
+ 2n :MSTORE(ecMul_P_y)
159
+ :CALL(ecMul)
160
+ 1n :MLOAD(ecMul_Q_x)
161
+ 2n :MLOAD(ecMul_Q_y)
162
+
163
+ 21888242871839275222246405745257275088696311157297823662689037894645226208583n :MSTORE(ecMul_k)
164
+ 1n :MSTORE(ecMul_P_x)
165
+ 2n :MSTORE(ecMul_P_y)
166
+ :CALL(ecMul)
167
+ 7793429943220682609834519115512946233910458086191548249060013461061457526887n :MLOAD(ecMul_Q_x)
168
+ 16460968250425543446028981775631045522280113359306664586749259656855967130574n :MLOAD(ecMul_Q_y)
169
+
170
+ 21888242871839275222246405745257275088696311157297823662689037894645226208584n :MSTORE(ecMul_k)
171
+ 1n :MSTORE(ecMul_P_x)
172
+ 2n :MSTORE(ecMul_P_y)
173
+ :CALL(ecMul)
174
+ 15886422571275617715400903250697722692198979607302343556925904858625057687404n :MLOAD(ecMul_Q_x)
175
+ 9788557113822741943783365060165103517008620829146475047263378292709661309554n :MLOAD(ecMul_Q_y)
176
+ 115792089237316195423570985008687907853269984665640564039457584007913129639935n :MSTORE(ecMul_k)
177
+ 1n :MSTORE(ecMul_P_x)
178
+ 2n :MSTORE(ecMul_P_y)
179
+ :CALL(ecMul)
180
+ 21415159568991615317144600033915305503576371596506956373206836402282692989778n :MLOAD(ecMul_Q_x)
181
+ 8573070896319864868535933562264623076420652926303237982078693068147657243287n :MLOAD(ecMul_Q_y)
182
+
183
+ ; 7] Worst case scenario in terms of ARITH calls and therefore in terms of number of steps.
184
+ ; In ecMul, this should be the scalar multiplication with scalar with higer Hamming weight
185
+ ; that is lower than r, which in this case is 2^253 - 1.
186
+ 14474011154664524427946373126085988481658748083205070504932198000989141204991n :MSTORE(ecMul_k)
187
+ 1n :MSTORE(ecMul_P_x)
188
+ 2n :MSTORE(ecMul_P_y)
189
+ :CALL(ecMul)
190
+ 3739418567393436576913511739065691570763034865122368432616000129799288055432n :MLOAD(ecMul_Q_x)
191
+ 18298856760603404171434473181920219106007178146585940397845192637485681860518n :MLOAD(ecMul_Q_y)
192
+
193
+
194
+ end:
195
+
196
+ $ => A :MLOAD(initial_A)
197
+ $ => B :MLOAD(initial_B)
198
+ $ => C :MLOAD(initial_C)
199
+ $ => D :MLOAD(initial_D)
200
+ $ => E :MLOAD(initial_E)
201
+ $ => CTX :MLOAD(initial_CTX)
202
+ $ => SP :MLOAD(initial_SP)
203
+ $ => PC :MLOAD(initial_PC)
204
+ $ => GAS :MLOAD(initial_GAS)
205
+ $ => SR :MLOAD(initial_SR)
206
+ $ => RR :MLOAD(initial_RR)
207
+ $ => HASHPOS :MLOAD(initial_HASHPOS)
208
+ $ => RCX :MLOAD(initial_RCX)
209
+
210
+ ; label finalizeExecution needed by executor C++
211
+ finalizeExecution:
212
+ ${beforeLast()} : JMPN(finalizeExecution)
213
+
214
+ : JMP(start)
215
+ opINVALID:
216
+ ; label checkAndSaveFrom needed by executor C++
217
+ checkAndSaveFrom:
218
+ :JMP(opINVALID)
219
+
220
+
221
+ INCLUDE "../main/pairings/BN254/ecMul.zkasm"
222
+ INCLUDE "../main/pairings/BN254/ecAdd.zkasm"
223
+
224
+ INCLUDE "../main/pairings/FRBN254/reduceFrBN254.zkasm"
225
+
226
+ INCLUDE "../main/pairings/FPBN254/reduceFpBN254.zkasm"
227
+ INCLUDE "../main/pairings/FPBN254/addFpBN254.zkasm"
228
+ INCLUDE "../main/pairings/FPBN254/subFpBN254.zkasm"
229
+ INCLUDE "../main/pairings/FPBN254/mulFpBN254.zkasm"
230
+ INCLUDE "../main/pairings/FPBN254/squareFpBN254.zkasm"
231
+ INCLUDE "../main/pairings/FPBN254/invFpBN254.zkasm"