def run_one_test(nInBits, nCopies):
nOutBits = nInBits
(in0v, in1v, typv) = randutil.rand_ckt(nOutBits, nInBits)
inputs = randutil.rand_inputs(nInBits, nCopies)
circuit = CircuitProver(nCopies, 2**nInBits, [in0v], [in1v], [typv])
circuit.set_inputs(inputs)
z1 = [Defs.gen_random() for _ in range(0, nOutBits)]
z2 = [Defs.gen_random() for _ in range(0, circuit.nCopyBits)]
circuit.set_z(z1, z2)
# mlExt of outputs
outflat = util.flatten(circuit.ckt_outputs)
inLayer_mults = LayerComputeBeta(nOutBits + circuit.nCopyBits, z1 + z2)
assert len(outflat) == len(inLayer_mults.outputs)
inLayermul = util.mul_vecs(inLayer_mults.outputs, outflat)
inLayerExt = sum(inLayermul) % Defs.prime
w1 = [Defs.gen_random() for _ in range(0, nInBits)]
w2 = [Defs.gen_random() for _ in range(0, nInBits)]
w3 = [Defs.gen_random() for _ in range(0, circuit.nCopyBits)]
initOutputs = circuit.get_outputs()
assert inLayerExt == (initOutputs[0] + sum(initOutputs)) % Defs.prime
for i in range(0, len(w3)):
circuit.next_round(w3[i])
circuit.get_outputs()
for i in range(0, len(w1)):
circuit.next_round(w1[i])
circuit.get_outputs()
for i in range(0, len(w2)):
circuit.next_round(w2[i])
finalOutputs = circuit.get_outputs()
# check the outputs by computing mlext of layer input directly
inflat = util.flatten(inputs)
v1_mults = LayerComputeBeta(circuit.layers[0].nOutBits + circuit.nCopyBits,
w1 + w3)
assert len(inflat) == len(v1_mults.outputs)
v1inmul = util.mul_vecs(v1_mults.outputs, inflat)
v1 = sum(v1inmul) % Defs.prime
v2_mults = LayerComputeBeta(circuit.layers[0].nOutBits + circuit.nCopyBits,
w2 + w3)
assert len(inflat) == len(v2_mults.outputs)
v2inmul = util.mul_vecs(v2_mults.outputs, inflat)
v2 = sum(v2inmul) % Defs.prime
assert v1 == finalOutputs[0]
assert v2 == sum(finalOutputs) % Defs.prime
def get_inputs(verifier_info, input_layer):
if verifier_info.inputFile is None:
return randutil.rand_inputs(0, verifier_info.nCopies, input_layer)
if not os.path.isfile(verifier_info.inputFile):
print "ERROR: cannot find input file '%s'" % verifier_info.inputFile
sys.exit(1)
with open(verifier_info.inputFile, 'r') as inF:
inputs = []
nLines = 0
nVarInputs = len([1 for elm in input_layer if elm is None])
for line in inF:
line.strip()
inLine = []
try:
values = [int(val) for val in line.split(None)]
assert len(
values) == nVarInputs, "expected %d, got %d (#1)" % (
nVarInputs, len(values))
vidx = 0
for idx in range(0, len(input_layer)):
if input_layer[idx] is None:
inLine.append(values[vidx])
vidx += 1
else:
inLine.append(input_layer[idx])
assert vidx == len(
values), "expected %d, got %d (#2)" % (len(values), vidx)
assert len(inLine) == len(
input_layer), "expected %d, got %d (#3)" % (
len(input_layer), len(inLine))
except AssertionError as ae:
print "ERROR: inputFile has the wrong number of variables:", str(
ae)
sys.exit(1)
except ValueError as ve:
print "ERROR: could not parse inputFile value:", str(ve)
sys.exit(1)
inputs.append(inLine)
nLines += 1
if nLines == VerifierInfo.nCopies:
break
if len(inputs) != VerifierInfo.nCopies:
print "ERROR: inputFile has too few lines (got %d, expected %d)" % (
len(inputs), VerifierInfo.nCopies)
sys.exit(1)
return inputs
def run_one_test(nInBits, nCopies, nLayers, qStat):
nOutBits = nInBits
in0vv = []
in1vv = []
typvv = []
for _ in range(0, nLayers):
(in0v, in1v, typv) = randutil.rand_ckt(nOutBits, nInBits)
in0vv.append(in0v)
in1vv.append(in1v)
typvv.append(typv)
ver = CircuitVerifier(nCopies, 2**nInBits, in0vv, in1vv, typvv)
ver.build_prover()
inputs = randutil.rand_inputs(nInBits, nCopies)
ver.run(inputs)
if not qStat:
print "nInBits: %d, nCopies: %d, nLayers: %d" % (nInBits, nCopies,
nLayers)
for fArith in [ver.in_a, ver.out_a, ver.sc_a, ver.tV_a, ver.nlay_a]:
print(" %s: %%d mul, %%d add, %%d sub" %
fArith.cat) % fArith.get_counts()
def run_one_test(nInBits, nCopies):
nOutBits = nInBits
circuit = _DummyCircuitProver(nCopies)
inLayer = InputLayer(nOutBits)
(in0v, in1v, typv) = randutil.rand_ckt(nOutBits, nInBits)
typc = [tc.cgate for tc in typv]
inputs = randutil.rand_inputs(nInBits, nCopies)
# compute outputs
ckt = ArithCircuit()
inCktLayer = ArithCircuitInputLayer(ckt, nOutBits)
outCktLayer = ArithCircuitLayer(ckt, inCktLayer, in0v, in1v, typc)
ckt.layers = [inCktLayer, outCktLayer]
outputs = []
for inp in inputs:
ckt.run(inp)
outputs.append(ckt.outputs)
z1 = [Defs.gen_random() for _ in range(0, nOutBits)]
z2 = [Defs.gen_random() for _ in range(0, circuit.nCopyBits)]
outLayer = LayerProver(inLayer, circuit, in0v, in1v, typv)
outLayer.set_inputs(inputs)
outLayer.set_z(z1, z2)
# mlExt of outputs
outflat = util.flatten(outputs)
inLayer_mults = LayerComputeBeta(nOutBits + outLayer.circuit.nCopyBits,
z1 + z2)
assert len(outflat) == len(inLayer_mults.outputs)
inLayermul = util.mul_vecs(inLayer_mults.outputs, outflat)
inLayerExt = sum(inLayermul) % Defs.prime
w3 = [Defs.gen_random() for _ in range(0, circuit.nCopyBits)]
w1 = [Defs.gen_random() for _ in range(0, nInBits)]
w2 = [Defs.gen_random() for _ in range(0, nInBits)]
outLayer.compute_outputs()
initOutputs = outLayer.output
assert inLayerExt == (initOutputs[0] + sum(initOutputs)) % Defs.prime
for i in range(0, len(w3)):
outLayer.next_round(w3[i])
outLayer.compute_outputs()
for i in range(0, len(w1)):
outLayer.next_round(w1[i])
outLayer.compute_outputs()
for i in range(0, len(w2)):
outLayer.next_round(w2[i])
outLayer.compute_outputs()
finalOutputs = outLayer.output
# check the outputs by computing mlext of layer input directly
inflat = util.flatten(inputs)
v1_mults = LayerComputeBeta(
outLayer.prevL.nOutBits + outLayer.circuit.nCopyBits, w1 + w3)
assert len(inflat) == len(v1_mults.outputs)
v1inmul = util.mul_vecs(v1_mults.outputs, inflat)
v1 = sum(v1inmul) % Defs.prime
v2_mults = LayerComputeBeta(
outLayer.prevL.nOutBits + outLayer.circuit.nCopyBits, w2 + w3)
assert len(inflat) == len(v2_mults.outputs)
v2inmul = util.mul_vecs(v2_mults.outputs, inflat)
v2 = sum(v2inmul) % Defs.prime
assert v1 == finalOutputs[0]
assert v2 == sum(finalOutputs) % Defs.prime