2020-08-15 02:10:48 +03:00
|
|
|
use leo_gadgets::{arithmetic::*, Int128};
|
|
|
|
|
2020-07-11 04:14:51 +03:00
|
|
|
use snarkos_models::{
|
|
|
|
curves::{One, Zero},
|
|
|
|
gadgets::{
|
|
|
|
r1cs::{ConstraintSystem, Fr, TestConstraintSystem},
|
|
|
|
utilities::{alloc::AllocGadget, boolean::Boolean},
|
|
|
|
},
|
|
|
|
};
|
|
|
|
|
|
|
|
use rand::{Rng, SeedableRng};
|
|
|
|
use rand_xorshift::XorShiftRng;
|
2020-08-15 02:10:48 +03:00
|
|
|
use std::i128;
|
|
|
|
|
|
|
|
fn check_all_constant_bits(expected: i128, actual: Int128) {
|
|
|
|
for (i, b) in actual.bits.iter().enumerate() {
|
|
|
|
// shift value by i
|
|
|
|
let mask = 1 << i as i128;
|
|
|
|
let result = expected & mask;
|
2020-07-11 04:14:51 +03:00
|
|
|
|
|
|
|
match b {
|
|
|
|
&Boolean::Is(_) => panic!(),
|
|
|
|
&Boolean::Not(_) => panic!(),
|
|
|
|
&Boolean::Constant(b) => {
|
2020-08-15 02:10:48 +03:00
|
|
|
let bit = result == mask;
|
|
|
|
assert_eq!(b, bit);
|
2020-07-11 04:14:51 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2020-08-15 02:10:48 +03:00
|
|
|
fn check_all_allocated_bits(expected: i128, actual: Int128) {
|
|
|
|
for (i, b) in actual.bits.iter().enumerate() {
|
|
|
|
// shift value by i
|
|
|
|
let mask = 1 << i as i128;
|
|
|
|
let result = expected & mask;
|
|
|
|
|
2020-07-11 04:14:51 +03:00
|
|
|
match b {
|
|
|
|
&Boolean::Is(ref b) => {
|
2020-08-15 02:10:48 +03:00
|
|
|
let bit = result == mask;
|
|
|
|
assert_eq!(b.get_value().unwrap(), bit);
|
2020-07-11 04:14:51 +03:00
|
|
|
}
|
|
|
|
&Boolean::Not(ref b) => {
|
2020-08-15 02:10:48 +03:00
|
|
|
let bit = result == mask;
|
|
|
|
assert_eq!(!b.get_value().unwrap(), bit);
|
2020-07-11 04:14:51 +03:00
|
|
|
}
|
|
|
|
&Boolean::Constant(_) => unreachable!(),
|
|
|
|
}
|
2020-08-15 02:10:48 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_constant_and_alloc() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..1000 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
2020-07-11 04:14:51 +03:00
|
|
|
|
2020-08-15 02:10:48 +03:00
|
|
|
let a: i128 = rng.gen();
|
|
|
|
|
|
|
|
let a_const = Int128::constant(a);
|
|
|
|
|
|
|
|
assert!(a_const.value == Some(a));
|
|
|
|
|
|
|
|
check_all_constant_bits(a, a_const);
|
|
|
|
|
|
|
|
let a_bit = Int128::alloc(cs.ns(|| "a_bit"), || Ok(a)).unwrap();
|
|
|
|
|
|
|
|
assert!(cs.is_satisfied());
|
|
|
|
assert!(a_bit.value == Some(a));
|
|
|
|
|
|
|
|
check_all_allocated_bits(a, a_bit);
|
2020-07-11 04:14:51 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_add_constants() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
2020-08-15 02:10:48 +03:00
|
|
|
for _ in 0..100 {
|
2020-07-11 04:14:51 +03:00
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let a: i128 = rng.gen();
|
|
|
|
let b: i128 = rng.gen();
|
|
|
|
|
|
|
|
let expected = match a.checked_add(b) {
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => continue,
|
|
|
|
};
|
|
|
|
|
2020-08-15 02:10:48 +03:00
|
|
|
let a_bit = Int128::constant(a);
|
|
|
|
let b_bit = Int128::constant(b);
|
|
|
|
|
2020-07-11 04:14:51 +03:00
|
|
|
let r = a_bit.add(cs.ns(|| "addition"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_constant_bits(expected, r);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_add() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..100 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let a: i128 = rng.gen();
|
|
|
|
let b: i128 = rng.gen();
|
|
|
|
|
|
|
|
let expected = match a.checked_add(b) {
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => continue,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::alloc(cs.ns(|| "a_bit"), || Ok(a)).unwrap();
|
|
|
|
let b_bit = Int128::alloc(cs.ns(|| "b_bit"), || Ok(b)).unwrap();
|
|
|
|
|
|
|
|
let r = a_bit.add(cs.ns(|| "addition"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(cs.is_satisfied());
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_allocated_bits(expected, r);
|
|
|
|
|
|
|
|
// Flip a bit_gadget and see if the addition constraint still works
|
|
|
|
if cs.get("addition/result bit_gadget 0/boolean").is_zero() {
|
|
|
|
cs.set("addition/result bit_gadget 0/boolean", Fr::one());
|
|
|
|
} else {
|
|
|
|
cs.set("addition/result bit_gadget 0/boolean", Fr::zero());
|
|
|
|
}
|
|
|
|
|
|
|
|
assert!(!cs.is_satisfied());
|
|
|
|
}
|
|
|
|
}
|
2020-08-15 02:10:48 +03:00
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_sub_constants() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..100 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let a: i128 = rng.gen();
|
|
|
|
let b: i128 = rng.gen();
|
|
|
|
|
|
|
|
if b.checked_neg().is_none() {
|
|
|
|
// negate with overflows will fail: -128
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
let expected = match a.checked_sub(b) {
|
|
|
|
// subtract with overflow will fail: -0
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => continue,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::constant(a);
|
|
|
|
let b_bit = Int128::constant(b);
|
|
|
|
|
|
|
|
let r = a_bit.sub(cs.ns(|| "subtraction"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_constant_bits(expected, r);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_sub() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..100 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let a: i128 = rng.gen();
|
|
|
|
let b: i128 = rng.gen();
|
|
|
|
|
|
|
|
if b.checked_neg().is_none() {
|
|
|
|
// negate with overflows will fail: -128
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
let expected = match a.checked_sub(b) {
|
|
|
|
// subtract with overflow will fail: -0
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => continue,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::alloc(cs.ns(|| "a_bit"), || Ok(a)).unwrap();
|
|
|
|
let b_bit = Int128::alloc(cs.ns(|| "b_bit"), || Ok(b)).unwrap();
|
|
|
|
|
|
|
|
let r = a_bit.sub(cs.ns(|| "subtraction"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(cs.is_satisfied());
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_allocated_bits(expected, r);
|
|
|
|
|
|
|
|
// Flip a bit_gadget and see if the subtraction constraint still works
|
|
|
|
if cs
|
|
|
|
.get("subtraction/add_complement/result bit_gadget 0/boolean")
|
|
|
|
.is_zero()
|
|
|
|
{
|
|
|
|
cs.set("subtraction/add_complement/result bit_gadget 0/boolean", Fr::one());
|
|
|
|
} else {
|
|
|
|
cs.set("subtraction/add_complement/result bit_gadget 0/boolean", Fr::zero());
|
|
|
|
}
|
|
|
|
|
|
|
|
assert!(!cs.is_satisfied());
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_mul_constants() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..3 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let max = i64::MAX as i128;
|
|
|
|
let min = i64::MIN as i128;
|
|
|
|
|
|
|
|
let a: i128 = rng.gen_range(min, max);
|
|
|
|
let b: i128 = rng.gen_range(min, max);
|
|
|
|
|
|
|
|
let expected = match a.checked_mul(b) {
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => continue,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::constant(a);
|
|
|
|
let b_bit = Int128::constant(b);
|
|
|
|
|
|
|
|
let r = a_bit.mul(cs.ns(|| "multiplication"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_constant_bits(expected, r);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_mul() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..2 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let max = i64::MAX as i128;
|
|
|
|
let min = i64::MIN as i128;
|
|
|
|
|
|
|
|
let a: i128 = rng.gen_range(min, max);
|
|
|
|
let b: i128 = rng.gen_range(min, max);
|
|
|
|
|
|
|
|
let expected = match a.checked_mul(b) {
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => continue,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::alloc(cs.ns(|| "a_bit"), || Ok(a)).unwrap();
|
|
|
|
let b_bit = Int128::alloc(cs.ns(|| "b_bit"), || Ok(b)).unwrap();
|
|
|
|
|
|
|
|
let r = a_bit.mul(cs.ns(|| "multiplication"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(cs.is_satisfied());
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_allocated_bits(expected, r);
|
|
|
|
|
|
|
|
// Flip a bit_gadget and see if the multiplication constraint still works
|
|
|
|
if cs.get("multiplication/result bit_gadget 0/boolean").is_zero() {
|
|
|
|
cs.set("multiplication/result bit_gadget 0/boolean", Fr::one());
|
|
|
|
} else {
|
|
|
|
cs.set("multiplication/result bit_gadget 0/boolean", Fr::zero());
|
|
|
|
}
|
|
|
|
|
|
|
|
assert!(!cs.is_satisfied());
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_div_constants() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..3 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let a: i128 = rng.gen();
|
|
|
|
let b: i128 = rng.gen();
|
|
|
|
|
|
|
|
if a.checked_neg().is_none() {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
let expected = match a.checked_div(b) {
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => return,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::constant(a);
|
|
|
|
let b_bit = Int128::constant(b);
|
|
|
|
|
|
|
|
let r = a_bit.div(cs.ns(|| "division"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_constant_bits(expected, r);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
fn test_int128_div() {
|
|
|
|
let mut rng = XorShiftRng::seed_from_u64(1231275789u64);
|
|
|
|
|
|
|
|
for _ in 0..2 {
|
|
|
|
let mut cs = TestConstraintSystem::<Fr>::new();
|
|
|
|
|
|
|
|
let a: i128 = rng.gen();
|
|
|
|
let b: i128 = rng.gen();
|
|
|
|
|
|
|
|
if a.checked_neg().is_none() {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
|
|
|
let expected = match a.checked_div(b) {
|
|
|
|
Some(valid) => valid,
|
|
|
|
None => return,
|
|
|
|
};
|
|
|
|
|
|
|
|
let a_bit = Int128::alloc(cs.ns(|| "a_bit"), || Ok(a)).unwrap();
|
|
|
|
let b_bit = Int128::alloc(cs.ns(|| "b_bit"), || Ok(b)).unwrap();
|
|
|
|
|
|
|
|
let r = a_bit.div(cs.ns(|| "division"), &b_bit).unwrap();
|
|
|
|
|
|
|
|
assert!(cs.is_satisfied());
|
|
|
|
|
|
|
|
assert!(r.value == Some(expected));
|
|
|
|
|
|
|
|
check_all_allocated_bits(expected, r);
|
|
|
|
}
|
|
|
|
}
|