feat: add PCS assist Dory opening formulas

Author: markosg04

crates/jolt-claims/src/protocols/dory_assist/formulas/artifacts.rs

@@ -0,0 +1,89 @@
+//! Public artifact slots exposed by the Dory-assist checked-input relation.
+
+pub const GT_ARTIFACT_COEFFS: usize = 16;
+pub const G1_ARTIFACT_COORDS: usize = 3;
+pub const G2_ARTIFACT_COORDS: usize = 5;
+
+pub const DORY_PROOF_DIGEST_INDEX: usize = 0;
+pub const DORY_VMV_C_START: usize = DORY_PROOF_DIGEST_INDEX + 1;
+pub const DORY_VMV_D2_START: usize = DORY_VMV_C_START + GT_ARTIFACT_COEFFS;
+pub const DORY_VMV_E1_START: usize = DORY_VMV_D2_START + GT_ARTIFACT_COEFFS;
+pub const DORY_ZK_E2_START: usize = DORY_VMV_E1_START + G1_ARTIFACT_COORDS;
+pub const DORY_ZK_Y_COM_START: usize = DORY_ZK_E2_START + G2_ARTIFACT_COORDS;
+pub const DORY_SCALAR_PRODUCT_P1_START: usize = DORY_ZK_Y_COM_START + G1_ARTIFACT_COORDS;
+pub const DORY_SCALAR_PRODUCT_P2_START: usize = DORY_SCALAR_PRODUCT_P1_START + GT_ARTIFACT_COEFFS;
+pub const DORY_SCALAR_PRODUCT_Q_START: usize = DORY_SCALAR_PRODUCT_P2_START + GT_ARTIFACT_COEFFS;
+pub const DORY_SCALAR_PRODUCT_R_START: usize = DORY_SCALAR_PRODUCT_Q_START + GT_ARTIFACT_COEFFS;
+pub const DORY_SCALAR_PRODUCT_E1_START: usize = DORY_SCALAR_PRODUCT_R_START + GT_ARTIFACT_COEFFS;
+pub const DORY_SCALAR_PRODUCT_E2_START: usize = DORY_SCALAR_PRODUCT_E1_START + G1_ARTIFACT_COORDS;
+pub const DORY_SCALAR_PRODUCT_R1_INDEX: usize = DORY_SCALAR_PRODUCT_E2_START + G2_ARTIFACT_COORDS;
+pub const DORY_SCALAR_PRODUCT_R2_INDEX: usize = DORY_SCALAR_PRODUCT_R1_INDEX + 1;
+pub const DORY_SCALAR_PRODUCT_R3_INDEX: usize = DORY_SCALAR_PRODUCT_R2_INDEX + 1;
+pub const DORY_REDUCE_ROUNDS_START: usize = DORY_SCALAR_PRODUCT_R3_INDEX + 1;
+
+pub const FIRST_REDUCE_ARTIFACT_COORDS: usize =
+    4 * GT_ARTIFACT_COEFFS + G1_ARTIFACT_COORDS + G2_ARTIFACT_COORDS;
+pub const SECOND_REDUCE_ARTIFACT_COORDS: usize =
+    2 * GT_ARTIFACT_COEFFS + 2 * G1_ARTIFACT_COORDS + 2 * G2_ARTIFACT_COORDS;
+pub const REDUCE_ROUND_ARTIFACT_COORDS: usize =
+    FIRST_REDUCE_ARTIFACT_COORDS + SECOND_REDUCE_ARTIFACT_COORDS;
+
+pub const fn reduce_round_start(round: usize) -> usize {
+    DORY_REDUCE_ROUNDS_START + round * REDUCE_ROUND_ARTIFACT_COORDS
+}
+
+pub const fn reduce_first_d1_left_start(round: usize) -> usize {
+    reduce_round_start(round)
+}
+
+pub const fn reduce_first_d1_right_start(round: usize) -> usize {
+    reduce_first_d1_left_start(round) + GT_ARTIFACT_COEFFS
+}
+
+pub const fn reduce_first_d2_left_start(round: usize) -> usize {
+    reduce_first_d1_right_start(round) + GT_ARTIFACT_COEFFS
+}
+
+pub const fn reduce_first_d2_right_start(round: usize) -> usize {
+    reduce_first_d2_left_start(round) + GT_ARTIFACT_COEFFS
+}
+
+pub const fn reduce_first_e1_beta_start(round: usize) -> usize {
+    reduce_first_d2_right_start(round) + GT_ARTIFACT_COEFFS
+}
+
+pub const fn reduce_first_e2_beta_start(round: usize) -> usize {
+    reduce_first_e1_beta_start(round) + G1_ARTIFACT_COORDS
+}
+
+pub const fn reduce_second_c_plus_start(round: usize) -> usize {
+    reduce_first_e2_beta_start(round) + G2_ARTIFACT_COORDS
+}
+
+pub const fn reduce_second_c_minus_start(round: usize) -> usize {
+    reduce_second_c_plus_start(round) + GT_ARTIFACT_COEFFS
+}
+
+pub const fn reduce_second_e1_plus_start(round: usize) -> usize {
+    reduce_second_c_minus_start(round) + GT_ARTIFACT_COEFFS
+}
+
+pub const fn reduce_second_e1_minus_start(round: usize) -> usize {
+    reduce_second_e1_plus_start(round) + G1_ARTIFACT_COORDS
+}
+
+pub const fn reduce_second_e2_plus_start(round: usize) -> usize {
+    reduce_second_e1_minus_start(round) + G1_ARTIFACT_COORDS
+}
+
+pub const fn reduce_second_e2_minus_start(round: usize) -> usize {
+    reduce_second_e2_plus_start(round) + G2_ARTIFACT_COORDS
+}
+
+pub const fn final_e1_start(reduce_rounds: usize) -> usize {
+    DORY_REDUCE_ROUNDS_START + reduce_rounds * REDUCE_ROUND_ARTIFACT_COORDS
+}
+
+pub const fn final_e2_start(reduce_rounds: usize) -> usize {
+    final_e1_start(reduce_rounds) + G1_ARTIFACT_COORDS
+}

crates/jolt-claims/src/protocols/dory_assist/formulas/claim_reductions/g1.rs

@@ -0,0 +1 @@
+//! Claim-reduction helpers for G1 operation-family claims.

crates/jolt-claims/src/protocols/dory_assist/formulas/claim_reductions/g2.rs

@@ -0,0 +1 @@
+//! Claim-reduction helpers for G2 operation-family claims.

crates/jolt-claims/src/protocols/dory_assist/formulas/claim_reductions/gt.rs

@@ -0,0 +1 @@
+//! Claim-reduction helpers for GT operation-family claims.

crates/jolt-claims/src/protocols/dory_assist/formulas/claim_reductions/miller_loop.rs

@@ -0,0 +1,68 @@
+use crate::util::extend_unique;
+
+use super::super::super::DoryAssistOpeningId;
+use super::super::miller_loop::{
+    accumulator_input_openings, accumulator_output_openings, boundary_output_openings,
+    line_evaluation_output_openings, line_step_output_openings, pair_product_output_openings,
+};
+
+pub fn prefix_packing_openings() -> Vec<DoryAssistOpeningId> {
+    let mut openings = Vec::new();
+    extend_unique(&mut openings, &line_step_output_openings());
+    extend_unique(&mut openings, &line_evaluation_output_openings());
+    extend_unique(&mut openings, &pair_product_output_openings());
+    extend_unique(&mut openings, &accumulator_input_openings());
+    extend_unique(&mut openings, &accumulator_output_openings());
+    extend_unique(&mut openings, &boundary_output_openings());
+    openings
+}
+
+#[cfg(test)]
+mod tests {
+    use super::super::super::super::{
+        DoryAssistRelationId, DoryAssistVirtualPolynomial, MillerLoopPolynomial,
+    };
+    use super::*;
+
+    #[test]
+    fn prefix_packing_openings_include_all_miller_loop_subrelations() {
+        let openings = prefix_packing_openings();
+
+        assert!(openings.iter().any(|opening| matches!(
+            opening,
+            DoryAssistOpeningId::Polynomial { relation, .. }
+                if *relation == DoryAssistRelationId::MillerLoopLineStep
+        )));
+        assert!(openings.iter().any(|opening| matches!(
+            opening,
+            DoryAssistOpeningId::Polynomial { relation, .. }
+                if *relation == DoryAssistRelationId::MillerLoopLineEvaluation
+        )));
+        assert!(openings.iter().any(|opening| matches!(
+            opening,
+            DoryAssistOpeningId::Polynomial { relation, .. }
+                if *relation == DoryAssistRelationId::MillerLoopPairProduct
+        )));
+        assert!(openings.iter().any(|opening| matches!(
+            opening,
+            DoryAssistOpeningId::Polynomial { relation, .. }
+                if *relation == DoryAssistRelationId::MillerLoopAccumulator
+        )));
+        assert!(openings.iter().any(|opening| matches!(
+            opening,
+            DoryAssistOpeningId::Polynomial { relation, .. }
+                if *relation == DoryAssistRelationId::MillerLoopBoundary
+        )));
+        assert!(openings.iter().any(|opening| matches!(
+            opening,
+            DoryAssistOpeningId::Polynomial {
+                polynomial: super::super::super::super::DoryAssistPolynomialId::Virtual(
+                    DoryAssistVirtualPolynomial::MillerLoop(
+                        MillerLoopPolynomial::PairLineProductCoeff(0)
+                    )
+                ),
+                relation: DoryAssistRelationId::MillerLoopPairProduct,
+            }
+        )));
+    }
+}

crates/jolt-claims/src/protocols/dory_assist/formulas/claim_reductions/mod.rs

@@ -0,0 +1,4 @@
+pub mod g1;
+pub mod g2;
+pub mod gt;
+pub mod miller_loop;

crates/jolt-claims/src/protocols/dory_assist/formulas/committed_openings.rs

@@ -0,0 +1,32 @@
+//! Dory-assist committed-polynomial opening order used by the Hyrax check.
+
+use super::super::{DoryAssistCommittedPolynomial, DoryAssistOpeningId, DoryAssistRelationId};
+
+pub fn final_opening_polynomial_order() -> [DoryAssistCommittedPolynomial; 1] {
+    [DoryAssistCommittedPolynomial::DenseWitness]
+}
+
+pub fn final_opening_ids() -> [DoryAssistOpeningId; 1] {
+    [DoryAssistOpeningId::dense_witness(
+        DoryAssistRelationId::PrefixPacking,
+    )]
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn final_opening_order_is_single_dense_witness() {
+        assert_eq!(
+            final_opening_polynomial_order(),
+            [DoryAssistCommittedPolynomial::DenseWitness]
+        );
+        assert_eq!(
+            final_opening_ids(),
+            [DoryAssistOpeningId::dense_witness(
+                DoryAssistRelationId::PrefixPacking
+            )]
+        );
+    }
+}