Skip to content

Simplify MDS product in RPO constraints #505

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Al-Kindi-0 wants to merge 1 commit into
base: al-constraints
Choose a base branch
from
Open

Simplify MDS product in RPO constraints #505

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
45 changes: 29 additions & 16 deletions constraints/rpo.air
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,28 +43,41 @@ ev enforce_rpo_round([h[12]]){
##########################################################################################

fn apply_mds(state: felt[12]) -> felt[12]{
return [sum([s * m for (s, m) in (state, mds_row)]) for mds_row in MDS];
# Compute dot product of state vector with each MDS row
let result0 = sum([s * m for (s, m) in (state, MDSROWA)]);
let result1 = sum([s * m for (s, m) in (state, MDSROWB)]);
let result2 = sum([s * m for (s, m) in (state, MDSROWC)]);
let result3 = sum([s * m for (s, m) in (state, MDSROWD)]);
let result4 = sum([s * m for (s, m) in (state, MDSROWE)]);
let result5 = sum([s * m for (s, m) in (state, MDSROWF)]);
let result6 = sum([s * m for (s, m) in (state, MDSROWG)]);
let result7 = sum([s * m for (s, m) in (state, MDSROWH)]);
let result8 = sum([s * m for (s, m) in (state, MDSROWI)]);
let result9 = sum([s * m for (s, m) in (state, MDSROWJ)]);
let result10 = sum([s * m for (s, m) in (state, MDSROWK)]);
let result11 = sum([s * m for (s, m) in (state, MDSROWL)]);

return [result0, result1, result2, result3, result4, result5,
result6, result7, result8, result9, result10, result11];
}

##########################################################################################
# CONSTANTS AND PERIODIC COLUMNS
##########################################################################################

# MDS matrix used for computing the linear layer in a RPO round
const MDS = [
[7, 23, 8, 26, 13, 10, 9, 7, 6, 22, 21, 8],
[8, 7, 23, 8, 26, 13, 10, 9, 7, 6, 22, 21],
[21, 8, 7, 23, 8, 26, 13, 10, 9, 7, 6, 22],
[22, 21, 8, 7, 23, 8, 26, 13, 10, 9, 7, 6],
[6, 22, 21, 8, 7, 23, 8, 26, 13, 10, 9, 7],
[7, 6, 22, 21, 8, 7, 23, 8, 26, 13, 10, 9],
[9, 7, 6, 22, 21, 8, 7, 23, 8, 26, 13, 10],
[10, 9, 7, 6, 22, 21, 8, 7, 23, 8, 26, 13],
[13, 10, 9, 7, 6, 22, 21, 8, 7, 23, 8, 26],
[26, 13, 10, 9, 7, 6, 22, 21, 8, 7, 23, 8],
[8, 26, 13, 10, 9, 7, 6, 22, 21, 8, 7, 23],
[23, 8, 26, 13, 10, 9, 7, 6, 22, 21, 8, 7]
];
# MDS matrix rows used for computing the linear layer in a RPO round
const MDSROWA = [7, 23, 8, 26, 13, 10, 9, 7, 6, 22, 21, 8];
const MDSROWB = [8, 7, 23, 8, 26, 13, 10, 9, 7, 6, 22, 21];
const MDSROWC = [21, 8, 7, 23, 8, 26, 13, 10, 9, 7, 6, 22];
const MDSROWD = [22, 21, 8, 7, 23, 8, 26, 13, 10, 9, 7, 6];
const MDSROWE = [6, 22, 21, 8, 7, 23, 8, 26, 13, 10, 9, 7];
const MDSROWF = [7, 6, 22, 21, 8, 7, 23, 8, 26, 13, 10, 9];
const MDSROWG = [9, 7, 6, 22, 21, 8, 7, 23, 8, 26, 13, 10];
const MDSROWH = [10, 9, 7, 6, 22, 21, 8, 7, 23, 8, 26, 13];
const MDSROWI = [13, 10, 9, 7, 6, 22, 21, 8, 7, 23, 8, 26];
const MDSROWJ = [26, 13, 10, 9, 7, 6, 22, 21, 8, 7, 23, 8];
const MDSROWK = [8, 26, 13, 10, 9, 7, 6, 22, 21, 8, 7, 23];
const MDSROWL = [23, 8, 26, 13, 10, 9, 7, 6, 22, 21, 8, 7];

periodic_columns{
# Round constants added to the hasher state in the first half of the RPO round
Expand Down
Loading