Function test_tap_msm_valid_inputs

bitvm/src/chunk/taps_msm.rs:402–474

()

    #[test]
    fn test_tap_msm_valid_inputs() {
        let mut prng = ChaCha20Rng::seed_from_u64(1);
        let q = ark_bn254::G1Affine::rand(&mut prng);
        let scalar = ark_bn254::Fr::rand(&mut prng);
        let scalars = vec![scalar.into()];
        let qs = vec![q];

        let hints_msm = chunk_msm(scalars.clone(), qs.clone());

        for msm_chunk_index in 0..hints_msm.len() {
            let input_is_valid = hints_msm[msm_chunk_index].1;
            assert!(input_is_valid);
            let hint_in = if msm_chunk_index > 0 {
                DataType::G1Data(hints_msm[msm_chunk_index - 1].0)
            } else {
                DataType::G1Data(ark_bn254::G1Affine::identity())
            };
            let hint_out = DataType::G1Data(hints_msm[msm_chunk_index].0);

            let bitcom_scr = script! {
                {hint_out.to_hash().as_hint_type().push()}
                {Fq::toaltstack()}
                if msm_chunk_index > 0 {
                    {hint_in.to_hash().as_hint_type().push()}
                    {Fq::toaltstack()}
                }

                {Fr::push(ark_bn254::Fr::from(scalar))}
                {Fr::toaltstack()}
            };

            let mut op_hints = vec![];
            if msm_chunk_index > 0 {
                op_hints.extend_from_slice(&hint_in.to_witness(ElementType::G1));
            }

            let hash_script = script! {
                if msm_chunk_index == 0 {
                    //M: [G1AccDash]
                    //A: [G1AccDashHash]
                    {hash_messages(vec![ElementType::G1])}
                } else {
                    // [G1Acc, G1AccDash] [G1AccDashHash, G1AccHash]
                    {hash_messages(vec![ElementType::G1, ElementType::G1])}
                }
                OP_TRUE
            };
            let script = script! {
                for h in &hints_msm[msm_chunk_index].3 {
                    {h.push()}
                }
                for i in op_hints {
                    {i.push()}
                }
                {bitcom_scr}
                {hints_msm[msm_chunk_index].2.clone()}
                {hash_script}
            };