Feat: septic curve based continuation

Cargo.toml

@@ -23,16 +23,16 @@ repository = "https://github.com/scroll-tech/ceno"
 version = "0.1.0"
 
 [workspace.dependencies]
-ff_ext = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "ff_ext", rev = "v1.0.0-alpha.9" }
-mpcs = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "mpcs", rev = "v1.0.0-alpha.9" }
-multilinear_extensions = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "multilinear_extensions", rev = "v1.0.0-alpha.9" }
-p3 = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "p3", rev = "v1.0.0-alpha.9" }
-poseidon = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "poseidon", rev = "v1.0.0-alpha.9" }
-sp1-curves = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "sp1-curves", rev = "v1.0.0-alpha.9" }
-sumcheck = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "sumcheck", rev = "v1.0.0-alpha.9" }
-transcript = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "transcript", rev = "v1.0.0-alpha.9" }
-whir = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "whir", rev = "v1.0.0-alpha.9" }
-witness = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "witness", rev = "v1.0.0-alpha.9" }
+ff_ext = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "ff_ext", branch = "chore/sw_curve_default" }
+mpcs = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "mpcs", branch = "chore/sw_curve_default" }
+multilinear_extensions = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "multilinear_extensions", branch = "chore/sw_curve_default" }
+p3 = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "p3", branch = "chore/sw_curve_default" }
+poseidon = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "poseidon", branch = "chore/sw_curve_default" }
+sp1-curves = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "sp1-curves", branch = "chore/sw_curve_default" }
+sumcheck = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "sumcheck", branch = "chore/sw_curve_default" }
+transcript = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "transcript", branch = "chore/sw_curve_default" }
+whir = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "whir", branch = "chore/sw_curve_default" }
+witness = { git = "https://github.com/scroll-tech/gkr-backend.git", package = "witness", branch = "chore/sw_curve_default" }
 
 alloy-primitives = "1.3"
 anyhow = { version = "1.0", default-features = false }
@@ -80,6 +80,8 @@ tracing = { version = "0.1", features = [
 tracing-forest = { version = "0.1.6" }
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
 uint = "0.8"
+zkhash = { git = "https://github.com/HorizenLabs/poseidon2.git", rev = "bb476b9" }
+lazy_static = "1.5.0"
 
 ceno_gpu = { path = "utils/cuda_hal", package = "cuda_hal" }
 

ceno_emul/src/syscalls/bn254/bn254_fptower.rs

@@ -11,7 +11,9 @@ use crate::{
 
 use super::types::{BN254_FP_WORDS, BN254_FP2_WORDS};
 
+#[derive(Default)]
 pub struct Bn254FpAddSpec;
+
 impl SyscallSpec for Bn254FpAddSpec {
     const NAME: &'static str = "BN254_FP_ADD";
 
@@ -20,6 +22,7 @@ impl SyscallSpec for Bn254FpAddSpec {
     const CODE: u32 = ceno_syscall::BN254_FP_ADD;
 }
 
+#[derive(Default)]
 pub struct Bn254Fp2AddSpec;
 impl SyscallSpec for Bn254Fp2AddSpec {
     const NAME: &'static str = "BN254_FP2_ADD";
@@ -29,6 +32,7 @@ impl SyscallSpec for Bn254Fp2AddSpec {
     const CODE: u32 = ceno_syscall::BN254_FP2_ADD;
 }
 
+#[derive(Default)]
 pub struct Bn254FpMulSpec;
 impl SyscallSpec for Bn254FpMulSpec {
     const NAME: &'static str = "BN254_FP_MUL";
@@ -38,6 +42,7 @@ impl SyscallSpec for Bn254FpMulSpec {
     const CODE: u32 = ceno_syscall::BN254_FP_MUL;
 }
 
+#[derive(Default)]
 pub struct Bn254Fp2MulSpec;
 impl SyscallSpec for Bn254Fp2MulSpec {
     const NAME: &'static str = "BN254_FP2_MUL";

ceno_emul/src/syscalls/keccak_permute.rs

@@ -8,6 +8,7 @@ use super::{SyscallEffects, SyscallSpec, SyscallWitness};
 const KECCAK_CELLS: usize = 25; // u64 cells
 pub const KECCAK_WORDS: usize = KECCAK_CELLS * 2; // u32 words
 
+#[derive(Default)]
 pub struct KeccakSpec;
 
 impl SyscallSpec for KeccakSpec {

ceno_emul/src/syscalls/secp256k1.rs

@@ -5,8 +5,13 @@ use std::iter;
 
 use super::{SyscallEffects, SyscallSpec, SyscallWitness};
 
+#[derive(Default)]
 pub struct Secp256k1AddSpec;
+
+#[derive(Default)]
 pub struct Secp256k1DoubleSpec;
+
+#[derive(Default)]
 pub struct Secp256k1DecompressSpec;
 
 impl SyscallSpec for Secp256k1AddSpec {

ceno_emul/src/syscalls/sha256.rs

@@ -4,6 +4,7 @@ use super::{SyscallEffects, SyscallSpec, SyscallWitness};
 
 pub const SHA_EXTEND_WORDS: usize = 64; // u64 cells
 
+#[derive(Default)]
 pub struct Sha256ExtendSpec;
 
 impl SyscallSpec for Sha256ExtendSpec {

ceno_zkvm/Cargo.toml

@@ -30,6 +30,8 @@ sumcheck.workspace = true
 transcript.workspace = true
 whir.workspace = true
 witness.workspace = true
+zkhash.workspace = true
+lazy_static.workspace = true
 
 itertools.workspace = true
 ndarray.workspace = true
@@ -53,6 +55,7 @@ rand.workspace = true
 sp1-curves.workspace = true
 tempfile = "3.14"
 tiny-keccak.workspace = true
+num-bigint = "0.4.6"
 
 [target.'cfg(unix)'.dependencies]
 tikv-jemalloc-ctl = { version = "0.6", features = ["stats"], optional = true }

ceno_zkvm/src/chip_handler/general.rs

@@ -4,9 +4,10 @@ use gkr_iop::{error::CircuitBuilderError, tables::LookupTable};
 use crate::{
     circuit_builder::CircuitBuilder,
     instructions::riscv::constants::{
-        END_CYCLE_IDX, END_PC_IDX, END_SHARD_ID_IDX, EXIT_CODE_IDX, INIT_CYCLE_IDX, INIT_PC_IDX,
-        PUBLIC_IO_IDX, UINT_LIMBS,
+        END_CYCLE_IDX, END_PC_IDX, END_SHARD_ID_IDX, EXIT_CODE_IDX, GLOBAL_RW_SUM_IDX,
+        INIT_CYCLE_IDX, INIT_PC_IDX, PUBLIC_IO_IDX, UINT_LIMBS,
     },
+    scheme::constants::SEPTIC_EXTENSION_DEGREE,
     tables::InsnRecord,
 };
 use multilinear_extensions::{Expression, Instance};
@@ -21,6 +22,7 @@ pub trait PublicIOQuery {
     fn query_init_cycle(&mut self) -> Result<Instance, CircuitBuilderError>;
     fn query_end_pc(&mut self) -> Result<Instance, CircuitBuilderError>;
     fn query_end_cycle(&mut self) -> Result<Instance, CircuitBuilderError>;
+    fn query_global_rw_sum(&mut self) -> Result<Vec<Instance>, CircuitBuilderError>;
     fn query_public_io(&mut self) -> Result<[Instance; UINT_LIMBS], CircuitBuilderError>;
     #[allow(dead_code)]
     fn query_shard_id(&mut self) -> Result<Instance, CircuitBuilderError>;
@@ -73,4 +75,23 @@ impl<'a, E: ExtensionField> PublicIOQuery for CircuitBuilder<'a, E> {
                 .query_instance(|| "public_io_high", PUBLIC_IO_IDX + 1)?,
         ])
     }
+
+    fn query_global_rw_sum(&mut self) -> Result<Vec<Instance>, CircuitBuilderError> {
+        let x = (0..SEPTIC_EXTENSION_DEGREE)
+            .map(|i| {
+                self.cs
+                    .query_instance(|| format!("global_rw_sum_x_{}", i), GLOBAL_RW_SUM_IDX + i)
+            })
+            .collect::<Result<Vec<Instance>, CircuitBuilderError>>()?;
+        let y = (0..SEPTIC_EXTENSION_DEGREE)
+            .map(|i| {
+                self.cs.query_instance(
+                    || format!("global_rw_sum_y_{}", i),
+                    GLOBAL_RW_SUM_IDX + SEPTIC_EXTENSION_DEGREE + i,
+                )
+            })
+            .collect::<Result<Vec<Instance>, CircuitBuilderError>>()?;
+
+        Ok([x, y].concat())
+    }
 }

ceno_zkvm/src/e2e.rs

@@ -280,7 +280,7 @@ impl<'a> ShardContext<'a> {
 
     #[inline(always)]
     pub fn aligned_prev_ts(&self, prev_cycle: Cycle) -> Cycle {
-        let mut ts = prev_cycle - self.current_shard_offset_cycle();
+        let mut ts = prev_cycle.saturating_sub(self.current_shard_offset_cycle());
         if ts < Tracer::SUBCYCLES_PER_INSN {
             ts = 0
         }
@@ -433,6 +433,7 @@ pub fn emulate_program<'a>(
         end_cycle,
         shards.shard_id as u32,
         io_init.iter().map(|rec| rec.value).collect_vec(),
+        vec![0; 14], // point_at_infinity
     );
 
     // Find the final register values and cycles.

ceno_zkvm/src/gadgets/mod.rs

@@ -1,6 +1,8 @@
 mod div;
 mod field;
 mod is_lt;
+mod poseidon2;
+mod poseidon2_constants;
 mod signed;
 mod signed_ext;
 mod signed_limbs;
@@ -13,6 +15,9 @@ pub use gkr_iop::gadgets::{
     AssertLtConfig, InnerLtConfig, IsEqualConfig, IsLtConfig, IsZeroConfig, cal_lt_diff,
 };
 pub use is_lt::{AssertSignedLtConfig, SignedLtConfig};
+pub(crate) use poseidon2::RoundConstants;
+pub use poseidon2::{Poseidon2BabyBearConfig, Poseidon2Config};
+pub(crate) use poseidon2_constants::horizen_round_consts;
 pub use signed::Signed;
 pub use signed_ext::SignedExtendConfig;
 pub use signed_limbs::{UIntLimbsLT, UIntLimbsLTConfig};