Struct zkp::toolbox::prover::Prover

pub struct Prover<'a> { /* fields omitted */ }

Used to create proofs.

To use a Prover, first construct one using Prover::new(), supplying a domain separation label, as well as the transcript to operate on.

Then, allocate and assign secret (Prover::allocate_scalar) and public (Prover::allocate_point) variables, and use those variables to define the proof statements.

Finally, use Prover::prove_compact or Prover::prove_batchable to consume the prover and produce a proof.

Methods

impl<'a> Prover<'a>

pub fn new(proof_label: &'static [u8], transcript: &'a mut Transcript) -> Self

Construct a new prover. The proof_label disambiguates proof statements.

pub fn allocate_scalar(
    &mut self,
    label: &'static [u8],
    assignment: Scalar
) -> ScalarVar

Allocate and assign a secret variable with the given label.

pub fn allocate_point(
    &mut self,
    label: &'static [u8],
    assignment: RistrettoPoint
) -> (PointVar, CompressedRistretto)

Allocate and assign a public variable with the given label.

The point is compressed to be appended to the transcript, and the compressed point is returned to allow reusing the result of that computation; it can be safely discarded.

pub fn prove_compact(self) -> CompactProof

Consume this prover to produce a compact proof.

pub fn prove_batchable(self) -> BatchableProof

Consume this prover to produce a batchable proof.

Trait Implementations

impl<'a> SchnorrCS for Prover<'a>

type ScalarVar = ScalarVar

A handle for a scalar variable in the constraint system.

type PointVar = PointVar

A handle for a point variable in the constraint system.

fn constrain(
    &mut self,
    lhs: PointVar,
    linear_combination: Vec<(ScalarVar, PointVar)>
)

Add a constraint of the form lhs = linear_combination.