forked from scipr-lab/libsnark
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathgadgetlib_test1.txt
454 lines (438 loc) · 42.1 KB
/
gadgetlib_test1.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
[==========] Running 1 test from 1 test case.
[----------] Global test environment set-up.
[----------] 1 test from gadgetLib1
[ RUN ] gadgetLib1.Integration
(enter) Call to run_r1cs_ppzksnark [ ] (1713963786.7731s x0.00 from start)
================================================================================
R1CS ppzkSNARK Generator
================================================================================
(enter) Call to r1cs_ppzksnark_generator [ ] (1713963786.7731s x0.00 from start)
(enter) Call to r1cs_constraint_system::swap_AB_if_beneficial [ ] (1713963786.7732s x0.00 from start)
(enter) Estimate densities [ ] (1713963786.7732s x0.00 from start)
* Non-zero A-count (estimate): 99
* Non-zero B-count (estimate): 99
(leave) Estimate densities [0.0000s x1.05] (1713963786.7732s x0.00 from start)
Swap is not beneficial, not performing
(leave) Call to r1cs_constraint_system::swap_AB_if_beneficial [0.0000s x1.02] (1713963786.7732s x0.00 from start)
(enter) Call to r1cs_to_qap_instance_map_with_evaluation [ ] (1713963786.7732s x0.00 from start)
(enter) Compute evaluations of A, B, C, H at t [ ] (1713963786.7732s x0.00 from start)
(leave) Compute evaluations of A, B, C, H at t [0.0002s x1.00] (1713963786.7735s x0.00 from start)
(leave) Call to r1cs_to_qap_instance_map_with_evaluation [0.0003s x1.00] (1713963786.7735s x0.00 from start)
* QAP number of variables: 297
* QAP pre degree: 99
* QAP degree: 128
* QAP number of input variables: 0
(enter) Compute query densities [ ] (1713963786.7735s x0.00 from start)
(leave) Compute query densities [0.0000s x1.06] (1713963786.7735s x0.00 from start)
Choosing window size 8 for 927 elements
Choosing window size 5 for 99 elements
* G1 window: 8
* G2 window: 5
(enter) Generating G1 multiexp table [ ] (1713963786.7737s x0.00 from start)
(leave) Generating G1 multiexp table [0.0054s x1.00] (1713963786.7791s x0.00 from start)
(enter) Generating G2 multiexp table [ ] (1713963786.7791s x0.00 from start)
(leave) Generating G2 multiexp table [0.0052s x1.00] (1713963786.7843s x0.00 from start)
(enter) Generate R1CS proving key [ ] (1713963786.7843s x0.00 from start)
(enter) Generate knowledge commitments [ ] (1713963786.7843s x0.00 from start)
(enter) Compute the A-query [ ] (1713963786.7843s x0.00 from start)
Non-zero coordinate count: 100/299 (33.44%)
(leave) Compute the A-query [0.0043s x1.00] (1713963786.7886s x0.00 from start)
(enter) Compute the B-query [ ] (1713963786.7886s x0.00 from start)
Non-zero coordinate count: 100/299 (33.44%)
(leave) Compute the B-query [0.0165s x1.00] (1713963786.8051s x0.00 from start)
(enter) Compute the C-query [ ] (1713963786.8051s x0.00 from start)
Non-zero coordinate count: 100/299 (33.44%)
(leave) Compute the C-query [0.0042s x1.00] (1713963786.8093s x0.00 from start)
(enter) Compute the H-query [ ] (1713963786.8094s x0.00 from start)
. DONE!
(leave) Compute the H-query [0.0026s x1.00] (1713963786.8119s x0.00 from start)
(enter) Compute the K-query [ ] (1713963786.8120s x0.00 from start)
. DONE!
(leave) Compute the K-query [0.0069s x1.00] (1713963786.8189s x0.00 from start)
(leave) Generate knowledge commitments [0.0346s x1.00] (1713963786.8190s x0.00 from start)
(leave) Generate R1CS proving key [0.0347s x1.00] (1713963786.8190s x0.00 from start)
(enter) Generate R1CS verification key [ ] (1713963786.8190s x0.00 from start)
(enter) Encode IC query for R1CS verification key [ ] (1713963786.8227s x0.00 from start)
DONE!
(leave) Encode IC query for R1CS verification key [0.0002s x1.00] (1713963786.8228s x0.00 from start)
(leave) Generate R1CS verification key [0.0039s x1.00] (1713963786.8228s x0.00 from start)
(leave) Call to r1cs_ppzksnark_generator [0.0497s x1.00] (1713963786.8228s x0.00 from start)
* G1 elements in PK: 1925
* Non-zero G1 elements in PK: 930
* G2 elements in PK: 299
* Non-zero G2 elements in PK: 100
* PK size in bits: 307250
* G1 elements in VK: 2
* G2 elements in VK: 5
* VK size in bits: 3310
* Peak vsize (physical memory+swap) in mebibytes (after generator): 11
================================================================================
Preprocess verification key
================================================================================
(enter) Call to r1cs_ppzksnark_verifier_process_vk [ ] (1713963786.8229s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8229s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8231s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8232s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8234s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8234s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x0.99] (1713963786.8234s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8234s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8237s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8237s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8239s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8239s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8241s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8242s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.03] (1713963786.8242s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8242s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8244s x0.00 from start)
(leave) Call to r1cs_ppzksnark_verifier_process_vk [0.0015s x1.00] (1713963786.8244s x0.00 from start)
================================================================================
R1CS ppzkSNARK Prover
================================================================================
(enter) Call to r1cs_ppzksnark_prover [ ] (1713963786.8244s x0.00 from start)
(enter) Compute the polynomial H [ ] (1713963786.8245s x0.00 from start)
(enter) Call to r1cs_to_qap_witness_map [ ] (1713963786.8245s x0.00 from start)
(enter) Compute evaluation of polynomials A, B on set S [ ] (1713963786.8245s x0.00 from start)
(leave) Compute evaluation of polynomials A, B on set S [0.0000s x1.00] (1713963786.8245s x0.00 from start)
(enter) Compute coefficients of polynomial A [ ] (1713963786.8245s x0.00 from start)
(leave) Compute coefficients of polynomial A [0.0001s x1.00] (1713963786.8246s x0.00 from start)
(enter) Compute coefficients of polynomial B [ ] (1713963786.8246s x0.00 from start)
(leave) Compute coefficients of polynomial B [0.0001s x1.00] (1713963786.8246s x0.00 from start)
(enter) Compute ZK-patch [ ] (1713963786.8246s x0.00 from start)
(leave) Compute ZK-patch [0.0000s x1.02] (1713963786.8246s x0.00 from start)
(enter) Compute evaluation of polynomial A on set T [ ] (1713963786.8247s x0.00 from start)
(leave) Compute evaluation of polynomial A on set T [0.0001s x1.00] (1713963786.8247s x0.00 from start)
(enter) Compute evaluation of polynomial B on set T [ ] (1713963786.8247s x0.00 from start)
(leave) Compute evaluation of polynomial B on set T [0.0001s x1.00] (1713963786.8248s x0.00 from start)
(enter) Compute evaluation of polynomial H on set T [ ] (1713963786.8248s x0.00 from start)
(enter) Compute evaluation of polynomial C on set S [ ] (1713963786.8248s x0.00 from start)
(leave) Compute evaluation of polynomial C on set S [0.0000s x1.03] (1713963786.8248s x0.00 from start)
(enter) Compute coefficients of polynomial C [ ] (1713963786.8248s x0.00 from start)
(leave) Compute coefficients of polynomial C [0.0001s x1.01] (1713963786.8249s x0.00 from start)
(enter) Compute evaluation of polynomial C on set T [ ] (1713963786.8249s x0.00 from start)
(leave) Compute evaluation of polynomial C on set T [0.0001s x1.02] (1713963786.8249s x0.00 from start)
(enter) Divide by Z on set T [ ] (1713963786.8249s x0.00 from start)
(leave) Divide by Z on set T [0.0000s x1.05] (1713963786.8250s x0.00 from start)
(leave) Compute evaluation of polynomial H on set T [0.0002s x1.00] (1713963786.8250s x0.00 from start)
(enter) Compute coefficients of polynomial H [ ] (1713963786.8250s x0.00 from start)
(leave) Compute coefficients of polynomial H [0.0001s x1.01] (1713963786.8250s x0.00 from start)
(enter) Compute sum of H and ZK-patch [ ] (1713963786.8250s x0.00 from start)
(leave) Compute sum of H and ZK-patch [0.0000s x1.06] (1713963786.8250s x0.00 from start)
(leave) Call to r1cs_to_qap_witness_map [0.0006s x1.00] (1713963786.8251s x0.00 from start)
(leave) Compute the polynomial H [0.0006s x1.00] (1713963786.8251s x0.00 from start)
(enter) Compute the proof [ ] (1713963786.8270s x0.00 from start)
(enter) Compute answer to A-query [ ] (1713963786.8271s x0.00 from start)
(enter) Process scalar vector [ ] (1713963786.8271s x0.00 from start)
* Elements of w skipped: 0 (0.00%)
* Elements of w processed with special addition: 0 (0.00%)
* Elements of w remaining: 99 (100.00%)
(leave) Process scalar vector [0.0000s x1.02] (1713963786.8271s x0.00 from start)
(leave) Compute answer to A-query [0.0058s x1.00] (1713963786.8328s x0.00 from start)
(enter) Compute answer to B-query [ ] (1713963786.8329s x0.00 from start)
(enter) Process scalar vector [ ] (1713963786.8329s x0.00 from start)
* Elements of w skipped: 0 (0.00%)
* Elements of w processed with special addition: 0 (0.00%)
* Elements of w remaining: 99 (100.00%)
(leave) Process scalar vector [0.0000s x1.03] (1713963786.8329s x0.00 from start)
(leave) Compute answer to B-query [0.0156s x1.00] (1713963786.8485s x0.00 from start)
(enter) Compute answer to C-query [ ] (1713963786.8485s x0.00 from start)
(enter) Process scalar vector [ ] (1713963786.8485s x0.00 from start)
* Elements of w skipped: 0 (0.00%)
* Elements of w processed with special addition: 0 (0.00%)
* Elements of w remaining: 99 (100.00%)
(leave) Process scalar vector [0.0000s x1.02] (1713963786.8486s x0.00 from start)
(leave) Compute answer to C-query [0.0056s x1.00] (1713963786.8542s x0.00 from start)
(enter) Compute answer to H-query [ ] (1713963786.8544s x0.00 from start)
(leave) Compute answer to H-query [0.0071s x1.00] (1713963786.8615s x0.00 from start)
(enter) Compute answer to K-query [ ] (1713963786.8615s x0.00 from start)
(enter) Process scalar vector [ ] (1713963786.8615s x0.00 from start)
* Elements of w skipped: 0 (0.00%)
* Elements of w processed with special addition: 0 (0.00%)
* Elements of w remaining: 297 (100.00%)
(leave) Process scalar vector [0.0000s x1.01] (1713963786.8616s x0.00 from start)
(leave) Compute answer to K-query [0.0072s x1.00] (1713963786.8687s x0.00 from start)
(leave) Compute the proof [0.0417s x1.00] (1713963786.8687s x0.00 from start)
(leave) Call to r1cs_ppzksnark_prover [0.0443s x1.00] (1713963786.8687s x0.00 from start)
* G1 elements in proof: 7
* G2 elements in proof: 1
* Proof size in bits: 2294
* Peak vsize (physical memory+swap) in mebibytes (after prover): 11
================================================================================
R1CS ppzkSNARK Verifier
================================================================================
(enter) Call to r1cs_ppzksnark_verifier_strong_IC [ ] (1713963786.8688s x0.00 from start)
(enter) Call to r1cs_ppzksnark_verifier_process_vk [ ] (1713963786.8688s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8688s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8691s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8691s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8693s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8693s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8693s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8693s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8696s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8696s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8698s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8698s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8700s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8700s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.03] (1713963786.8700s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8700s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8703s x0.00 from start)
(leave) Call to r1cs_ppzksnark_verifier_process_vk [0.0015s x0.98] (1713963786.8703s x0.00 from start)
(enter) Call to r1cs_ppzksnark_online_verifier_strong_IC [ ] (1713963786.8703s x0.00 from start)
(enter) Call to r1cs_ppzksnark_online_verifier_weak_IC [ ] (1713963786.8703s x0.00 from start)
(enter) Compute input-dependent part of A [ ] (1713963786.8703s x0.00 from start)
(leave) Compute input-dependent part of A [0.0000s x0.92] (1713963786.8703s x0.00 from start)
(enter) Check if the proof is well-formed [ ] (1713963786.8703s x0.00 from start)
(leave) Check if the proof is well-formed [0.0000s x1.05] (1713963786.8704s x0.00 from start)
(enter) Online pairing computations [ ] (1713963786.8704s x0.00 from start)
(enter) Check knowledge commitment for A is valid [ ] (1713963786.8704s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8704s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.04] (1713963786.8704s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8704s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.03] (1713963786.8704s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8704s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0005s x1.00] (1713963786.8709s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8709s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8715s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8715s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8715s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.02] (1713963786.8715s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8715s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8715s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8718s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8718s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8721s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8721s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8724s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8725s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0010s x1.00] (1713963786.8725s x0.00 from start)
(leave) Check knowledge commitment for A is valid [0.0022s x1.00] (1713963786.8725s x0.00 from start)
(enter) Check knowledge commitment for B is valid [ ] (1713963786.8725s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8725s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8728s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8728s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8728s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8728s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0005s x1.00] (1713963786.8733s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8733s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8739s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8739s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8739s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.02] (1713963786.8739s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8739s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8739s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8742s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8742s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8745s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8745s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8748s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8749s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0010s x1.00] (1713963786.8749s x0.00 from start)
(leave) Check knowledge commitment for B is valid [0.0023s x1.00] (1713963786.8749s x0.00 from start)
(enter) Check knowledge commitment for C is valid [ ] (1713963786.8749s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8749s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.06] (1713963786.8749s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8749s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8749s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8749s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0005s x1.00] (1713963786.8754s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8754s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8760s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8760s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8760s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.02] (1713963786.8761s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8761s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8761s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0004s x0.81] (1713963786.8765s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8765s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8768s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8768s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8771s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0011s x0.93] (1713963786.8771s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0011s x0.93] (1713963786.8771s x0.00 from start)
(leave) Check knowledge commitment for C is valid [0.0023s x0.97] (1713963786.8771s x0.00 from start)
(enter) Check QAP divisibility [ ] (1713963786.8771s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8771s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.04] (1713963786.8771s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8772s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8772s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8772s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8777s x0.00 from start)
(enter) Call to alt_bn128_ate_double_miller_loop [ ] (1713963786.8777s x0.00 from start)
(leave) Call to alt_bn128_ate_double_miller_loop [0.0008s x1.00] (1713963786.8786s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8786s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8786s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.01] (1713963786.8786s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8786s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8786s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8789s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8789s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8792s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8792s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8795s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8796s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0010s x1.00] (1713963786.8796s x0.00 from start)
(leave) Check QAP divisibility [0.0025s x1.00] (1713963786.8796s x0.00 from start)
(enter) Check same coefficients were used [ ] (1713963786.8796s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8796s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8796s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8796s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8796s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8796s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8802s x0.00 from start)
(enter) Call to alt_bn128_ate_double_miller_loop [ ] (1713963786.8802s x0.00 from start)
(leave) Call to alt_bn128_ate_double_miller_loop [0.0008s x1.00] (1713963786.8811s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8811s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8811s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.01] (1713963786.8811s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8811s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8811s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8814s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8814s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8818s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8818s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8821s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8821s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0010s x1.00] (1713963786.8821s x0.00 from start)
(leave) Check same coefficients were used [0.0025s x1.00] (1713963786.8821s x0.00 from start)
(leave) Online pairing computations [0.0118s x0.99] (1713963786.8821s x0.00 from start)
(leave) Call to r1cs_ppzksnark_online_verifier_weak_IC [0.0118s x0.99] (1713963786.8821s x0.00 from start)
(leave) Call to r1cs_ppzksnark_online_verifier_strong_IC [0.0119s x0.99] (1713963786.8821s x0.00 from start)
(leave) Call to r1cs_ppzksnark_verifier_strong_IC [0.0134s x0.99] (1713963786.8821s x0.00 from start)
* Peak vsize (physical memory+swap) in mebibytes (after verifier): 11
* The verification result is: PASS
================================================================================
R1CS ppzkSNARK Online Verifier
================================================================================
(enter) Call to r1cs_ppzksnark_online_verifier_strong_IC [ ] (1713963786.8822s x0.00 from start)
(enter) Call to r1cs_ppzksnark_online_verifier_weak_IC [ ] (1713963786.8822s x0.00 from start)
(enter) Compute input-dependent part of A [ ] (1713963786.8822s x0.00 from start)
(leave) Compute input-dependent part of A [0.0000s x1.02] (1713963786.8822s x0.00 from start)
(enter) Check if the proof is well-formed [ ] (1713963786.8822s x0.00 from start)
(leave) Check if the proof is well-formed [0.0000s x1.04] (1713963786.8822s x0.00 from start)
(enter) Online pairing computations [ ] (1713963786.8822s x0.00 from start)
(enter) Check knowledge commitment for A is valid [ ] (1713963786.8822s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8822s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.06] (1713963786.8822s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8822s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.02] (1713963786.8822s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8822s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8828s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8828s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8834s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8835s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8835s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.03] (1713963786.8835s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8835s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8835s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8838s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8839s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0004s x1.00] (1713963786.8842s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8842s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8845s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0011s x1.00] (1713963786.8846s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0011s x1.00] (1713963786.8846s x0.00 from start)
(leave) Check knowledge commitment for A is valid [0.0024s x1.00] (1713963786.8846s x0.00 from start)
(enter) Check knowledge commitment for B is valid [ ] (1713963786.8846s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G2 [ ] (1713963786.8846s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G2 [0.0002s x1.00] (1713963786.8848s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8849s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.05] (1713963786.8849s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8849s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8854s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8854s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8860s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8860s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8860s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.01] (1713963786.8861s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8861s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8861s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8864s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8864s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8867s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8867s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8870s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8870s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0010s x1.00] (1713963786.8870s x0.00 from start)
(leave) Check knowledge commitment for B is valid [0.0025s x1.00] (1713963786.8871s x0.00 from start)
(enter) Check knowledge commitment for C is valid [ ] (1713963786.8871s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8871s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.06] (1713963786.8871s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8871s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.04] (1713963786.8871s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8871s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8876s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8876s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x0.98] (1713963786.8883s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8883s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8883s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.01] (1713963786.8883s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8883s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8883s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0004s x1.01] (1713963786.8887s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8888s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0006s x1.00] (1713963786.8894s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8894s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8898s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0015s x1.00] (1713963786.8898s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0016s x1.00] (1713963786.8899s x0.00 from start)
(leave) Check knowledge commitment for C is valid [0.0028s x1.00] (1713963786.8899s x0.00 from start)
(enter) Check QAP divisibility [ ] (1713963786.8899s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8899s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.06] (1713963786.8899s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8899s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.01] (1713963786.8899s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8899s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8905s x0.00 from start)
(enter) Call to alt_bn128_ate_double_miller_loop [ ] (1713963786.8905s x0.00 from start)
(leave) Call to alt_bn128_ate_double_miller_loop [0.0009s x1.00] (1713963786.8914s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8914s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8915s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.02] (1713963786.8915s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8915s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8915s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8918s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8918s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8921s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8921s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8925s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8925s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0011s x1.00] (1713963786.8925s x0.00 from start)
(leave) Check QAP divisibility [0.0027s x1.00] (1713963786.8925s x0.00 from start)
(enter) Check same coefficients were used [ ] (1713963786.8925s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8925s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.07] (1713963786.8925s x0.00 from start)
(enter) Call to alt_bn128_ate_precompute_G1 [ ] (1713963786.8925s x0.00 from start)
(leave) Call to alt_bn128_ate_precompute_G1 [0.0000s x1.07] (1713963786.8926s x0.00 from start)
(enter) Call to alt_bn128_ate_miller_loop [ ] (1713963786.8926s x0.00 from start)
(leave) Call to alt_bn128_ate_miller_loop [0.0006s x1.00] (1713963786.8931s x0.00 from start)
(enter) Call to alt_bn128_ate_double_miller_loop [ ] (1713963786.8931s x0.00 from start)
(leave) Call to alt_bn128_ate_double_miller_loop [0.0009s x1.00] (1713963786.8940s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation [ ] (1713963786.8941s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_first_chunk [ ] (1713963786.8941s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_first_chunk [0.0000s x1.02] (1713963786.8941s x0.00 from start)
(enter) Call to alt_bn128_final_exponentiation_last_chunk [ ] (1713963786.8941s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8941s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8944s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8945s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8948s x0.00 from start)
(enter) Call to alt_bn128_exp_by_neg_z [ ] (1713963786.8948s x0.00 from start)
(leave) Call to alt_bn128_exp_by_neg_z [0.0003s x1.00] (1713963786.8951s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation_last_chunk [0.0010s x1.00] (1713963786.8951s x0.00 from start)
(leave) Call to alt_bn128_final_exponentiation [0.0011s x1.00] (1713963786.8951s x0.00 from start)
(leave) Check same coefficients were used [0.0026s x1.00] (1713963786.8951s x0.00 from start)
(leave) Online pairing computations [0.0129s x1.00] (1713963786.8951s x0.00 from start)
(leave) Call to r1cs_ppzksnark_online_verifier_weak_IC [0.0129s x1.00] (1713963786.8951s x0.00 from start)
(leave) Call to r1cs_ppzksnark_online_verifier_strong_IC [0.0130s x1.00] (1713963786.8952s x0.00 from start)
================================================================================
R1CS ppzkSNARK Affine Verifier
================================================================================
Affine verifier is not supported; not testing anything.
(leave) Call to run_r1cs_ppzksnark [0.1221s x1.00] (1713963786.8952s x0.00 from start)
[ OK ] gadgetLib1.Integration (126 ms)
[----------] 1 test from gadgetLib1 (126 ms total)
[----------] Global test environment tear-down
[==========] 1 test from 1 test case ran. (126 ms total)
[ PASSED ] 1 test.