Verifier for Chonk IVC proofs (both native and recursive). More...

#include <chonk_verifier.hpp>

Classes
struct	IPAReductionResult
	Result of reducing Chonk verification to an IPA opening claim (native mode only). More...

struct	ReductionResult
	Result of Chonk verification reduction (recursive mode only) More...

Public Types
using	Output = std::conditional_t< IsRecursive, ReductionResult, bool >

using	VKAndHash = typename HidingKernelVerifier::VKAndHash

using	VK = typename HidingKernelVerifier::VerificationKey

using	Commitment = typename HidingKernelVerifier::Commitment

using	Proof = std::conditional_t< IsRecursive, ChonkStdlibProof, ChonkProof >

Public Member Functions
	ChonkVerifier (const std::shared_ptr< VKAndHash > &vk_and_hash)

Output	verify (const Proof &proof)
	Verify a Chonk proof.

IPAReductionResult	reduce_to_ipa_claim (const Proof &proof)
	Run Chonk verification up to but not including IPA, returning the IPA claim for deferred verification.

ChonkVerifier< false >::IPAReductionResult	reduce_to_ipa_claim (const Proof &proof)
	Run all Chonk verification except IPA, returning the IPA data for deferred verification.

ChonkVerifier< false >::Output	verify (const Proof &proof)
	Verifies a Chonk IVC proof (Native specialization).

ChonkVerifier< true >::Output	verify (const Proof &proof)
	Verifies a Chonk IVC proof in-circuit.

ChonkVerifier< true >::IPAReductionResult	reduce_to_ipa_claim (const Proof &proof)
	Stub for recursive mode (not meaningful — reduce_to_ipa_claim is only used in native batch verification).

Private Types
using	Builder = std::conditional_t< IsRecursive, UltraCircuitBuilder, void >

using	HidingKernelVerifier = std::conditional_t< IsRecursive, bb::MegaZKRecursiveVerifier, bb::MegaZKVerifier >

using	GoblinVerifier = std::conditional_t< IsRecursive, bb::GoblinRecursiveVerifier, bb::GoblinVerifier >

using	Transcript = typename GoblinVerifier::Transcript

using	GoblinReductionResult = typename GoblinVerifier::ReductionResult

using	HidingKernelIO = std::conditional_t< IsRecursive, stdlib::recursion::honk::HidingKernelIO< Builder >, bb::HidingKernelIO >

using	PairingPoints = typename GoblinVerifier::ReductionResult::PairingPoints

using	IPAClaim = typename GoblinVerifier::ReductionResult::IPAClaim

using	IPAProof = typename GoblinVerifier::ReductionResult::IPAProof

using	MergeCommitments = typename GoblinVerifier::MergeVerifier::InputCommitments

Private Attributes
std::shared_ptr< VKAndHash >	vk_and_hash

std::shared_ptr< Transcript >	transcript

Static Private Attributes
static constexpr size_t	NUM_PAIRING_POINTS = 4

Detailed Description

template<bool IsRecursive>
class bb::ChonkVerifier< IsRecursive >

Verifier for Chonk IVC proofs (both native and recursive).

Consists of:

MegaZK proof of the hiding kernel
Goblin proof (Merge + ECCVM + Translator) - note: IPA is NOT verified here in recursive mode

The hiding kernel proof is verified first to extract ECC op queue commitments, which are then used as inputs to Goblin verification. Databus consistency is checked between the kernel's return data and calldata commitments.

In recursive mode: Returns an Output containing deferred verification data: pairing points (BN254) and an IPA claim (Grumpkin). Pairing points are aggregated at each rollup level and verified on L1. IPA claims are carried in RollupIO through rollup levels, accumulated via IPA::accumulate, and verified in-circuit at root rollup via IPA::full_verify_recursive.

In native mode: Performs all verification including pairing check and IPA verification, returns bool.

Recursive mode uses Ultra arithmetization, as all ECC ops have to be performed in-circuit.

Definition at line 43 of file chonk_verifier.hpp.

Member Typedef Documentation

◆ Builder

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::Builder = std::conditional_t<IsRecursive, UltraCircuitBuilder, void>

private

Definition at line 45 of file chonk_verifier.hpp.

◆ Commitment

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::Commitment = typename HidingKernelVerifier::Commitment

Definition at line 75 of file chonk_verifier.hpp.

◆ GoblinReductionResult

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::GoblinReductionResult = typename GoblinVerifier::ReductionResult

private

Definition at line 49 of file chonk_verifier.hpp.

◆ GoblinVerifier

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::GoblinVerifier = std::conditional_t<IsRecursive, bb::GoblinRecursiveVerifier, bb::GoblinVerifier>

private

Definition at line 47 of file chonk_verifier.hpp.

◆ HidingKernelIO

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::HidingKernelIO = std::conditional_t<IsRecursive, stdlib::recursion::honk::HidingKernelIO<Builder>, bb::HidingKernelIO>

private

Definition at line 50 of file chonk_verifier.hpp.

◆ HidingKernelVerifier

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::HidingKernelVerifier = std::conditional_t<IsRecursive, bb::MegaZKRecursiveVerifier, bb::MegaZKVerifier>

private

Definition at line 46 of file chonk_verifier.hpp.

◆ IPAClaim

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::IPAClaim = typename GoblinVerifier::ReductionResult::IPAClaim

private

Definition at line 53 of file chonk_verifier.hpp.

◆ IPAProof

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::IPAProof = typename GoblinVerifier::ReductionResult::IPAProof

private

Definition at line 54 of file chonk_verifier.hpp.

◆ MergeCommitments

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::MergeCommitments = typename GoblinVerifier::MergeVerifier::InputCommitments

private

Definition at line 55 of file chonk_verifier.hpp.

◆ Output

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::Output = std::conditional_t<IsRecursive, ReductionResult, bool>

Definition at line 72 of file chonk_verifier.hpp.

◆ PairingPoints

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::PairingPoints = typename GoblinVerifier::ReductionResult::PairingPoints

private

Definition at line 52 of file chonk_verifier.hpp.

◆ Proof

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::Proof = std::conditional_t<IsRecursive, ChonkStdlibProof, ChonkProof>

Definition at line 76 of file chonk_verifier.hpp.

◆ Transcript

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::Transcript = typename GoblinVerifier::Transcript

private

Definition at line 48 of file chonk_verifier.hpp.

◆ VK

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::VK = typename HidingKernelVerifier::VerificationKey

Definition at line 74 of file chonk_verifier.hpp.

◆ VKAndHash

template<bool IsRecursive>

using bb::ChonkVerifier< IsRecursive >::VKAndHash = typename HidingKernelVerifier::VKAndHash

Definition at line 73 of file chonk_verifier.hpp.

Constructor & Destructor Documentation

◆ ChonkVerifier()

template<bool IsRecursive>

bb::ChonkVerifier< IsRecursive >::ChonkVerifier ( const std::shared_ptr< VKAndHash > & vk_and_hash )

inline

Definition at line 78 of file chonk_verifier.hpp.

Member Function Documentation

◆ reduce_to_ipa_claim() [1/3]

ChonkVerifier< false >::IPAReductionResult bb::ChonkVerifier< false >::reduce_to_ipa_claim ( const Proof & proof )

Run all Chonk verification except IPA, returning the IPA data for deferred verification.

Definition at line 17 of file chonk_verifier.cpp.

◆ reduce_to_ipa_claim() [2/3]

ChonkVerifier< true >::IPAReductionResult bb::ChonkVerifier< true >::reduce_to_ipa_claim ( const Proof & proof )

Stub for recursive mode (not meaningful — reduce_to_ipa_claim is only used in native batch verification).

Definition at line 136 of file chonk_verifier.cpp.

◆ reduce_to_ipa_claim() [3/3]

template<bool IsRecursive>

IPAReductionResult bb::ChonkVerifier< IsRecursive >::reduce_to_ipa_claim ( const Proof & proof )

Run Chonk verification up to but not including IPA, returning the IPA claim for deferred verification.

Verifies the MegaZK proof, databus consistency, and Goblin proof (merge/eccvm/translator), then returns the IPA opening claim and proof without performing the final IPA MSM. This enables batch IPA verification across multiple Chonk proofs.

Parameters

proof The Chonk proof to partially verify

Returns: IPAReductionResult containing the IPA claim/proof and whether all non-IPA checks passed

◆ verify() [1/3]

ChonkVerifier< false >::Output bb::ChonkVerifier< false >::verify ( const Proof & proof )

Verifies a Chonk IVC proof (Native specialization).

Definition at line 59 of file chonk_verifier.cpp.

◆ verify() [2/3]

ChonkVerifier< true >::Output bb::ChonkVerifier< true >::verify ( const Proof & proof )

Verifies a Chonk IVC proof in-circuit.

Definition at line 83 of file chonk_verifier.cpp.

◆ verify() [3/3]

template<bool IsRecursive>

Output bb::ChonkVerifier< IsRecursive >::verify ( const Proof & proof )

Verify a Chonk proof.

Recursive mode (IsRecursive=true): Creates circuit constraints that verify:

MegaZK proof of the hiding kernel
Databus consistency (kernel return data == calldata)
Goblin proof (Merge + ECCVM + Translator) - reduces to pairing points and IPA claim Returns Output (GoblinVerifier::ReductionResult) containing pairing points and IPA claim for deferred verification. Both pairing verification and IPA verification are deferred.

Native mode (IsRecursive=false): Performs full verification including:

MegaZK proof of the hiding kernel
Databus consistency (kernel return data == calldata)
Goblin proof (Merge + ECCVM + Translator) with immediate pairing check
IPA verification Returns bool indicating whether verification succeeded.

Parameters

proof Chonk proof (ChonkStdlibProof for recursive, ChonkProof for native mode)

Returns: Output (ReductionResult for recursive, bool for native)

Member Data Documentation

◆ NUM_PAIRING_POINTS

template<bool IsRecursive>

constexpr size_t bb::ChonkVerifier< IsRecursive >::NUM_PAIRING_POINTS = 4

staticconstexprprivate

Definition at line 58 of file chonk_verifier.hpp.

◆ transcript

template<bool IsRecursive>

std::shared_ptr<Transcript> bb::ChonkVerifier< IsRecursive >::transcript

private

Definition at line 133 of file chonk_verifier.hpp.

◆ vk_and_hash

template<bool IsRecursive>

std::shared_ptr<VKAndHash> bb::ChonkVerifier< IsRecursive >::vk_and_hash

private

Definition at line 131 of file chonk_verifier.hpp.

The documentation for this class was generated from the following file:

src/barretenberg/chonk/chonk_verifier.hpp

Classes

Public Types

Public Member Functions

Private Types

Private Attributes

Static Private Attributes

Detailed Description

Member Typedef Documentation

◆ Builder

◆ Commitment

◆ GoblinReductionResult

◆ GoblinVerifier

◆ HidingKernelIO

◆ HidingKernelVerifier

◆ IPAClaim

◆ IPAProof

◆ MergeCommitments

◆ Output

◆ PairingPoints

◆ Proof

◆ Transcript

◆ VK

◆ VKAndHash

Constructor & Destructor Documentation

◆ ChonkVerifier()

Member Function Documentation

◆ reduce_to_ipa_claim() [1/3]

◆ reduce_to_ipa_claim() [2/3]

◆ reduce_to_ipa_claim() [3/3]

◆ verify() [1/3]

◆ verify() [2/3]

◆ verify() [3/3]

Member Data Documentation

◆ NUM_PAIRING_POINTS

◆ transcript

◆ vk_and_hash