verifier.go

//go:build !mock_verifier

package verifier

import (
	"encoding/base64"
	"encoding/json"
	"fmt"
	"io"
	"os"
	"path"
	"path/filepath"
	"strings"

	"github.com/scroll-tech/go-ethereum/log"

	"scroll-tech/common/types/message"

	"scroll-tech/coordinator/internal/config"
	"scroll-tech/coordinator/internal/logic/libzkp"
)

// This struct maps to `CircuitConfig` in libzkp/src/verifier.rs
// Define a brand new struct here is to eliminate side effects in case fields
// in `*config.CircuitConfig` being changed
type rustCircuitConfig struct {
	ForkName   string `json:"fork_name"`
	AssetsPath string `json:"assets_path"`
}

func newRustCircuitConfig(cfg config.AssetConfig) *rustCircuitConfig {
	return &rustCircuitConfig{
		ForkName:   cfg.ForkName,
		AssetsPath: cfg.AssetsPath,
	}
}

// This struct maps to `VerifierConfig` in coordinator/internal/logic/libzkp/src/verifier.rs
// Define a brand new struct here is to eliminate side effects in case fields
// in `*config.VerifierConfig` being changed
type rustVerifierConfig struct {
	Circuits []*rustCircuitConfig `json:"circuits"`
}

func newRustVerifierConfig(cfg *config.VerifierConfig) *rustVerifierConfig {

	out := &rustVerifierConfig{}

	for _, cfg := range cfg.Verifiers {
		out.Circuits = append(out.Circuits, newRustCircuitConfig(cfg))
	}
	return out
}

type rustVkDump struct {
	Chunk  string `json:"chunk_vk"`
	Batch  string `json:"batch_vk"`
	Bundle string `json:"bundle_vk"`
}

// NewVerifier Sets up a rust ffi to call verify.
func NewVerifier(cfg *config.VerifierConfig) (*Verifier, error) {
	verifierConfig := newRustVerifierConfig(cfg)
	configBytes, err := json.Marshal(verifierConfig)
	if err != nil {
		return nil, err
	}

	libzkp.InitVerifier(string(configBytes))

	v := &Verifier{
		cfg:         cfg,
		OpenVMVkMap: make(map[string]struct{}),
		ChunkVk:     make(map[string][]byte),
		BatchVk:     make(map[string][]byte),
		BundleVk:    make(map[string][]byte),
	}

	for _, cfg := range cfg.Verifiers {
		if err := v.loadOpenVMVks(cfg); err != nil {
			return nil, err
		}
	}

	return v, nil
}

// VerifyBatchProof Verify a ZkProof by marshaling it and sending it to the Verifier.
func (v *Verifier) VerifyBatchProof(proof *message.OpenVMBatchProof, forkName string) (bool, error) {
	buf, err := json.Marshal(proof)
	if err != nil {
		return false, err
	}

	log.Info("Start to verify batch proof", "forkName", forkName)
	return libzkp.VerifyBatchProof(string(buf), forkName), nil
}

// VerifyChunkProof Verify a ZkProof by marshaling it and sending it to the Verifier.
func (v *Verifier) VerifyChunkProof(proof *message.OpenVMChunkProof, forkName string) (bool, error) {
	buf, err := json.Marshal(proof)
	if err != nil {
		return false, err
	}

	log.Info("Start to verify chunk proof", "forkName", forkName)

	return libzkp.VerifyChunkProof(string(buf), forkName), nil
}

// VerifyBundleProof Verify a ZkProof for a bundle of batches, by marshaling it and verifying it via the EVM verifier.
func (v *Verifier) VerifyBundleProof(proof *message.OpenVMBundleProof, forkName string) (bool, error) {
	buf, err := json.Marshal(proof)
	if err != nil {
		return false, err
	}

	log.Info("Start to verify bundle proof ...")
	return libzkp.VerifyBundleProof(string(buf), forkName), nil
}

/*
add vk of imcompatilbe circuit app here to avoid we had used them unexpectedly
25/07/15: 0.5.0rc0 is no longer compatible since a breaking change
*/
const blocked_vks = `
	rSJNNBpsxBdKlstbIIU/aYc7bHau98Qb2yjZMc5PmDhmGOolp5kYRbvF/VcWcO5HN5ujGs6S00W8pZcCoNQRLQ==,
	2Lo7Cebm6SFtcsYXipkcMxIBmVY7UpoMXik/Msm7t2nyvi9EaNGsSnDnaCurscYEF+IcdjPUtVtY9EcD7IKwWg==,
	D6YFHwTLZF/U2zpYJPQ3LwJZRm85yA5Vq2iFBqd3Mk4iwOUpS8sbOp3vg2+NDxhhKphgYpuUlykpdsoRhEt+cw==,
`

func (v *Verifier) loadOpenVMVks(cfg config.AssetConfig) error {

	vkFileName := cfg.Vkfile
	if vkFileName == "" {
		vkFileName = "openVmVk.json"
	}
	vkFile := path.Join(cfg.AssetsPath, vkFileName)

	f, err := os.Open(filepath.Clean(vkFile))
	if err != nil {
		return err
	}
	byt, err := io.ReadAll(f)
	if err != nil {
		return err
	}

	var dump rustVkDump
	if err := json.Unmarshal(byt, &dump); err != nil {
		return err
	}
	if strings.Contains(blocked_vks, dump.Chunk) {
		return fmt.Errorf("loaded blocked chunk vk %s", dump.Chunk)
	}
	if strings.Contains(blocked_vks, dump.Batch) {
		return fmt.Errorf("loaded blocked batch vk %s", dump.Batch)
	}
	if strings.Contains(blocked_vks, dump.Bundle) {
		return fmt.Errorf("loaded blocked bundle vk %s", dump.Bundle)
	}

	v.OpenVMVkMap[dump.Chunk] = struct{}{}
	v.OpenVMVkMap[dump.Batch] = struct{}{}
	v.OpenVMVkMap[dump.Bundle] = struct{}{}
	log.Info("Load vks", "from", cfg.AssetsPath, "chunk", dump.Chunk, "batch", dump.Batch, "bundle", dump.Bundle)

	decodedBytes, err := base64.StdEncoding.DecodeString(dump.Chunk)
	if err != nil {
		return err
	}
	v.ChunkVk[cfg.ForkName] = decodedBytes
	decodedBytes, err = base64.StdEncoding.DecodeString(dump.Batch)
	if err != nil {
		return err
	}
	v.BatchVk[cfg.ForkName] = decodedBytes
	decodedBytes, err = base64.StdEncoding.DecodeString(dump.Bundle)
	if err != nil {
		return err
	}
	v.BundleVk[cfg.ForkName] = decodedBytes

	return nil
}