Multi-Scalar-Multiplication / Linear combination

benchmarks/bench_ec_g1.nim

@@ -12,7 +12,8 @@ import
   ../constantine/math/arithmetic,
   ../constantine/math/elliptic/[
     ec_shortweierstrass_projective,
-    ec_shortweierstrass_jacobian],
+    ec_shortweierstrass_jacobian,
+    ec_shortweierstrass_jacobian_extended],
   # Helpers
   ./bench_elliptic_template
 
@@ -46,33 +47,32 @@ proc main() =
     const curve = AvailableCurves[i]
     addBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
     addBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
+    addBench(ECP_ShortW_JacExt[Fp[curve], G1], Iters)
     mixedAddBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
     mixedAddBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
+    mixedAddBench(ECP_ShortW_JacExt[Fp[curve], G1], Iters)
     doublingBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
     doublingBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
+    doublingBench(ECP_ShortW_JacExt[Fp[curve], G1], Iters)
     separator()
     affFromProjBench(ECP_ShortW_Prj[Fp[curve], G1], MulIters)
     affFromJacBench(ECP_ShortW_Jac[Fp[curve], G1], MulIters)
     separator()
-    scalarMulUnsafeDoubleAddBench(ECP_ShortW_Prj[Fp[curve], G1], MulIters)
-    scalarMulUnsafeDoubleAddBench(ECP_ShortW_Jac[Fp[curve], G1], MulIters)
+    for numPoints in [10, 100, 1000, 10000]:
+      let batchIters = max(1, Iters div numPoints)
+      affFromProjBatchBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, useBatching = false, batchIters)
     separator()
-    scalarMulUnsafeMinHammingWeightRecodingBench(ECP_ShortW_Prj[Fp[curve], G1], MulIters)
-    scalarMulUnsafeMinHammingWeightRecodingBench(ECP_ShortW_Jac[Fp[curve], G1], MulIters)
+    for numPoints in [10, 100, 1000, 10000]:
+      let batchIters = max(1, Iters div numPoints)
+      affFromProjBatchBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, useBatching = true, batchIters)
     separator()
-    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], window = 2, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], window = 3, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], window = 4, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], window = 5, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], window = 2, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], window = 3, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], window = 4, MulIters)
-    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], window = 5, MulIters)
+    for numPoints in [10, 100, 1000, 10000]:
+      let batchIters = max(1, Iters div numPoints)
+      affFromJacBatchBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, useBatching = false, batchIters)
     separator()
-    scalarMulEndo(ECP_ShortW_Prj[Fp[curve], G1], MulIters)
-    scalarMulEndoWindow(ECP_ShortW_Prj[Fp[curve], G1], MulIters)
-    scalarMulEndo(ECP_ShortW_Jac[Fp[curve], G1], MulIters)
-    scalarMulEndoWindow(ECP_ShortW_Jac[Fp[curve], G1], MulIters)
+    for numPoints in [10, 100, 1000, 10000]:
+      let batchIters = max(1, Iters div numPoints)
+      affFromJacBatchBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, useBatching = true, batchIters)
     separator()
     separator()
 

benchmarks/bench_ec_g1_batch.nim

@@ -14,6 +14,7 @@ import
     ec_shortweierstrass_affine,
     ec_shortweierstrass_projective,
     ec_shortweierstrass_jacobian,
+    ec_shortweierstrass_jacobian_extended,
     ec_shortweierstrass_batch_ops_parallel],
   ../constantine/platforms/threadpool/threadpool,
   # Helpers
@@ -38,7 +39,7 @@ proc multiAddParallelBench*(EC: typedesc, numPoints: int, iters: int) =
   var tp = Threadpool.new()
 
   bench("EC parallel batch add  (" & align($tp.numThreads, 2) & " threads)   " & $EC.G & " (" & $numPoints & " points)", EC, iters):
-    tp.sum_batch_vartime_parallel(r, points)
+    tp.sum_reduce_vartime_parallel(r, points)
 
   tp.shutdown()
 
@@ -57,41 +58,55 @@ const AvailableCurves = [
   BLS12_381,
 ]
 
+# const testNumPoints = [10, 100, 1000, 10000, 100000]
+const testNumPoints = [4, 8, 16, 32, 64, 128, 256, 512, 1024, 2048, 4096, 8192, 65536, 131072]
+
 proc main() =
   separator()
   staticFor i, 0, AvailableCurves.len:
     const curve = AvailableCurves[i]
     addBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
-    addBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
-    mixedAddBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
-    mixedAddBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
     doublingBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
+    mixedAddBench(ECP_ShortW_Prj[Fp[curve], G1], Iters)
+    addBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
     doublingBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
+    mixedAddBench(ECP_ShortW_Jac[Fp[curve], G1], Iters)
+    addBench(ECP_ShortW_JacExt[Fp[curve], G1], Iters)
+    doublingBench(ECP_ShortW_JacExt[Fp[curve], G1], Iters)
+    mixedAddBench(ECP_ShortW_JacExt[Fp[curve], G1], Iters)
     separator()
-    for numPoints in [10, 100, 1000, 10000, 100000, 1000000]:
+    for numPoints in testNumPoints:
       let batchIters = max(1, Iters div numPoints)
       multiAddBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, useBatching = false, batchIters)
     separator()
-    for numPoints in [10, 100, 1000, 10000, 100000, 1000000]:
+    for numPoints in testNumPoints:
       let batchIters = max(1, Iters div numPoints)
       multiAddBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, useBatching = true, batchIters)
     separator()
-    for numPoints in [10, 100, 1000, 10000, 100000, 1000000]:
+    for numPoints in testNumPoints:
       let batchIters = max(1, Iters div numPoints)
       multiAddParallelBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, batchIters)
     separator()
-    for numPoints in [10, 100, 1000, 10000, 100000, 1000000]:
+    for numPoints in testNumPoints:
       let batchIters = max(1, Iters div numPoints)
       multiAddBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, useBatching = false, batchIters)
     separator()
-    for numPoints in [10, 100, 1000, 10000, 100000, 1000000]:
+    for numPoints in testNumPoints:
       let batchIters = max(1, Iters div numPoints)
       multiAddBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, useBatching = true, batchIters)
     separator()
-    for numPoints in [10, 100, 1000, 10000, 100000, 1000000]:
+    for numPoints in testNumPoints:
       let batchIters = max(1, Iters div numPoints)
       multiAddParallelBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, batchIters)
     separator()
+    for numPoints in testNumPoints:
+      let batchIters = max(1, Iters div numPoints)
+      multiAddBench(ECP_ShortW_JacExt[Fp[curve], G1], numPoints, useBatching = false, batchIters)
+    separator()
+    for numPoints in testNumPoints:
+      let batchIters = max(1, Iters div numPoints)
+      multiAddBench(ECP_ShortW_JacExt[Fp[curve], G1], numPoints, useBatching = true, batchIters)
+    separator()
     separator()
 
 main()

benchmarks/bench_ec_g1_msm_bls12_381.nim

@@ -0,0 +1,60 @@
+# Constantine
+# Copyright (c) 2018-2019    Status Research & Development GmbH
+# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
+# Licensed and distributed under either of
+#   * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
+#   * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
+# at your option. This file may not be copied, modified, or distributed except according to those terms.
+
+import
+  # Internals
+  ../constantine/math/config/curves,
+  ../constantine/math/arithmetic,
+  ../constantine/math/elliptic/[
+    ec_shortweierstrass_affine,
+    ec_shortweierstrass_projective,
+    ec_shortweierstrass_jacobian,
+    ec_scalar_mul,
+    ec_multi_scalar_mul],
+  ../constantine/math/constants/zoo_subgroups,
+  # Helpers
+  ../helpers/prng_unsafe,
+  ./bench_elliptic_template,
+  ./bench_blueprint
+
+# ############################################################
+#
+#               Benchmark of the G1 group of
+#            Short Weierstrass elliptic curves
+#          in (homogeneous) projective coordinates
+#
+# ############################################################
+
+
+const Iters = 10_000
+const AvailableCurves = [
+  BLS12_381,
+]
+
+# const testNumPoints = [10, 100, 1000, 10000, 100000]
+const testNumPoints = [8, 16, 32, 64, 128, 256, 512, 1024, 2048, 4096, 8192,
+                       16384, 32768, 65536, 131072, 262144]
+
+proc main() =
+  separator()
+  staticFor i, 0, AvailableCurves.len:
+    const curve = AvailableCurves[i]
+    separator()
+    # for numPoints in testNumPoints:
+    #   let batchIters = max(1, Iters div numPoints)
+    #   msmBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, batchIters)
+    #   separator()
+    # separator()
+    for numPoints in testNumPoints:
+      let batchIters = max(1, Iters div numPoints)
+      msmBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, batchIters)
+      separator()
+    separator()
+
+main()
+notes()

benchmarks/bench_ec_g1_msm_bn254_snarks.nim

@@ -0,0 +1,59 @@
+# Constantine
+# Copyright (c) 2018-2019    Status Research & Development GmbH
+# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
+# Licensed and distributed under either of
+#   * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
+#   * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
+# at your option. This file may not be copied, modified, or distributed except according to those terms.
+
+import
+  # Internals
+  ../constantine/math/config/curves,
+  ../constantine/math/arithmetic,
+  ../constantine/math/elliptic/[
+    ec_shortweierstrass_affine,
+    ec_shortweierstrass_projective,
+    ec_shortweierstrass_jacobian,
+    ec_scalar_mul,
+    ec_multi_scalar_mul],
+  ../constantine/math/constants/zoo_subgroups,
+  # Helpers
+  ../helpers/prng_unsafe,
+  ./bench_elliptic_template,
+  ./bench_blueprint
+
+# ############################################################
+#
+#               Benchmark of the G1 group of
+#            Short Weierstrass elliptic curves
+#          in (homogeneous) projective coordinates
+#
+# ############################################################
+
+
+const Iters = 10_000
+const AvailableCurves = [
+  BN254_Snarks,
+]
+
+const testNumPoints = [10, 100, 1000, 10000, 100000]
+# const testNumPoints = [64, 128, 256, 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536, 131072]
+
+proc main() =
+  separator()
+  staticFor i, 0, AvailableCurves.len:
+    const curve = AvailableCurves[i]
+    separator()
+    # for numPoints in testNumPoints:
+    #   let batchIters = max(1, Iters div numPoints)
+    #   msmBench(ECP_ShortW_Prj[Fp[curve], G1], numPoints, batchIters)
+    #   separator()
+    # separator()
+    for numPoints in testNumPoints:
+      let batchIters = max(1, Iters div numPoints)
+      msmBench(ECP_ShortW_Jac[Fp[curve], G1], numPoints, batchIters)
+      separator()
+    separator()
+
+main()
+notes()

benchmarks/bench_ec_g1_scalar_mul.nim

@@ -0,0 +1,81 @@
+# Constantine
+# Copyright (c) 2018-2019    Status Research & Development GmbH
+# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
+# Licensed and distributed under either of
+#   * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
+#   * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
+# at your option. This file may not be copied, modified, or distributed except according to those terms.
+
+import
+  # Internals
+  ../constantine/math/config/curves,
+  ../constantine/math/arithmetic,
+  ../constantine/math/elliptic/[
+    ec_shortweierstrass_projective,
+    ec_shortweierstrass_jacobian],
+  # Helpers
+  ./bench_elliptic_template
+
+# ############################################################
+#
+#               Benchmark of the G1 group of
+#            Short Weierstrass elliptic curves
+#          in (homogeneous) projective coordinates
+#
+# ############################################################
+
+
+const Iters = 10_000
+const MulIters = 100
+const AvailableCurves = [
+  # P224,
+  BN254_Nogami,
+  BN254_Snarks,
+  # Edwards25519,
+  # P256,
+  # Secp256k1,
+  Pallas,
+  Vesta,
+  BLS12_377,
+  BLS12_381,
+]
+
+proc main() =
+  separator()
+  staticFor i, 0, AvailableCurves.len:
+    const curve = AvailableCurves[i]
+    const bits = 64 # curve.getCurveOrderBitwidth()
+    scalarMulUnsafeDoubleAddBench(ECP_ShortW_Prj[Fp[curve], G1], bits, MulIters)
+    scalarMulUnsafeDoubleAddBench(ECP_ShortW_Jac[Fp[curve], G1], bits, MulIters)
+    separator()
+    scalarMulUnsafeMinHammingWeightRecodingBench(ECP_ShortW_Prj[Fp[curve], G1], bits, MulIters)
+    scalarMulUnsafeMinHammingWeightRecodingBench(ECP_ShortW_Jac[Fp[curve], G1], bits, MulIters)
+    separator()
+    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 2, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 3, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 4, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 5, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 2, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 3, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 4, MulIters)
+    scalarMulGenericBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 5, MulIters)
+    separator()
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 2, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 3, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 4, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Prj[Fp[curve], G1], bits, window = 5, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 2, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 3, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 4, MulIters)
+    scalarMulUnsafeWNAFBench(ECP_ShortW_Jac[Fp[curve], G1], bits, window = 5, MulIters)
+    separator()
+    when bits >= 196: # All endomorphisms constants are below this threshold
+      scalarMulEndo(      ECP_ShortW_Prj[Fp[curve], G1], bits, MulIters)
+      scalarMulEndoWindow(ECP_ShortW_Prj[Fp[curve], G1], bits, MulIters)
+      scalarMulEndo(      ECP_ShortW_Jac[Fp[curve], G1], bits, MulIters)
+      scalarMulEndoWindow(ECP_ShortW_Jac[Fp[curve], G1], bits, MulIters)
+      separator()
+    separator()
+
+main()
+notes()