Struct FriParameters

pub struct FriParameters {
    pub log_blowup: usize,
    pub log_final_poly_len: usize,
    pub num_queries: usize,
    pub query_proof_of_work_bits: usize,
    pub commit_proof_of_work_bits: usize,
}

Fields

log_blowup: usize

log_final_poly_len: usize

num_queries: usize

query_proof_of_work_bits: usize

commit_proof_of_work_bits: usize

Implementations

impl FriParameters

pub fn get_conjectured_security_bits( &self, challenge_field_bits: usize, ) -> usize

Conjectured bits of security. See ethSTARK paper (https://eprint.iacr.org/2021/582.pdf) section 5.10.1 equation (19)

challenge_field_bits is the number of bits in the challenge field (extension field) of the STARK config.

pub fn standard_fast() -> Self

See standard_fri_params_with_100_bits_security.

pub fn standard_with_100_bits_conjectured_security(log_blowup: usize) -> Self

👎Deprecated: use standard_with_100_bits_security instead

pub fn standard_with_100_bits_security(log_blowup: usize) -> Self

See standard_fri_params_with_100_bits_security.

pub fn max_constraint_degree(&self) -> usize

pub fn new_for_testing(log_blowup: usize) -> Self

New FRI parameters for testing usage with the specific log_blowup. If the environment variable OPENVM_FAST_TEST is set to “1”, then the parameters are not secure and meant for fast testing only.

In production, use Self::standard_with_100_bits_security instead.

pub fn security_bits_fri( &self, challenge_field_bits: f64, num_batch_columns: usize, max_log_domain_size: usize, ) -> f64

We (via Plonky3) use multi-FRI, whose security in the unique decoding regime can be bounded above by the security of batch FRI by considering all polynomials in the largest domain.

Following https://eprint.iacr.org/2023/1071.pdf, https://eprint.iacr.org/2025/1993.pdf, we use round-by-round soundness since we use FRI as a non-interactive protocol via Fiat-Shamir.

We use multi-FRI with <=2 opening points (the second point for rotation openings). The num_batch_columns is the maximum number of columns to be batched for any fixed domain size. A trace polynomial over the base field opened at 2 points gets a contribution of 2. A trace polynomial over the extension field opened at 2 points gets a contribution of 8.

pub fn security_bits_fri_commit_phase( &self, challenge_field_bits: f64, num_batch_columns: usize, max_log_domain_size: usize, ) -> f64

Batch FRI error according to https://eprint.iacr.org/2022/1216.pdf in the unique decoding regime. The batch FRI bound is an overestimate because in multi-FRI the error contribution for batching over smaller domain sizes is smaller.

We assume arity-2 folding.

pub fn security_bits_fri_query_phase(&self) -> f64

pub fn security_bits_deep_ali( &self, params: &DeepAliParameters, challenge_field_bits: f64, max_log_domain_size: usize, max_constraint_degree: usize, max_num_constraints: usize, ) -> f64

The bits of security from DEEP-ALI. Note that unlike in Theorem 8 of https://eprint.iacr.org/2022/1216.pdf, we do not include the rotation in the denominator of the quotient polynomial. Instead the quotient polynomial denominator consists only of Z_H(X) = X^{trace_height} - 1. The rotation opening point is handled as part of FRI PCS opening as an additional opening point. This means that for us k^+ = k + 1. We also include degree of selectors within the max_constraint_degree parameter.

Trait Implementations

impl Clone for FriParameters

fn clone(&self) -> FriParameters

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FriParameters

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FriParameters

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for FriParameters

fn eq(&self, other: &FriParameters) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FriParameters

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for FriParameters

impl Eq for FriParameters

impl StructuralPartialEq for FriParameters