transcript should not depend on the proving order of circuits

scroll-tech · Sep 14, 2024 · 84731eb · 84731eb
1 parent 71b1aa2
commit 84731eb
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/ceno_zkvm/src/scheme/prover.rs b/ceno_zkvm/src/scheme/prover.rs
@@ -52,6 +52,8 @@ impl<E: ExtensionField> ZKVMProver<E> {
     ) -> Result<ZKVMProof<E>, ZKVMError> {
         let mut vm_proof = ZKVMProof::default();
         for (circuit_name, pk) in self.pk.circuit_pks.iter() {
+            // each circuit should be proved independently
+            let mut transcript = transcript.clone();
             let witness = witnesses
                 .witnesses
                 .remove(circuit_name)
@@ -84,7 +86,7 @@ impl<E: ExtensionField> ZKVMProver<E> {
                         .collect_vec(),
                     num_instances,
                     max_threads,
-                    transcript,
+                    &mut transcript,
                     challenges,
                 )?;
                 tracing::info!(
@@ -106,7 +108,7 @@ impl<E: ExtensionField> ZKVMProver<E> {
                         .collect_vec(),
                     num_instances,
                     max_threads,
-                    transcript,
+                    &mut transcript,
                     challenges,
                 )?;
                 tracing::info!(

diff --git a/ceno_zkvm/src/scheme/verifier.rs b/ceno_zkvm/src/scheme/verifier.rs
@@ -49,6 +49,7 @@ impl<E: ExtensionField> ZKVMVerifier<E> {
         let point_eval = PointAndEval::default();
         let mut dummy_table_item_multiplicity = 0;
         for (name, opcode_proof) in vm_proof.opcode_proofs {
+            let mut transcript = transcript.clone();
             let circuit_vk = self
                 .vk
                 .circuit_vks
@@ -57,7 +58,7 @@ impl<E: ExtensionField> ZKVMVerifier<E> {
             let _rand_point = self.verify_opcode_proof(
                 circuit_vk,
                 &opcode_proof,
-                transcript,
+                &mut transcript,
                 NUM_FANIN,
                 &point_eval,
                 challenges,
@@ -83,6 +84,7 @@ impl<E: ExtensionField> ZKVMVerifier<E> {
         }
 
         for (name, table_proof) in vm_proof.table_proofs {
+            let mut transcript = transcript.clone();
             let circuit_vk = self
                 .vk
                 .circuit_vks
@@ -91,7 +93,7 @@ impl<E: ExtensionField> ZKVMVerifier<E> {
             let _rand_point = self.verify_table_proof(
                 circuit_vk,
                 &table_proof,
-                transcript,
+                &mut transcript,
                 NUM_FANIN_LOGUP,
                 &point_eval,
                 challenges,