• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
    • Debugging
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
      • Kestrel-books
        • Crypto-hdwallet
        • Apt
        • Error-checking
        • Fty-extensions
        • Isar
        • Kestrel-utilities
        • Set
        • Soft
        • C
        • Bv
        • Imp-language
        • Event-macros
        • Java
        • Bitcoin
        • Ethereum
        • Yul
        • Zcash
        • ACL2-programming-language
        • Prime-fields
        • Json
        • Syntheto
        • File-io-light
        • Cryptography
          • R1cs
            • R1cs-verification-with-axe
              • Lift-r1cs
              • Verify-r1cs
              • Verify-zcash-r1cs
                • Lift-zcash-r1cs
                • Verify-semaphore-r1cs
              • R1cs-constraintp
              • Dot-product
              • R1csp
              • R1cs-constraint-holdsp
              • Sparse-vectorp
              • R1cs-holdsp
              • R1cs-constraints-holdp
              • R1cs-constraint-listp
              • Pseudo-varp
              • Pseudo-var-listp
            • Interfaces
            • Sha-2
            • Keccak
            • Kdf
            • Mimc
            • Padding
            • Hmac
            • Elliptic-curves
            • Attachments
            • Elliptic-curve-digital-signature-algorithm
          • Number-theory
          • Lists-light
          • Axe
          • Builtins
          • Solidity
          • Helpers
          • Htclient
          • Typed-lists-light
          • Arithmetic-light
        • X86isa
        • Axe
        • Execloader
      • Math
      • Testing-utilities
    • Zcash
    • Verify-r1cs
    • R1cs-verification-with-axe

    Verify-zcash-r1cs

    A tool to verify a zcash R1CS

    General Form:

    (verify-zcash-r1cs lifted-r1cs
                       spec-term
                       &key
                       :bit-inputs                 ; default nil
                       :tactic                     ; default '(:rep :rewrite :subst)
                       :rule-lists                 ; default nil
                       :global-rules               ; default nil
                       :use                        ; default nil
                       :var-ordering               ; default nil
                       :interpreted-function-alist ; default nil
                       :no-splitp                  ; default t
                       :print-as-clausesp          ; default nil
                       :monitor                    ; default nil
                       :print                      ; default :brief
                       )

    Inputs:

    lifted-r1cs — (required)

    A DAG representing the lifted R1CS

    spec-term — (required)

    A term over the input and output vars (this input is not evaluated)

    :bit-inputs — default nil

    Variables for which to generate BITP assumptions

    :tactic — default (:rep :rewrite :subst)

    The Axe tactic to use

    :rule-lists — default nil

    A sequence of Axe rule sets, each of which is a list of rule names and/or calls of 0-ary functions that return lists of rule names. These are applied one after the other.

    :global-rules — default nil

    Rules to add to every rule-list in the sequence

    :use — default nil

    Axe :use hints for the proof (satisfies axe-use-hintp)

    :var-ordering — default nil

    Ordering on the vars, to restrict substitutions that express earlier vars in terms of later vars. Not all vars need to be mentioned.

    :interpreted-function-alist — default nil

    An interpreted-function-alist to evaluate ground terms

    :no-splitp — default t

    Whether to split into cases

    :print-as-clausesp — default nil

    Whether to print proof goals as clauses (disjunctions to be proved), rather than conjunctions of negated literals (to be proved contradictory)

    :monitor — default nil

    Rules to monitor during rewriting

    :print — default :brief

    Axe print argument

    Description:

    This tool is a wrapper for r1cs::verify-r1cs that sets the prime to jubjub-q. See also r1cs::r1cs-verification-with-axe.