IPlonkVerifier

Git Source

Title: IPlonkVerifier

Authors: David Dada <daveproxy80@gmail.com> (https://github.com/dadadave80), Modified from snarkjs (https://github.com/iden3/snarkjs)

External interface for a GENERIC PLONK proof verifier over BN254 (alt_bn128). Unlike a snarkjs-generated verifier (which bakes one circuit's verifying key into bytecode), this takes the verifying key as a parameter, so a single deployed facet verifies proofs for ANY PLONK circuit. A reusable verifier primitive for the ZK privacy modules and consumers who bring PLONK circuits.

G2 ENCODING: the X_2 coordinate pairs are given in PRECOMPILE order (c1, c0) — imaginary first, then real. When building from a snarkjs vkey.json, swap each pair: x2[0] = [X_2[0][1], X_2[0][0]]. G1 points use affine (x, y); the point at infinity is (0, 0).

KEY PINNING: the verifier does not authenticate vk; it checks the proof against whatever key it is given. Its well-formedness check (domain size, on-curve points) is structural, and a malicious key passes it. Whoever generates a key can know its trapdoor and forge a proof for any input, so a consumer that forwards a caller-chosen key accepts every statement. Consumers MUST pin the key: compile it in as constants, or fix keccak256(abi.encode(vk)) at deployment and check it on every call. A key in writable storage is only as trustworthy as whoever can write it, and the same holds for a verifier reached through a diamond whose cut authority can replace this facet. See src/examples/privacy/ for both pinning patterns (shown for Groth16).

Functions

verifyProof

Verifies a PLONK proof against vk for the given public input.

function verifyProof(VerifyingKey calldata vk, Proof calldata proof, uint256[] calldata input)
        external
        view
        returns (bool);

Parameters

Returns

Errors

PlonkInvalidInputs

error PlonkInvalidInputs();

PlonkPrecompileFailed

error PlonkPrecompileFailed(address precompile);

Parameters

Structs

Proof

A PLONK proof over BN254 (snarkjs field order).

struct Proof {
        uint256[2] a;
        uint256[2] b;
        uint256[2] c;
        uint256[2] z;
        uint256[2] t1;
        uint256[2] t2;
        uint256[2] t3;
        uint256[2] wxi;
        uint256[2] wxiw;
        uint256 eval_a;
        uint256 eval_b;
        uint256 eval_c;
        uint256 eval_s1;
        uint256 eval_s2;
        uint256 eval_zw;
    }

Properties

VerifyingKey

A PLONK verifying key over BN254.

struct VerifyingKey {
        uint256[2] qm;
        uint256[2] ql;
        uint256[2] qr;
        uint256[2] qo;
        uint256[2] qc;
        uint256[2] s1;
        uint256[2] s2;
        uint256[2] s3;
        uint256 k1;
        uint256 k2;
        uint256 power;
        uint256 omega;
        uint256[2][2] x2;
    }

Properties