Add proof input preprocessing (#30)

* Implemented groth16 public input preprocessing

* Added entry in CHANGELOG

* Update CHANGELOG.md

Co-authored-by: Weikeng Chen <[email protected]>

Author: rozbb

CHANGELOG.md

@@ -1,4 +1,5 @@
 ## Pending
+- [\#30](https://github.com/arkworks-rs/groth16/pull/30) Add proof input preprocessing.
 
 ### Breaking changes
 - [\#21](https://github.com/arkworks-rs/groth16/pull/21) Change the `generate_parameters` interface to take generators as input.

src/verifier.rs

@@ -17,13 +17,12 @@ pub fn prepare_verifying_key<E: PairingEngine>(vk: &VerifyingKey<E>) -> Prepared
     }
 }
 
-/// Verify a Groth16 proof `proof` against the prepared verification key `pvk`,
-/// with respect to the instance `public_inputs`.
-pub fn verify_proof<E: PairingEngine>(
+/// Prepare proof inputs for use with [`verify_proof_with_prepared_inputs`], wrt the prepared
+/// verification key `pvk` and instance public inputs.
+pub fn prepare_inputs<E: PairingEngine>(
     pvk: &PreparedVerifyingKey<E>,
-    proof: &Proof<E>,
     public_inputs: &[E::Fr],
-) -> R1CSResult<bool> {
+) -> R1CSResult<E::G1Projective> {
     if (public_inputs.len() + 1) != pvk.vk.gamma_abc_g1.len() {
         return Err(SynthesisError::MalformedVerifyingKey);
     }
@@ -33,10 +32,24 @@ pub fn verify_proof<E: PairingEngine>(
         g_ic.add_assign(&b.mul(i.into_repr()));
     }
 
+    Ok(g_ic)
+}
+
+/// Verify a Groth16 proof `proof` against the prepared verification key `pvk` and prepared public
+/// inputs. This should be preferred over [`verify_proof`] if the instance's public inputs are
+/// known in advance.
+pub fn verify_proof_with_prepared_inputs<E: PairingEngine>(
+    pvk: &PreparedVerifyingKey<E>,
+    proof: &Proof<E>,
+    prepared_inputs: &E::G1Projective,
+) -> R1CSResult<bool> {
     let qap = E::miller_loop(
         [
             (proof.a.into(), proof.b.into()),
-            (g_ic.into_affine().into(), pvk.gamma_g2_neg_pc.clone()),
+            (
+                prepared_inputs.into_affine().into(),
+                pvk.gamma_g2_neg_pc.clone(),
+            ),
             (proof.c.into(), pvk.delta_g2_neg_pc.clone()),
         ]
         .iter(),
@@ -46,3 +59,14 @@ pub fn verify_proof<E: PairingEngine>(
 
     Ok(test == pvk.alpha_g1_beta_g2)
 }
+
+/// Verify a Groth16 proof `proof` against the prepared verification key `pvk`,
+/// with respect to the instance `public_inputs`.
+pub fn verify_proof<E: PairingEngine>(
+    pvk: &PreparedVerifyingKey<E>,
+    proof: &Proof<E>,
+    public_inputs: &[E::Fr],
+) -> R1CSResult<bool> {
+    let prepared_inputs = prepare_inputs(pvk, public_inputs)?;
+    verify_proof_with_prepared_inputs(pvk, proof, &prepared_inputs)
+}