What is Chiquito?

What is Chiquito?#

Chiquito is a high-level structured language for implementing zero knowledge proof applications.

Chiquito is being implemented in the DSL Working Group of PSE, Ethereum Foundation.

Image 2       Image 3

Why is chiquito different from other ZKP DSLs?#

Most ZKP DSLs are based on writing constraints, witness generation and some abstraction for DRY like templates or gadgets.

Chiquito allows the developer to think in more high-level and structured abstractions that most ZKP DSLs, while not sacrificing performance.

What is the chiquito programming model?#

Chiquito starts from the idea that every zero knowledge proof represents a program (the setup), which can have many computations (the trace) that is proven for a certain input, output and intermediate values (the witness).

The main structured abstraction in chiquito is the step. Any computation can be divided in individual steps. A program is represented by a circuit that has one or many step types, a particular computation is represented as a series of step instances or trace steps that can have arbitrary order.

A step type contains:

  • Setup: a series of constraints or assertions that must hold for a step instance of this type to be valid.

  • Witness generation: code that for a particular input sets the values of the witness for a particular step instance.

A chiquito circuit contains a trace function that for a given input will generate the step instances in a particular order and use the step type witness generation.

Another important piece of Chiquito are the signals. They represent elements of the witness.

Chiquito has many more features, but these are enough to start writing basic circuits.

What proving system chiquito uses?#

Currently Halo2 backend is implemented, but we are looking into implementing other backends.

Chiquito frontend comes in two flavours: rust and python, so you can write Chiquito applications in either Rust or Python. PyChiquito, and any other language interface in the future, uses ChiquitoCore for most of its work, so adding new languages is easy.

What are the features of chiquito?#

  • Step-based, that abstracts out the computation that you want to prove.

  • Signals, that abstract out the data (witness) and how it is placed and handled.

  • Constraint builder, allows you to write the constraints of your application in a more readable and natural way.

  • Trace based witness generation, a way to generate the data that you are trying to prove that matches how computation is done.

  • Super circuits, that allow combining many circuits into one.

  • Lookup tables, that allow sharing data between multiple circuits.

  • Expose signals as public very easily.

  • Automatic padding.

  • Completely modular platform, that allows writing circuits in multiple languages and use different proving systems.

PLONKish-specific features:

  • Halo2 backend ready.

  • PLONKish Cell Managers. These are modular strategies to place signals in the PLONKish columns and rotations. These allows for steps to use different numbers of rows and columns, in a configurable way, so you can find the most efficient structure for your circuit.

  • PLONKish step selector builders. These are modular strategies to activate the steps in the witness.

Planned:

  • Nested steps, will allow more complex circuits and allow circuits coordination in proving systems without advice based lookup tables.

  • Gadget abstraction.

  • Arbitrary boolean assertions.

In research:

  • Signal typing system, which allows statically checking for soundness issues.

  • Folding backend with ProtoStar, HyperNova, and/or others.

  • Tracers

Fibonacci circuit in PyChiquito.#

But better see for yourself:

class FiboStep(StepType):
    def setup(self: FiboStep):
        self.c = self.internal("c")
        self.constr(eq(self.circuit.a + self.circuit.b, self.c))
        self.transition(eq(self.circuit.b, self.circuit.a.next()))
        self.transition(eq(self.c, self.circuit.b.next()))

    def wg(self: FiboStep, args: Tuple[int, int]):
        a_value, b_value = args
        self.assign(self.circuit.a, F(a_value))
        self.assign(self.circuit.b, F(b_value))
        self.assign(self.c, F(a_value + b_value))

class Fibonacci(Circuit):
    def setup(self: Fibonacci):
        self.a: Queriable = self.forward("a")
        self.b: Queriable = self.forward("b")

        self.fibo_step = self.step_type(FiboStep(self, "fibo_step"))

        self.pragma_num_steps(11)

    def trace(self: Fibonacci, args: Any):
        self.add(self.fibo_step, (1, 1))
        a = 1
        b = 2
        for i in range(1, 11):
            self.add(self.fibo_step, (a, b))
            prev_a = a
            a = b
            b += prev_a

fibo = Fibonacci()
fibo_witness = fibo.gen_witness(None)
fibo.halo2_mock_prover(fibo_witness)

This is explained in more detail in the tutorial, but you can see already how concise and clear it is.

Contents