feat: add ipa-hybrid feature for hybrid IPA with configurable bullet rounds

Cargo.toml

@@ -59,6 +59,7 @@ proptest = "1.2.0"
 [features]
 default = []
 jem = ["tikv-jemallocator"]
+ipa-hybrid = []
 
 [profile.release]
 debug = 1

src/provider/pcs/hyrax_pc.rs

@@ -10,7 +10,7 @@ use crate::{
   math::Math,
   polys::eq::EqPolynomial,
   provider::{
-    pcs::ipa::{InnerProductArgumentLinear, InnerProductInstance, InnerProductWitness},
+    pcs::ipa::{InnerProductInstance, InnerProductWitness},
     traits::{DlogGroup, DlogGroupExt},
   },
   start_span,
@@ -31,6 +31,15 @@ use crate::big_num::delayed_reduction::DelayedReduction;
 use crate::big_num::montgomery::MontgomeryLimbs;
 use crate::provider::msm::{AffineGroupElement, FixedBaseMul, vartime_scalar_mul};
 
+#[cfg(not(feature = "ipa-hybrid"))]
+use crate::provider::pcs::ipa::InnerProductArgumentLinear;
+#[cfg(feature = "ipa-hybrid")]
+use crate::provider::pcs::ipa_log::InnerProductArgumentHybrid;
+
+/// Number of bullet reduction rounds for the hybrid IPA.
+#[cfg(feature = "ipa-hybrid")]
+const HYBRID_BULLET_ROUNDS: usize = 3;
+
 /// Bind polynomial top variables using delayed reduction for Montgomery multiply.
 /// Avoids per-product REDC, reducing multiply cost by ~50%.
 /// The accumulator array (r_len * 72B) must fit in L2 cache.
@@ -135,7 +144,10 @@ pub struct HyraxEvaluationArgument<E: Engine>
 where
   E::GE: DlogGroupExt,
 {
+  #[cfg(not(feature = "ipa-hybrid"))]
   ipa: InnerProductArgumentLinear<E>,
+  #[cfg(feature = "ipa-hybrid")]
+  ipa: InnerProductArgumentHybrid<E, HYBRID_BULLET_ROUNDS>,
 }
 
 impl<E: Engine> PCSEngineTrait<E> for HyraxPCS<E>
@@ -463,6 +475,7 @@ where
     let (_ipa_span, ipa_t) = start_span!("hyrax_prove_ipa");
     let ipa_instance = InnerProductInstance::<E>::new(&comm_LZ, &R, &comm_eval.comm[0]);
     let ipa_witness = InnerProductWitness::<E>::new(&LZ, &r_LZ, &blind_eval.blind[0]);
+    #[cfg(not(feature = "ipa-hybrid"))]
     let ipa = InnerProductArgumentLinear::<E>::prove(
       &ck.ck,
       &ck.h,
@@ -472,6 +485,16 @@ where
       &ipa_witness,
       transcript,
     )?;
+    #[cfg(feature = "ipa-hybrid")]
+    let ipa = InnerProductArgumentHybrid::<E, HYBRID_BULLET_ROUNDS>::prove(
+      &ck.ck,
+      &ck.h,
+      &ck_eval.ck[0],
+      &ck_eval.h,
+      &ipa_instance,
+      &ipa_witness,
+      transcript,
+    )?;
     info!(elapsed_ms = %ipa_t.elapsed().as_millis(), "hyrax_prove_ipa");
 
     Ok(HyraxEvaluationArgument { ipa })

src/provider/pcs/ipa.rs

@@ -29,16 +29,16 @@ pub(crate) fn inner_product<T: Field + Send + Sync>(a: &[T], b: &[T]) -> T {
 /// An inner product instance consists of a commitment to a vector `a` and another vector `b`
 /// and the claim that c = <a, b>.
 pub struct InnerProductInstance<E: Engine> {
-  comm_a_vec: E::GE,
-  b_vec: Vec<E::Scalar>,
-  comm_c: E::GE,
+  pub(crate) comm_a_vec: E::GE,
+  pub(crate) b_vec: Vec<E::Scalar>,
+  pub(crate) comm_c: E::GE,
 }
 
 /// Holds witness for the inner product instance.
 pub struct InnerProductWitness<E: Engine> {
-  a_vec: Vec<E::Scalar>,
-  r_a: E::Scalar, // blind for the commitment to a_vec
-  r_c: E::Scalar, // blind for the commitment to c
+  pub(crate) a_vec: Vec<E::Scalar>,
+  pub(crate) r_a: E::Scalar, // blind for the commitment to a_vec
+  pub(crate) r_c: E::Scalar, // blind for the commitment to c
 }
 
 impl<E: Engine> InnerProductInstance<E>