zkvm-amaci

Native zkVM implementation of the AMACI proof logic for RISC Zero and SP1.

The codebase keeps one protocol backend only: SHA-256 based commitments, Ed25519 command signatures, X25519 key agreement, and byte-oriented message encryption. Both zkVM hosts use the same proof-core execution logic and verify their public output against the host-side result before writing proof artifacts.

The witness layer is fixed-width where the protocol shape is fixed: field words are U256, public values are [u8; 32] digests, messages are [Field; 10], state leaves are [Field; 10], vote rows are [Field; 5] for the current vote_option_tree_depth = 1 target, and quin Merkle siblings are [Field; 4]. RISC Zero and SP1 private inputs and public journal values use the shared proof-core compact byte codec instead of guest-side serde decoding/encoding of the full Rust input and output graph.

Crates

crates/
  proof-core/            Shared protocol logic, native fixtures, public outputs.
  proof-risc0-guest/     RISC Zero guest entrypoint.
  proof-risc0-methods/   RISC Zero method build wrapper and image ID export.
  proof-risc0-host/      RISC Zero prove/verify CLI.
  proof-sp1-program/     SP1 guest program entrypoint.
  proof-sp1-host/        SP1 prove/execute/verify CLI.
  cosmwasm-sp1-verifier/ CosmWasm verifier PoC for SP1 Groth16 and compressed proofs.
configs/
  cargo-risc0-native-patches.toml
  cargo-sp1-native-patches.toml

Built-In Inputs

The CLIs accept these native fixtures:

process-messages-native-1-1
process-messages-native-2-1-5
process-messages-native-2-1-5-full
tally-votes-native-2-1-1
process-deactivate-native-2-5
add-new-key-native-2

The default circuit for both RISC Zero and SP1 hosts is process-messages-native-2-1-5-full.

Local Checks

cargo test -p amaci-proof-core
cargo check -p amaci-proof-risc0-host
cargo check -p amaci-proof-sp1-host

Profile the shared protocol logic without proving:

cargo run --release -p amaci-proof-core --bin native_profile -- \
  process-messages-native-2-1-5-full --iters 100

Run the current SP1 profiling suite. native is cheap and can run locally; execute records SP1 instruction/memory data without generating a proof; compressed generates and verifies compressed STARK proofs.

# Local quick sanity run.
NATIVE_ITERS=20 scripts/run_sp1_profile_suite.sh native

# High-performance machine: SP1 execute profile for all hot AMACI stages.
nohup env NATIVE_ITERS=200 \
  scripts/run_sp1_profile_suite.sh execute \
  > logs/sp1-profile-execute-$(date +%Y%m%d-%H%M%S).out 2>&1 &

# High-performance machine: compressed proof baseline.
nohup env NATIVE_ITERS=200 \
  scripts/run_sp1_profile_suite.sh compressed \
  > logs/sp1-profile-compressed-$(date +%Y%m%d-%H%M%S).out 2>&1 &

The suite writes metrics/sp1-profile-suite-*.summary.tsv with native execution time, input/public bytes, SP1 instruction counts, memory, and proof artifact sizes.

Bench / Metrics Runner

For high-performance machines, use the bench runner so logs, timing, memory, artifact sizes, and public-output comparisons are captured consistently:

cd ~/zkvm-amaci
git pull --ff-only origin main
chmod +x scripts/run_bench.sh
mkdir -p logs metrics proofs sp1-proofs

nohup bash scripts/run_bench.sh risc0 process-messages-native-2-1-5-full \
  > logs/bench-risc0-$(date +%Y%m%d-%H%M%S).out 2>&1 &

nohup bash scripts/run_bench.sh sp1 process-messages-native-2-1-5-full \
  > logs/bench-sp1-$(date +%Y%m%d-%H%M%S).out 2>&1 &

nohup bash scripts/run_bench.sh sp1-compressed process-messages-native-2-1-5-full \
  > logs/bench-sp1-compressed-$(date +%Y%m%d-%H%M%S).out 2>&1 &

nohup bash scripts/run_bench.sh sp1-groth16 process-messages-native-2-1-5-full \
  > logs/bench-sp1-groth16-$(date +%Y%m%d-%H%M%S).out 2>&1 &

nohup bash scripts/run_bench.sh sp1-execute process-messages-native-2-1-5-full \
  > logs/bench-sp1-execute-$(date +%Y%m%d-%H%M%S).out 2>&1 &

Watch the latest backend log:

tail -f $(ls -t logs/risc0-process-messages-native-2-1-5-full-*.log | head -1)
tail -f $(ls -t logs/sp1-process-messages-native-2-1-5-full-*.log | head -1)

After completion, inspect:

ls -lt metrics/*.metrics.txt metrics/*.time.txt | head
cat $(ls -t metrics/risc0-process-messages-native-2-1-5-full-*.metrics.txt | head -1)
cat $(ls -t metrics/sp1-process-messages-native-2-1-5-full-*.metrics.txt | head -1)
cat $(ls -t metrics/sp1-compressed-process-messages-native-2-1-5-full-*.metrics.txt | head -1)
cat $(ls -t metrics/sp1-groth16-process-messages-native-2-1-5-full-*.metrics.txt | head -1)

Key fields to record are input_bytes, public_bytes, proof/receipt size, Maximum resident set size from the matching .time.txt, and the verify compare line (risc0 public output match or sp1 public output match).

RISC Zero

Install:

curl -L https://risczero.com/install | bash
rzup install

Run a real proof in the background:

cd ~/zkvm-amaci
mkdir -p logs proofs

nohup env RISC0_DEV_MODE=0 CARGO_TARGET_DIR=/tmp/zkvm-amaci-risc0-target \
  cargo --config configs/cargo-risc0-native-patches.toml run --release \
    -p amaci-proof-risc0-host -- \
    prove process-messages-native-2-1-5-full \
    --receipt proofs/process-messages-native-2-1-5-full.risc0.receipt.bin \
    --public proofs/process-messages-native-2-1-5-full.risc0.public.json \
  > logs/risc0-proof-$(date +%Y%m%d-%H%M%S).log 2>&1 &

Verify the receipt:

RISC0_DEV_MODE=0 CARGO_TARGET_DIR=/tmp/zkvm-amaci-risc0-target \
  cargo --config configs/cargo-risc0-native-patches.toml run --release \
    -p amaci-proof-risc0-host -- \
    verify \
    --receipt proofs/process-messages-native-2-1-5-full.risc0.receipt.bin \
    --public proofs/process-messages-native-2-1-5-full.risc0.verified-public.json

cmp -s proofs/process-messages-native-2-1-5-full.risc0.public.json \
  proofs/process-messages-native-2-1-5-full.risc0.verified-public.json \
  && echo "risc0 public output match"

Success criteria:

log contains receipt=...;
log contains input_bytes=... and public_bytes=...;
verify prints receipt verify ok;
public JSON compare prints risc0 public output match.

SP1

Install:

curl -L https://sp1.succinct.xyz | bash
sp1up

Run a real proof in the background:

cd ~/zkvm-amaci
mkdir -p logs sp1-proofs

nohup env CARGO_TARGET_DIR=/tmp/zkvm-amaci-sp1-target \
  cargo --config configs/cargo-sp1-native-patches.toml run --release \
    -p amaci-proof-sp1-host -- \
    prove process-messages-native-2-1-5-full \
    --proof sp1-proofs/process-messages-native-2-1-5-full.sp1-proof.bin \
    --public sp1-proofs/process-messages-native-2-1-5-full.sp1.public.json \
  > logs/sp1-proof-$(date +%Y%m%d-%H%M%S).log 2>&1 &

Verify the proof:

CARGO_TARGET_DIR=/tmp/zkvm-amaci-sp1-target \
  cargo --config configs/cargo-sp1-native-patches.toml run --release \
    -p amaci-proof-sp1-host -- \
    verify \
    --proof sp1-proofs/process-messages-native-2-1-5-full.sp1-proof.bin \
    --public sp1-proofs/process-messages-native-2-1-5-full.sp1.verified-public.json

cmp -s sp1-proofs/process-messages-native-2-1-5-full.sp1.public.json \
  sp1-proofs/process-messages-native-2-1-5-full.sp1.verified-public.json \
  && echo "sp1 public output match"

Success criteria:

log contains proof=...;
log contains input_bytes=... and public_bytes=...;
verify prints proof verify ok;
public JSON compare prints sp1 public output match.

For a fast SP1 execution-only check:

CARGO_TARGET_DIR=/tmp/zkvm-amaci-sp1-target \
  cargo --config configs/cargo-sp1-native-patches.toml run --release \
    -p amaci-proof-sp1-host -- \
    execute process-messages-native-2-1-5-full \
    --public sp1-proofs/process-messages-native-2-1-5-full.sp1.execute-public.json

Run a Groth16-wrapped SP1 proof for on-chain/CosmWasm verification:

nohup bash scripts/run_bench.sh sp1-groth16 process-messages-native-2-1-5-full \
  > logs/bench-sp1-groth16-$(date +%Y%m%d-%H%M%S).out 2>&1 &

This writes:

full SDK proof: sp1-proofs/*.sp1-groth16-proof.bin;
on-chain proof bytes: sp1-proofs/*.sp1-groth16-proof.bytes;
raw public values: sp1-proofs/*.sp1-groth16.public.bin;
decoded public JSON: sp1-proofs/*.sp1-groth16.public.json;
SP1 program vkey hash: sp1-proofs/*.sp1-groth16.vkey.txt.

The raw triplet for CosmWasm is proof.bytes, public.bin, and vkey.txt.

Run a compressed STARK proof for the PQC path:

nohup bash scripts/run_bench.sh sp1-compressed process-messages-native-2-1-5-full \
  > logs/bench-sp1-compressed-$(date +%Y%m%d-%H%M%S).out 2>&1 &

This writes:

full SDK proof: sp1-proofs/*.sp1-compressed-proof.bin;
raw compressed proof bytes: sp1-proofs/*.sp1-compressed-proof.bytes;
raw public values: sp1-proofs/*.sp1-compressed.public.bin;
decoded public JSON: sp1-proofs/*.sp1-compressed.public.json;
bincode-encoded SP1 program vkey digest: sp1-proofs/*.sp1-compressed.vkey.bin.

The raw triplet for the compressed CosmWasm PoC is proof.bytes, public.bin, and vkey.bin. This route keeps the final proof in the STARK/FRI family; it is the current end-to-end PQC candidate.

Build a CosmWasm execute message from those compressed artifacts:

scripts/make_cosmwasm_sp1_compressed_msg.sh process-messages-native-2-1-5-full \
  > sp1-proofs/process-messages-native-2-1-5-full.verify-compressed.msg.json

CosmWasm SP1 Verifier

crates/cosmwasm-sp1-verifier is a minimal CosmWasm contract PoC that can call both sp1_verifier::Groth16Verifier and sp1_verifier::compressed::SP1CompressedVerifierRaw.

Groth16 is useful as a compact on-chain baseline but is not PQC. The compressed proof path verifies SP1 compressed STARK proofs and is the route to measure for end-to-end PQC.

Build the verifier contract:

scripts/build_cosmwasm_contract.sh
ls -lh target/wasm32-unknown-unknown/contract/amaci_cosmwasm_sp1_verifier.wasm

The script uses nightly build-std with MVP-compatible wasm flags. This is required for Vota's current wasmvm, which rejects bulk-memory instructions such as memory.copy.

Deploy with dorad on Vota testnet:

RPC_URL=https://vota-testnet-rpc.dorafactory.org:443
CHAIN_ID=vota-testnet
DORAD_HOME=/tmp/zkvm-amaci-dorad-home
KEY_NAME=zkvm-amaci-deployer
GAS_PRICES=10000000000peaka
WASM=target/wasm32-unknown-unknown/contract/amaci_cosmwasm_sp1_verifier.wasm

mkdir -p "$DORAD_HOME"
printf '%s\n' "$MNEMONIC" | dorad keys add "$KEY_NAME" \
  --recover --keyring-backend test --home "$DORAD_HOME"

dorad tx wasm store "$WASM" \
  --from "$KEY_NAME" --keyring-backend test --home "$DORAD_HOME" \
  --node "$RPC_URL" --chain-id "$CHAIN_ID" \
  --gas auto --gas-adjustment 1.8 --gas-prices "$GAS_PRICES" \
  --broadcast-mode sync --output json -y

dorad tx wasm instantiate <CODE_ID> '{}' \
  --from "$KEY_NAME" --keyring-backend test --home "$DORAD_HOME" \
  --node "$RPC_URL" --chain-id "$CHAIN_ID" \
  --label "zkvm-amaci-sp1-compressed-$(date +%Y%m%d-%H%M%S)" \
  --no-admin --gas auto --gas-adjustment 1.5 --gas-prices "$GAS_PRICES" \
  --broadcast-mode sync --output json -y

Build a compressed execute message from high-performance-machine artifacts and submit it:

scripts/make_cosmwasm_sp1_compressed_msg.sh process-messages-native-2-1-5-full \
  > sp1-proofs/process-messages-native-2-1-5-full.verify-compressed.msg.json

dorad tx wasm execute <CONTRACT_ADDR> \
  "$(cat sp1-proofs/process-messages-native-2-1-5-full.verify-compressed.msg.json)" \
  --from "$KEY_NAME" --keyring-backend test --home "$DORAD_HOME" \
  --node "$RPC_URL" --chain-id "$CHAIN_ID" \
  --gas auto --gas-adjustment 2.0 --gas-prices "$GAS_PRICES" \
  --broadcast-mode sync --output json -y

Notes

proof-core is the protocol source of truth for both zkVMs.
Host CLIs always recompute expected public output locally before accepting a generated proof.
Guest public output is committed as fixed bytes and decoded by the hosts from raw journal/public-value bytes.
Proof artifact names intentionally include the backend (risc0 or sp1) so receipts/proofs are not mixed.

Name		Name	Last commit message	Last commit date
Latest commit History 16 Commits
configs		configs
crates		crates
docs		docs
fixtures		fixtures
scripts		scripts
.gitignore		.gitignore
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
LICENSE		LICENSE
README.md		README.md
package-lock.json		package-lock.json
package.json		package.json
rust-toolchain.toml		rust-toolchain.toml

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Repository files navigation

zkvm-amaci

Crates

Built-In Inputs

Local Checks

Bench / Metrics Runner

RISC Zero

SP1

CosmWasm SP1 Verifier

Notes

About

Releases

Packages

Contributors

Languages

Uh oh!

Folders and files

Latest commit

History

Repository files navigation

zkvm-amaci

Crates

Built-In Inputs

Local Checks

Bench / Metrics Runner

RISC Zero

SP1

CosmWasm SP1 Verifier

Notes

About

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages