GT-multiexp: Add detailed metering

Author: mratsim

constantine/math_compiler/assembly/llvm_assembler_arm64.nim

@@ -2,7 +2,7 @@
 
 > CC=clang nimble bench_summary_bls12_381
 
-![eip2537_bench_ryzen_7840U.png](eip2537_bench_ryzen_7840U.png)
+![eip2537_bench_ryzen_7840U.png](m_eip2537_bench_ryzen_7840U.png)
 
 |                                      |                                          |                                 |                        |                                |
 | ------------------------------------ | ---------------------------------------- | ------------------------------- | ---------------------- | ------------------------------ |

metering/eip2537.md renamed to metering/m_eip2537.md

@@ -29,7 +29,7 @@ import
 var rng*: RngState
 let seed = uint32(getTime().toUnix() and (1'i64 shl 32 - 1)) # unixTime mod 2^32
 rng.seed(seed)
-echo "bench xoshiro512** seed: ", seed
+echo "metering xoshiro512** seed: ", seed
 
 func random_point*(rng: var RngState, EC: typedesc[EC_ShortW_Aff]): EC {.noInit.} =
   var jac = rng.random_unsafe(EC_ShortW_Jac[EC.F, EC.G])

metering/m_eip2537.nim

@@ -0,0 +1,65 @@
+# Constantine
+# Copyright (c) 2018-2019    Status Research & Development GmbH
+# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
+# Licensed and distributed under either of
+#   * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
+#   * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
+# at your option. This file may not be copied, modified, or distributed except according to those terms.
+
+import
+  std/times,
+  constantine/platforms/abstractions,
+  constantine/platforms/metering/[reports, tracer],
+  constantine/named/algebras,
+  constantine/named/zoo_subgroups,
+  constantine/math/[arithmetic, extension_fields],
+  constantine/math/pairings/[gt_multiexp, pairings_generic],
+  # Helpers
+  helpers/prng_unsafe
+
+var rng*: RngState
+let seed = 777
+rng.seed(seed)
+echo "metering xoshiro512** seed: ", seed
+
+func random_gt(rng: var RngState, F: typedesc): F {.noInit.} =
+  result = rng.random_unsafe(F)
+  result.finalExp()
+  debug: doAssert bool result.isInPairingSubgroup()
+
+proc genBatch(rng: var RngState, GT: typedesc, numPoints: int): (seq[GT], seq[Fr[GT.Name].getBigInt()]) =
+  var elems = newSeq[GT](numPoints)
+  var exponents = newSeq[Fr[GT.Name]](numPoints)
+
+  for i in 0 ..< numPoints:
+    elems[i] = rng.random_gt(GT)
+    exponents[i] = rng.random_unsafe(Fr[GT.Name])
+    
+  var exponents_big = newSeq[Fr[GT.Name].getBigInt()](numPoints)
+  exponents_big.asUnchecked().batchFromField(exponents.asUnchecked(), numPoints)
+  
+  return (elems, exponents_big)
+  
+proc mexpMeter[bits: static int](elems: openArray[AnyFp12], exponents: openArray[BigInt[bits]], useTorus: static bool) =
+  var r{.noInit.}: AnyFp12
+  r.setZero()
+  resetMetering()
+  r.multiExp_vartime(elems, exponents, useTorus)
+
+type GT_12o6 = QuadraticExt[Fp6[BLS12_381]]
+type GT_12o4 = CubicExt[Fp4[BLS12_381]]
+
+type GT = GT_12o6
+const N = 256
+const useTorus = true
+
+echo "Config: GT = ", $GT, ", N = ", N, ", use-torus = ", useTorus
+
+resetMetering()
+let (elems, exponents) = rng.genBatch(GT, N)
+resetMetering()
+
+mexpMeter(elems, exponents, useTorus)
+const flags = if UseASM_X86_64 or UseASM_X86_32: "UseAssembly" else: "NoAssembly"
+
+reportCli(Metrics, flags)

metering/eip2537_bench_ryzen_7840U.png renamed to metering/m_eip2537_bench_ryzen_7840U.png

@@ -20,7 +20,7 @@ import
 var rng*: RngState
 let seed = uint32(getTime().toUnix() and (1'i64 shl 32 - 1)) # unixTime mod 2^32
 rng.seed(seed)
-echo "bench xoshiro512** seed: ", seed
+echo "metering xoshiro512** seed: ", seed
 
 proc msmMeter*(EC: typedesc, numPoints: int) =
   const bits = EC.getScalarField().bits()

metering/m_gt_multi_exp.md

@@ -20,7 +20,7 @@ import
 var rng*: RngState
 let seed = uint32(getTime().toUnix() and (1'i64 shl 32 - 1)) # unixTime mod 2^32
 rng.seed(seed)
-echo "bench xoshiro512** seed: ", seed
+echo "metering xoshiro512** seed: ", seed
 
 func random_point*(rng: var RngState, EC: typedesc[EC_ShortW_Aff]): EC {.noInit.} =
   var jac = rng.random_unsafe(EC_ShortW_Jac[EC.F, EC.G])