feat: Proving the rollup circuits

[PhilWindle]

This PR implements a first stage of proving the rollup circuits. We introduce the bb binary and use it to produce verification keys, generate proofs and later verify those proofs for all of the rollup circuits, currently demonstrated in a unit test.

[AztecBot]

Benchmark results

Metrics with a significant change:

• circuit_simulation_time_in_ms (base-parity): 53.0 (-99%)
• circuit_simulation_time_in_ms (root-parity): 10.3 (-99%)
• note_successful_decrypting_time_in_ms (8): 263 (+66%)
• note_successful_decrypting_time_in_ms (32): 581 (+19%)

Detailed results

All benchmarks are run on txs on the Benchmarking contract on the repository. Each tx consists of a batch call to create_note and increment_balance, which guarantees that each tx has a private call, a nested private call, a public call, and a nested public call, as well as an emitted private note, an unencrypted log, and public storage read and write.

This benchmark source data is available in JSON format on S3 here.

L2 block published to L1

Each column represents the number of txs on an L2 block published to L1.

Metric	8 txs	32 txs	64 txs
l1_rollup_calldata_size_in_bytes	772	772	772
l1_rollup_calldata_gas	6,808	6,784	6,808
l1_rollup_execution_gas	587,289	587,265	587,289
l2_block_processing_time_in_ms	1,321 (+1%)	4,864 (+3%)	9,311 (+3%)
note_successful_decrypting_time_in_ms	⚠️ 263 (+66%)	⚠️ 581 (+19%)	992 (+4%)
note_trial_decrypting_time_in_ms	67.2 (+10%)	90.0 (-9%)	111 (+61%)
l2_block_building_time_in_ms	9,429 (-11%)	36,854 (-2%)	74,546 (+1%)
l2_block_rollup_simulation_time_in_ms	9,312 (-11%)	36,450 (-2%)	73,779 (+1%)
l2_block_public_tx_process_time_in_ms	5,074	19,785	39,615

L2 chain processing

Each column represents the number of blocks on the L2 chain where each block has 16 txs.

Metric	5 blocks	10 blocks
node_history_sync_time_in_ms	13,865 (-1%)	26,477 (-5%)
note_history_successful_decrypting_time_in_ms	1,252 (+10%)	2,173 (+2%)
note_history_trial_decrypting_time_in_ms	41.8 (+12%)	74.3 (+3%)
node_database_size_in_bytes	18,694,224	34,930,768 (-1%)
pxe_database_size_in_bytes	29,859	59,414

Circuits stats

Stats on running time and I/O sizes collected for every circuit run across all benchmarks.

Circuit	circuit_simulation_time_in_ms	circuit_input_size_in_bytes	circuit_output_size_in_bytes
private-kernel-init	145	44,561	26,424
private-kernel-inner	159 (+2%)	72,188	26,424
private-kernel-ordering	108	51,090	39,297
base-parity	⚠️ 53.0 (-99%)	128	311
root-parity	⚠️ 10.3 (-99%)	1,244	311
base-rollup	12,725 (-4%)	110,820	957
root-rollup	48.5 (-1%)	4,551	821
public-kernel-app-logic	81.3 (-2%)	48,151	40,933
public-kernel-tail	121 (-1%)	53,644	7,385
merge-rollup	11.1 (+8%)	2,760	957
public-kernel-teardown	79.8 (+2%)	48,151	40,933
public-kernel-setup	78.4 (+2%)	48,151	40,933

Tree insertion stats

The duration to insert a fixed batch of leaves into each tree type.

Metric	1 leaves	16 leaves	64 leaves	128 leaves	512 leaves	1024 leaves	2048 leaves	4096 leaves	32 leaves
batch_insert_into_append_only_tree_16_depth_ms	10.0	15.9 (-1%)	N/A	N/A	N/A	N/A	N/A	N/A	N/A
batch_insert_into_append_only_tree_16_depth_hash_count	16.8	31.6	N/A	N/A	N/A	N/A	N/A	N/A	N/A
batch_insert_into_append_only_tree_16_depth_hash_ms	0.583	0.492 (-1%)	N/A	N/A	N/A	N/A	N/A	N/A	N/A
batch_insert_into_append_only_tree_32_depth_ms	N/A	N/A	46.3 (+1%)	72.4	231	445 (-1%)	871	1,743 (+1%)	N/A
batch_insert_into_append_only_tree_32_depth_hash_count	N/A	N/A	96.0	159	543	1,055	2,079	4,127	N/A
batch_insert_into_append_only_tree_32_depth_hash_ms	N/A	N/A	0.474 (+1%)	0.446	0.421	0.416 (-1%)	0.413	0.415	N/A
batch_insert_into_indexed_tree_20_depth_ms	N/A	N/A	54.5 (+1%)	107	337 (-1%)	659	1,322 (+1%)	2,634 (+1%)	N/A
batch_insert_into_indexed_tree_20_depth_hash_count	N/A	N/A	105	207	691	1,363	2,707	5,395	N/A
batch_insert_into_indexed_tree_20_depth_hash_ms	N/A	N/A	0.480	0.480 (-1%)	0.457 (-1%)	0.453 (-1%)	0.455	0.455	N/A
batch_insert_into_indexed_tree_40_depth_ms	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	61.4
batch_insert_into_indexed_tree_40_depth_hash_count	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	109
batch_insert_into_indexed_tree_40_depth_hash_ms	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	0.535

Miscellaneous

Transaction sizes based on how many contract classes are registered in the tx.

Metric	0 registered classes	1 registered classes
tx_size_in_bytes	41,005	528,889

Transaction size based on fee payment method

Metric	native fee payment method	fpc_public fee payment method	fpc_private fee payment method
tx_with_fee_size_in_bytes	905	1,161	1,377

Transaction processing duration by data writes.

Metric	0 new note hashes	1 new note hashes	2 new note hashes
tx_pxe_processing_time_ms	1,170 (+4%)	771 (+1%)	3,439 (+1%)

Metric	1 public data writes	2 public data writes	3 public data writes	4 public data writes	5 public data writes	8 public data writes
tx_sequencer_processing_time_ms	436	302 (+2%)	777 (+3%)	390 (+3%)	1,264 (+3%)	459 (+2%)

[just-mitch]

this publicKernelProof is dead code at this point right?

[PhilWindle]

Yes, I'll remove once I have everything working in the prover

[alexghr]

One question about the array of proving requests for processed tx but otherwise looks good