Add circle points over M31

stwo_cairo_verifier/src/circle.cairo

@@ -0,0 +1,123 @@
+use stwo_cairo_verifier::fields::m31::{M31, m31};
+
+pub const M31_CIRCLE_GEN: CirclePointM31 =
+    CirclePointM31 { x: M31 { inner: 2 }, y: M31 { inner: 1268011823 }, };
+
+// `CIRCLE_ORDER` equals 2^31
+pub const CIRCLE_ORDER: u32 = 2147483648;
+
+#[derive(Drop, Copy, Debug, PartialEq, Eq)]
+pub struct CirclePointM31 {
+    pub x: M31,
+    pub y: M31,
+}
+
+#[generate_trait]
+pub impl CirclePointM31Impl of CirclePointM31Trait {
+    // Returns the neutral element of the circle.
+    fn zero() -> CirclePointM31 {
+        CirclePointM31 { x: m31(1), y: m31(0) }
+    }
+
+    fn mul(self: @CirclePointM31, mut scalar: u32) -> CirclePointM31 {
+        let mut result = Self::zero();
+        let mut cur = *self;
+        while scalar > 0 {
+            if scalar & 1 == 1 {
+                result = result + cur;
+            }
+            cur = cur + cur;
+            scalar = scalar / 2;
+        };
+        result
+    }
+}
+
+impl CirclePointM31Add of Add<CirclePointM31> {
+    // The operation of the circle as a group with additive notation.
+    fn add(lhs: CirclePointM31, rhs: CirclePointM31) -> CirclePointM31 {
+        CirclePointM31 { x: lhs.x * rhs.x - lhs.y * rhs.y, y: lhs.x * rhs.y + lhs.y * rhs.x }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{M31_CIRCLE_GEN, CIRCLE_ORDER, CirclePointM31, CirclePointM31Impl};
+    use stwo_cairo_verifier::fields::m31::m31;
+
+    #[test]
+    fn test_add_1() {
+        let i = CirclePointM31 { x: m31(0), y: m31(1) };
+        let result = i + i;
+        let expected_result = CirclePointM31 { x: -m31(1), y: m31(0) };
+
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_add_2() {
+        let point_1 = CirclePointM31 { x: m31(750649172), y: m31(1991648574) };
+        let point_2 = CirclePointM31 { x: m31(1737427771), y: m31(309481134) };
+        let result = point_1 + point_2;
+        let expected_result = CirclePointM31 { x: m31(1476625263), y: m31(1040927458) };
+
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_zero_1() {
+        let result = CirclePointM31Impl::zero();
+        let expected_result = CirclePointM31 { x: m31(1), y: m31(0) };
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_zero_2() {
+        let point_1 = CirclePointM31 { x: m31(750649172), y: m31(1991648574) };
+        let point_2 = CirclePointM31Impl::zero();
+        let expected_result = point_1.clone();
+        let result = point_1 + point_2;
+
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_mul_1() {
+        let point_1 = CirclePointM31 { x: m31(750649172), y: m31(1991648574) };
+        let result = point_1.mul(5);
+        let expected_result = point_1 + point_1 + point_1 + point_1 + point_1;
+
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_mul_2() {
+        let point_1 = CirclePointM31 { x: m31(750649172), y: m31(1991648574) };
+        let result = point_1.mul(8);
+        let mut expected_result = point_1 + point_1;
+        expected_result = expected_result + expected_result;
+        expected_result = expected_result + expected_result;
+
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_mul_3() {
+        let point_1 = CirclePointM31 { x: m31(750649172), y: m31(1991648574) };
+        let result = point_1.mul(418776494);
+        let expected_result = CirclePointM31 { x: m31(1987283985), y: m31(1500510905) };
+
+        assert_eq!(result, expected_result);
+    }
+
+    #[test]
+    fn test_generator_order() {
+        let half_order = CIRCLE_ORDER / 2;
+        let mut result = M31_CIRCLE_GEN.mul(half_order);
+        let expected_result = CirclePointM31 { x: -m31(1), y: m31(0) };
+
+        // Assert `M31_CIRCLE_GEN^{2^30}` equals `-1`.
+        assert_eq!(expected_result, result);
+    }
+}
+

stwo_cairo_verifier/src/lib.cairo

@@ -1,4 +1,5 @@
 mod channel;
+mod circle;
 mod fields;
 mod utils;
 mod vcs;