Merge pull request #3249 from input-output-hk/damrobi/msnark/2944-trusted-setup-validation

feat(stm): Trusted setup validation

Author: damrobi

Cargo.lock

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.10.16 (05-07-2026)
+
+### Changed
+
+- Added a system to handle the downloading and verification of the SRS and to store it locally.
+
 ## 0.10.15 (05-07-2026)
 
 ### Changed

mithril-stm/CHANGELOG.md

@@ -1,6 +1,6 @@
 [package]
 name = "mithril-stm"
-version = "0.10.15"
+version = "0.10.16"
 edition = { workspace = true }
 authors = { workspace = true }
 homepage = { workspace = true }
@@ -30,7 +30,13 @@ future_snark = [
     "dep:rand",
     "dep:sha2",
     "dep:rand_chacha",
+    "dep:reqwest",
+    "rustls", # Temporarily activate rustls before it is activated in the caller
 ]
+# TLS backend for the SRS download client (used by `future_snark`).
+# Exactly one of these must be enabled together with `future_snark`.
+native-tls = ["reqwest?/native-tls"]
+rustls = ["reqwest?/rustls"]
 num-integer-backend = ["dep:num-bigint", "dep:num-integer", "dep:num-rational", "dep:num-traits"]
 rug-backend = ["rug/default"]
 
@@ -55,6 +61,7 @@ rand = { version = "0.10.1", optional = true }
 rand_chacha = { workspace = true, optional = true }
 rand_core = { workspace = true, features = ["std"] }
 rayon = { workspace = true }
+reqwest = { workspace = true, default-features = false, features = ["blocking"], optional = true }
 serde = { workspace = true }
 sha2 = { version = "0.10.9", optional = true }
 subtle = "2.6.1"
@@ -77,6 +84,7 @@ rug = { version = "1.29.0", optional = true }
 [dev-dependencies]
 blake2b_simd = "1.0.3"
 criterion = { version = "0.8.2", features = ["html_reports"] }
+httpmock = "0.8.3"
 num-bigint = "0.4.6"
 num-rational = "0.4.2"
 proptest = "1.11.0"

mithril-stm/Cargo.toml

@@ -7,10 +7,22 @@
 
 pub mod halo2;
 pub mod halo2_ivc;
+pub mod trusted_setup;
 
 #[cfg(test)]
 pub(crate) mod test_utils;
 
 pub(crate) use halo2::witness::{
     CircuitInstance, CircuitMerkleTreeLeaf, CircuitWitness, MerklePath,
 };
+
+/// Constant holding the current path of the cached values related to the circuits
+const MITHRIL_CIRCUIT_CACHE_FOLDER: &str = "mithril-circuit";
+
+#[cfg(all(
+    feature = "future_snark",
+    not(any(feature = "rustls", feature = "native-tls"))
+))]
+compile_error!(
+    "Enabling `future_snark` requires exactly one of the `rustls` or `native-tls` features."
+);