mirror of
https://github.com/luxfhe/torus.git
synced 2026-10-30 17:07:26 +00:00
zeekay
b832ba2c39
Forked from upstream concrete (BSD-3-Clause-Clear, © 2024 ZAMA) at HEAD
ecb729bb. Modifications copyright © 2026 Lux Industries Inc.
Rebranding scope:
- Python module concrete → torus (across frontends/torus-python)
- Rust module concrete-* → torus-* (across frontends/torus-rust)
- MLIR dialect concretelang → toruslang (across compilers/torus-compiler)
- Compiler optimizer concrete-optimizer → torus-optimizer
- Backend concrete-cpu / concrete-cuda → torus-cpu / torus-cuda
- Wire protocol concrete-protocol → torus-protocol
- Parameter-curves concrete-security-curves-* → torus-security-curves-*
- Public symbols concretelib → toruslib, ConcreteLang → TorusLang
- URLs github.com/zama-ai/concrete → github.com/luxfhe/torus
- URLs docs.zama.ai/concrete → docs.luxfhe.com/torus
Legal compliance:
- LICENSE.txt retains original Copyright © 2024 ZAMA verbatim (§1-§2)
- LICENSE.txt adds modifications copyright © 2026 Lux Industries Inc.
- §3 endorsement clause: Torus is marketed exclusively as a Lux product;
no Zama name used in README, docs, or marketing
- NOTICE file provides factual attribution per legal best practice
(not endorsement; required by upstream BSD-3-Clause-Clear)
README + NOTICE rewritten from scratch with Lux brand:
- Quick-start in Python (torus.fhe)
- Architecture diagram showing the gen-1 vtbl integration path
(luxcpp/gpu → lux-private/gpu-kernels for CUDA/Metal/WebGPU)
- Scheme coverage table: TFHE (luxfi/fhe), CKKS/BGV/BFV (luxfi/lattice)
- Lux FHE family table: Torus / TorusVM / TorusEVM / TorusML / TorusNet
Known limitations (phase-2A scope):
- PyPI package torus-fhe not yet published; the torus Python module
is renamed structurally but pip-installable distribution is a
follow-up (Phase 2A.1)
- MLIR dialect rename is text-level; the compiler-internal LLVM
rebuild (concrete-compiler-internal-llvm-project submodule) is
structural and works; tablegen files renamed concrete→torus but the
generated .inc files in the source tree will regenerate at build
time
- backends/torus-cuda/implementation/ is an upstream submodule
pointer to the tfhe-rs source (not fetched in the staging clone);
the CUDA backend body is delivered out-of-tree
- ~100 test-fixture variable names like concrete_encoded_sample
retain "concrete" as a math term (vs symbolic); these are inside
tests/, not the public API; cleanup is a follow-up commit
- 295 Python `from concrete import ...` residuals in luxfhe/ml-sdk
consumer remain; that repo's import update is Phase 2B
This commit is the seed for the luxfhe/torus repo. Push as the first
commit to a fresh GitHub repo; do not re-import upstream Zama git
history.
211 lines
6.0 KiB
Python
211 lines
6.0 KiB
Python
"""
|
|
Tests of `Keys` class.
|
|
"""
|
|
|
|
import tempfile
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
from torus import fhe
|
|
|
|
|
|
def test_keys_save_load(helpers):
|
|
"""
|
|
Test saving and loading keys.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x**2
|
|
|
|
inputset = range(10)
|
|
|
|
with tempfile.TemporaryDirectory() as tmp_dir:
|
|
tmp_dir_path = Path(tmp_dir)
|
|
keys_path = tmp_dir_path / "keys"
|
|
|
|
circuit1 = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
circuit1.keygen()
|
|
|
|
sample = circuit1.encrypt(5)
|
|
evaluation = circuit1.run(sample)
|
|
|
|
circuit1.keys.save(str(keys_path))
|
|
circuit2 = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
circuit2.keys.load(str(keys_path))
|
|
|
|
assert circuit2.decrypt(evaluation) == 25
|
|
|
|
|
|
def test_keys_bad_save_load(helpers):
|
|
"""
|
|
Test saving/loading keys where location is (not) empty.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x**2
|
|
|
|
with tempfile.TemporaryDirectory() as tmp_dir:
|
|
tmp_dir_path = Path(tmp_dir)
|
|
keys_path = tmp_dir_path / "keys"
|
|
|
|
inputset = range(10)
|
|
circuit = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
|
|
with pytest.raises(ValueError) as excinfo:
|
|
circuit.keys.load(keys_path)
|
|
|
|
expected_message = f"Unable to load keys from {keys_path} because it doesn't exist"
|
|
helpers.check_str(expected_message, str(excinfo.value))
|
|
|
|
with open(keys_path, "w", encoding="utf-8") as f:
|
|
f.write("foo")
|
|
|
|
circuit.keys.generate()
|
|
with pytest.raises(ValueError) as excinfo:
|
|
circuit.keys.save(keys_path)
|
|
|
|
expected_message = f"Unable to save keys to {keys_path} because it already exists"
|
|
helpers.check_str(expected_message, str(excinfo.value))
|
|
|
|
|
|
def test_keys_load_if_exists_generate_and_save_otherwise(helpers):
|
|
"""
|
|
Test saving and loading keys using `load_if_exists_generate_and_save_otherwise`.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x**2
|
|
|
|
inputset = range(10)
|
|
|
|
with tempfile.TemporaryDirectory() as tmp_dir:
|
|
tmp_dir_path = Path(tmp_dir)
|
|
keys_path = tmp_dir_path / "keys"
|
|
|
|
circuit1 = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
circuit1.keys.load_if_exists_generate_and_save_otherwise(str(keys_path))
|
|
|
|
sample = circuit1.encrypt(5)
|
|
evaluation = circuit1.run(sample)
|
|
|
|
circuit2 = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
circuit2.keys.load_if_exists_generate_and_save_otherwise(str(keys_path))
|
|
|
|
assert circuit2.decrypt(evaluation) == 25
|
|
|
|
|
|
def test_keys_bad_seed(helpers):
|
|
"""
|
|
Test serializing and deserializing keys.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x**2
|
|
|
|
inputset = range(10)
|
|
|
|
circuit = f.compile(inputset, helpers.configuration())
|
|
server = circuit.server
|
|
|
|
client1 = fhe.Client(server.client_specs)
|
|
|
|
with pytest.raises(ValueError) as excinfo:
|
|
client1.keys.generate(secret_seed=-1)
|
|
assert str(excinfo.value) == "secret_seed must be a positive 128 bits integer"
|
|
|
|
with pytest.raises(ValueError) as excinfo:
|
|
client1.keys.generate(secret_seed=2**128)
|
|
assert str(excinfo.value) == "secret_seed must be a positive 128 bits integer"
|
|
|
|
with pytest.raises(ValueError) as excinfo:
|
|
client1.keys.generate(encryption_seed=2**128)
|
|
assert str(excinfo.value) == "encryption_seed must be a positive 128 bits integer"
|
|
|
|
with pytest.raises(ValueError) as excinfo:
|
|
client1.keys.generate(encryption_seed=-1)
|
|
assert str(excinfo.value) == "encryption_seed must be a positive 128 bits integer"
|
|
|
|
|
|
def test_keys_serialize_deserialize(helpers):
|
|
"""
|
|
Test serializing and deserializing keys.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x**2
|
|
|
|
inputset = range(10)
|
|
|
|
circuit = f.compile(inputset, helpers.configuration())
|
|
server = circuit.server
|
|
|
|
client1 = fhe.Client(server.client_specs)
|
|
client1.keys.generate()
|
|
|
|
sample = client1.encrypt(5)
|
|
evaluation = server.run(sample, evaluation_keys=client1.evaluation_keys)
|
|
|
|
client2 = fhe.Client(server.client_specs)
|
|
client2.keys = fhe.Keys.deserialize(client1.keys.serialize())
|
|
|
|
assert client2.decrypt(evaluation) == 25
|
|
|
|
|
|
def test_keys_serialize_before_generation(helpers):
|
|
"""
|
|
Test serialization of keys before their generation.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x + 42
|
|
|
|
inputset = range(10)
|
|
circuit = f.compile(inputset, configuration=helpers.configuration())
|
|
|
|
with pytest.raises(RuntimeError) as excinfo:
|
|
circuit.keys.serialize()
|
|
|
|
expected_message = "Keys cannot be serialized before they are generated"
|
|
helpers.check_str(expected_message, str(excinfo.value))
|
|
|
|
with pytest.raises(RuntimeError) as excinfo:
|
|
# path doesn't matter as it will fail
|
|
circuit.keys.serialize_to_file(Path("_keys_file"))
|
|
|
|
expected_message = "Keys cannot be serialized before they are generated"
|
|
helpers.check_str(expected_message, str(excinfo.value))
|
|
|
|
|
|
def test_keys_generate_manual_seed(helpers):
|
|
"""
|
|
Test key generation with custom seed.
|
|
"""
|
|
|
|
@fhe.compiler({"x": "encrypted"})
|
|
def f(x):
|
|
return x**2
|
|
|
|
inputset = range(10)
|
|
|
|
circuit = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
assert not circuit.keys.are_generated
|
|
circuit.keygen(seed=42, encryption_seed=24)
|
|
assert circuit.keys.are_generated
|
|
|
|
sample = circuit.encrypt(5)
|
|
evaluation = circuit.run(sample)
|
|
|
|
same_circuit = f.compile(inputset, helpers.configuration().fork(use_insecure_key_cache=False))
|
|
assert not same_circuit.keys.are_generated
|
|
same_circuit.keygen(seed=42)
|
|
assert same_circuit.keys.are_generated
|
|
|
|
assert same_circuit.decrypt(evaluation) == 25
|