The following document describes the gas model of IELE. Note that this gas model should be considered a first draft and may be subject to changes before deploying IELE on a live blockchain. Gas is consumed either by increasing the amount of memory being used, or by the computational effort to execute instructions.
module IELE-GAS
imports IELE-DATA
imports IELE-CONFIGURATION
imports IELE-COMMON
imports IELE-INFRASTRUCTURE
imports IELE-PRECOMPILED
The gas cost of an instruction is the cost incurred from the memory used by the instruction plus the computational cost of executing the instruction.
#gascalculates how much gas this operation costs, and takes into account the memory consumed.#deductGasdeducts a specific integer amount of gas, raising an out of gas exception if insufficient gas remains.
syntax InternalOp ::= "#deductGas"
// ----------------------------------
rule <k> #gas [ OP ] => #memory [ OP ] ~> #compute [ OP , SCHED ] ~> #deductGas ... </k> <schedule> SCHED </schedule>
rule <k> G:Int ~> #deductGas => #exception OUT_OF_GAS ... </k> <gas> GAVAIL </gas> requires GAVAIL <Int G
rule <k> G:Int ~> #deductGas => . ... </k> <gas> GAVAIL => GAVAIL -Int G </gas> <previousGas> _ => GAVAIL </previousGas> requires GAVAIL >=Int G
The current choices in IELE are similar to those for EVM:
- each contract has a default amount of memory within which to execute;
- memory over the limit incurs a quadratic allocation cost
- memory is charged only at allocation time
However, IELE allows registers and memory cells to refer to these arbitrarily large numbers. Moreover, the amount of memory/storage required for representing the value of a register or memory/storage cell, instead of being fixed at 256 bits, now varies during its usage. This was previously only considered for permanent storage (resetting a stored value to 0 would generate a refund).
Memory consumed is tracked to determine the appropriate amount of gas to charge for each operation. As noted above, unlike EVM, the amount of used memory in IELE can decrease when memory cells are deallocated or resized.
#memorycomputes the memory variation given the next operator (with its arguments).#registerDeltacomputes the memory variation introduced by resizing the return register to fit the value computed by the next operator.
Note that the values returned by the above functions could be negative.
syntax InternalOp ::= "#memory" "[" Instruction "]"
// ---------------------------------------------------
The size of the result register REG for an arithmetic operation is estimated
as follows:
REG = not Wsize of bitwise negation of W is the same as that of W.REG = and W0, W1Size of result is the minimum of the sizes of W0 and W1, because bitwise and-ing with 0 yields 0REG = or W0, W1andREG = xor W0, W1size of the result is the maximum of the sizes of W0 and W1REG = shift W0, W1size of the result is the size of the variable modified by the shift amount (positive for left shift, negative for right shift)REG = log2 Wsize of logarithm base 2 is equal to at most 8 * the size in bytes of the number, which must be less than 2^64 to fit in memory on a 64-bit processor. We can compute this as a linear cost on the word size because it is a floored logarithm and can be computed using bit counting.
rule #memory [ REG = not W ] => #registerDelta(REG, intSize(W))
rule #memory [ REG = and W0 , W1 ] => #registerDelta(REG, minInt(intSize(W0), intSize(W1)))
rule #memory [ REG = or W0 , W1 ] => #registerDelta(REG, maxInt(intSize(W0), intSize(W1)))
rule #memory [ REG = xor W0 , W1 ] => #registerDelta(REG, maxInt(intSize(W0), intSize(W1)))
rule <k> #memory [ REG = shift W0 , W1 ] => #registerDelta(REG, maxInt(1, intSize(W0) +Int bitsInWords(W1, SCHED))) ... </k> <schedule> SCHED </schedule>
rule #memory [ REG = log2 _W ] => #registerDelta(REG, 2)
Since the result is boolean, the result size for all comparison operations is 1.
rule #memory [ REG = iszero _ ] => #registerDelta(REG, 1)
rule #memory [ REG = cmp _ _ , _ ] => #registerDelta(REG, 1)
REG = add W0, W1andREG = sub W0, W1the result can require at most one more memory word than the maximum of the sizes of W0 and W1.REG = mul W0, W1the size of the result of multiplication can be at most the sum of the sizes of W0 and W1.REG = div W0, W1the result of division can require 1 word more than the difference between the sizes of W0 and W1.REG = mod W0, W1the size of the result is at most the minimum of the sizes of W0 and W1.REG = exp W0, W1the size of the result is equal to the size of the base multiplied by the exponent.
rule #memory [ REG = add W0 , W1 ] => #registerDelta(REG, maxInt(intSize(W0), intSize(W1)) +Int 1)
rule #memory [ REG = sub W0 , W1 ] => #registerDelta(REG, maxInt(intSize(W0), intSize(W1)) +Int 1)
rule #memory [ REG = mul W0 , W1 ] => #registerDelta(REG, intSize(W0) +Int intSize(W1))
rule #memory [ REG = div W0 , W1 ] => #registerDelta(REG, maxInt(1, intSize(W0) -Int intSize(W1) +Int 1))
rule #memory [ REG = mod W0 , W1 ] => #registerDelta(REG, minInt(intSize(W0), intSize(W1)))
rule #memory [ REG = exp W0 , W1 ] => #registerDelta(REG, #adjustedBitLength(intSize(W0), W0) *Int W1 /Int 64)
For all modular arithmetic operations, the size of the result is at most that of the modulo operand (W2).
rule #memory [ REG = addmod _ , _ , W2 ] => #registerDelta(REG, intSize(W2))
rule #memory [ REG = mulmod _ , _ , W2 ] => #registerDelta(REG, intSize(W2))
rule #memory [ REG = expmod _ , _ , W2 ] => #registerDelta(REG, intSize(W2))
Result size of SHA3 is 256 bits, i.e., 4 words.
rule <k> #memory [ REG = sha3 _ ] => #registerDelta(REG, bitsInWords(256, SCHED)) ... </k> <schedule> SCHED </schedule>
REG = byte INDEX, Wthe result size is one byte, fitting in one wordREG = sext WIDTH , W,REG = twos WIDTH , W, andREG = bswap WIDTH , Wthe result size is WIDTH bytes, i.e., WIDTH / 8 words.
rule #memory [ REG = byte _INDEX , _ ] => #registerDelta(REG, bytesInWords(1))
rule #memory [ REG = sext WIDTH , _ ] => #registerDelta(REG, bytesInWords(chop(WIDTH)))
rule #memory [ REG = twos WIDTH , _ ] => #registerDelta(REG, bytesInWords(chop(WIDTH)))
rule #memory [ REG = bswap WIDTH , _ ] => #registerDelta(REG, bytesInWords(chop(WIDTH)))
Operations whose result should fit into a word.
rule #memory [ REG = call @iele.gas ( .Ints ) ] => #registerDelta(REG, 1)
rule #memory [ REG = call @iele.gasprice ( .Ints ) ] => #registerDelta(REG, 1)
rule #memory [ REG = call @iele.gaslimit ( .Ints ) ] => #registerDelta(REG, 1)
rule #memory [ REG = call @iele.number ( .Ints ) ] => #registerDelta(REG, 1)
rule #memory [ REG = call @iele.msize ( .Ints ) ] => #registerDelta(REG, 1)
rule #memory [ REG = call @iele.codesize ( .Ints ) ] => #registerDelta(REG, 1)
rule #memory [ REG = call @iele.extcodesize ( _ ) ] => #registerDelta(REG, 1)
rule #memory [ REG = calladdress _ at _ ] => #registerDelta(REG, 1)
Operations whose result is an address:
rule #memory [ REG = call @iele.beneficiary ( .Ints ) ] => #registerDelta(REG, bytesInWords(20))
rule #memory [ REG = call @iele.address ( .Ints ) ] => #registerDelta(REG, bytesInWords(20))
rule #memory [ REG = call @iele.origin ( .Ints ) ] => #registerDelta(REG, bytesInWords(20))
rule #memory [ REG = call @iele.caller ( .Ints ) ] => #registerDelta(REG, bytesInWords(20))
Operations whose result should fit into 256 bits.
rule <k> #memory [ REG = call @iele.timestamp ( .Ints ) ] => #registerDelta(REG, bitsInWords(256, SCHED)) ... </k> <schedule> SCHED </schedule>
rule <k> #memory [ REG = call @iele.difficulty ( .Ints ) ] => #registerDelta(REG, bitsInWords(256, SCHED)) ... </k> <schedule> SCHED </schedule>
rule <k> #memory [ REG = call @iele.callvalue ( .Ints ) ] => #registerDelta(REG, bitsInWords(256, SCHED)) ... </k> <schedule> SCHED </schedule>
rule <k> #memory [ REG = call @iele.blockhash ( _ ) ] => #registerDelta(REG, bitsInWords(256, SCHED)) ... </k> <schedule> SCHED </schedule>
rule <k> #memory [ REG = call @iele.balance ( _ ) ] => #registerDelta(REG, bitsInWords(256, SCHED)) ... </k> <schedule> SCHED </schedule>
The memory cost of assigning a register or immediate to a register is the cost associated with resizing the register to equal the value being assigned.
rule <k> #memory [ DEST = % SRC:Int ] => #registerDelta(DEST, intSize(getInt(REGS [ SRC ]))) ... </k>
<regs> REGS </regs>
rule <k> #memory [ DEST = SRC:Int ] => #registerDelta(DEST, intSize(SRC)) ... </k>
The memory cost of a function call is the cost of initializing a new set of registers plus the cost of saving the return address and other information on the function stack. The latter is a constant. For the former, each register used by the function call consumes one word by default, except for the parameters to the function, which consume as much as the size of their arguments.
rule <k> #memory [ _REGS = call @ NAME ( ARGS ) ] => #memoryDelta(REGISTERS -Int #sizeRegs(ARGS) +Int intSizes(ARGS) +Int Gcallmemory < SCHED >) ... </k>
<schedule> SCHED </schedule>
<funcId> NAME </funcId>
<nregs> REGISTERS </nregs>
rule <k> #memory [ _ = call (IDX:Int => @ FUNC) ( _ ) ] ... </k>
<funcLabels> ... IDX |-> FUNC ... </funcLabels>
// this will throw an exception, so the gas cost doesn't really matter
rule <k> #memory [ _ = call IDX:Int ( _ ) ] => . ... </k>
<funcLabels> LABELS </funcLabels>
requires notBool IDX in_keys(LABELS)
The memory cost of returning to a function is negative. Instead of charging a gas cost, memory is reclaimed according to the memory freed by returning from the function. In other words, we free the call frame on the stack, as well as each of the registers in the callee.
There is also some memory change associated with assigning ARGS to the
caller's registers, but that is handled in iele.md.
rule <k> #memory [ ret _ARGS ] => #memoryDelta(0 -Int intSizes(REGS, NREGS, SCHED) -Int Gcallmemory < SCHED >) ... </k>
<schedule> SCHED </schedule>
<fid> NAME </fid>
<regs> REGS </regs>
<funcId> NAME </funcId>
<nregs> NREGS </nregs>
REG = load INDEX1 , INDEX2 , WIDTHWe resize the return register to fit the loaded dataREG = store INDEX1 , INDEX2 , WIDTHthe memory needs to potentially be extended to include the entire segment being stored.REG = load INDEXthe size of the register needs to be resized to fit the size of the value at the INDEX in memoryREG = store VALUE, INDEXthe memory cell at INDEX needs to be resized to store VALUE
rule #memory [ REG = load _INDEX1 , _INDEX2 , WIDTH ] => #registerDelta(REG, bytesInWords(chop(WIDTH)))
rule #memory [ store _ , INDEX1 , INDEX2 , WIDTH ] => #memoryExpand(INDEX1, bytesInWords(chop(INDEX2) +Int chop(WIDTH))) requires chop(WIDTH) >Int 0
rule #memory [ store _ , _INDEX1 , _INDEX2 , WIDTH ] => .K requires chop(WIDTH) ==Int 0
rule <k> #memory [ REG = load INDEX ] => #registerDelta(REG, bytesInWords(lengthBytes(LM))) ... </k>
<localMem>... INDEX |-> LM ...</localMem>
rule <k> #memory [ REG = load INDEX ] => #registerDelta(REG, 0)... </k>
<localMem> LM </localMem>
requires notBool INDEX in_keys(LM)
rule #memory [ store VALUE , INDEX ] => #memoryDelta(INDEX, intSize(VALUE))
Storage contains arbitrary-precision values, therefore the memory cost of loading a value from storage is the cost associated with resizing the register to equal the value contained in storage.
rule <k> #memory [ REG = sload INDEX ] => #registerDelta(REG, intSize(VALUE)) ... </k>
<id> ACCT </id>
<account>
<acctID> ACCT </acctID>
<storage> ... INDEX |-> VALUE ... </storage>
...
</account>
rule <k> (.K => #lookupStorage(ACCT, INDEX)) ~> #memory [ _ = sload INDEX ] ... </k>
<id> ACCT </id>
<account>
<acctID> ACCT </acctID>
<storage> STORAGE </storage>
...
</account>
requires notBool INDEX in_keys(STORAGE)
Storing to storage incurs no memory cost (its disk cost is included in its computational cost).
rule #memory [ sstore _ , _ ] => .
The following instructions do not incur any memory costs as they either do not return a value and do not write to memory, or else their memory cost is paid after the instruction executes.
For example, revert, ret, call, staticcall, create, and copycreate each invoke #registerDelta directly
as part of the process of returning from a contract. For information on how these are used, refer to the usages in iele.md.
For revert there is some memory change associated with changing the caller's
registers, but that is handled in iele.md.
rule #memory [ br _ ] => .
rule #memory [ br _ , _ ] => .
rule #memory [ revert _ ] => .
rule #memory [ log _ ] => .
rule #memory [ log _ , _ ] => .
rule #memory [ selfdestruct _ ] => .
rule <k> #memory [ ret _ ] => . ... </k> <localCalls> .List </localCalls>
rule #memory [ _ = call _ at _ ( _ ) send _ , gaslimit _ ] => .
rule #memory [ _ = staticcall _ at _ ( _ ) gaslimit _ ] => .
rule #memory [ _ , _ = create _ ( _ ) send _ ] => .
rule #memory [ _ , _ = copycreate _ ( _ ) send _ ] => .
rule #memory [ ECREC ] => .
rule #memory [ SHA256 ] => .
rule #memory [ RIP160 ] => .
rule #memory [ ID ] => .
rule #memory [ ECADD ] => .
rule #memory [ ECMUL ] => .
rule #memory [ ECPAIRING ] => .
As the current amount of allocated memory can also decrease in IELE, memory costs are computed w.r.t. the peak level of allocated memory. Therefore, the configuration also contains a cell for the peak memory level, which is maintained by the next rules.
#registerDeltacomputes the new peak memory usage based on an estimation of the size of the result of the instruction, and incurs gas cost if the new peak is greater than the old peak. It does not update<currentMemory, which is updated when registers are actually written by#loadiniele.md. The delta is the estimated size after the instruction minus the current size before the instruction.
syntax InternalOp ::= #registerDelta ( LValue , Int )
// -----------------------------------------------------
rule <k> #registerDelta(% REG, NEWSIZE) => #deductMemory(PEAK) ... </k>
<currentMemory> CURR </currentMemory>
<regs> REGS </regs>
<peakMemory> PEAK => maxInt(PEAK, CURR +Int NEWSIZE -Int intSize(getInt(REGS [ REG ]))) </peakMemory>
#registerDeltasinvokes#registerDeltaon a sequence of registers and values, using their exact size. This form is invoked when a contract returns and the return registers of an inter-contract call instruction are written.
syntax InternalOp ::= #registerDeltas ( LValues , Ints )
// --------------------------------------------------------
rule #registerDeltas(REG, REGS, INT, INTS) => #registerDelta(REG, intSize(INT)) ~> #registerDeltas(REGS, INTS)
rule #registerDeltas(.LValues, _) => .K
rule #registerDeltas(_, .Ints) => .K
#memoryExpandupdates<currentMemory>and<peakMemory>and incurs the gas cost if peak memory increases. It accepts a memory cell and its new size and computes the delta based on the difference in sizes before and after the instruction. However, it does not ever decrease the current memory usage, only expanding it up to the new size if it is less than that size currently.#memoryDeltadoes the same as#memoryExpandexcept that it can also decrease the current memory if the new size is less than the old size.#memoryDeltaalso takes a one argument form which takes an exact delta. This is used by function call/return and in other places where a memory delta occurs despite no write to local memory.#deductMemorycomputes the actual gas cost from the old and new peak memory.
syntax InternalOp ::= #memoryExpand ( Int , Int )
| #memoryDelta ( Int , Int )
| #memoryDelta ( Int ) [klabel(memoryDirectDelta)]
// ------------------------------------------------------------------------
rule <k> #memoryExpand(INDEX, NEWSIZE) => #deductMemory(PEAK) ... </k>
<localMem>... INDEX |-> LM ...</localMem>
<currentMemory> CURR => CURR +Int maxInt(0, NEWSIZE -Int bytesInWords((lengthBytes(LM)))) </currentMemory>
<peakMemory> PEAK => maxInt(PEAK, CURR +Int maxInt(0, NEWSIZE -Int bytesInWords((lengthBytes(LM))))) </peakMemory>
rule <k> #memoryExpand(INDEX, NEWSIZE) => #deductMemory(PEAK) ... </k>
<localMem> LM </localMem>
<currentMemory> CURR => CURR +Int NEWSIZE </currentMemory>
<peakMemory> PEAK => maxInt(PEAK, CURR +Int NEWSIZE) </peakMemory>
requires notBool INDEX in_keys(LM)
rule <k> #memoryDelta(INDEX, NEWSIZE) => #deductMemory(PEAK) ... </k>
<localMem>... INDEX |-> LM ...</localMem>
<currentMemory> CURR => CURR +Int NEWSIZE -Int bytesInWords((lengthBytes(LM))) </currentMemory>
<peakMemory> PEAK => maxInt(PEAK, CURR +Int NEWSIZE -Int bytesInWords((lengthBytes(LM)))) </peakMemory>
rule <k> #memoryDelta(INDEX, NEWSIZE) => #deductMemory(PEAK) ... </k>
<localMem> LM </localMem>
<currentMemory> CURR => CURR +Int NEWSIZE </currentMemory>
<peakMemory> PEAK => maxInt(PEAK, CURR +Int NEWSIZE) </peakMemory>
requires notBool INDEX in_keys(LM)
rule <k> #memoryDelta(DELTA) => #deductMemory(PEAK) ... </k>
<currentMemory> CURR => CURR +Int DELTA </currentMemory>
<peakMemory> PEAK => maxInt(PEAK, CURR +Int DELTA) </peakMemory>
syntax InternalOp ::= #deductMemory ( Int )
// -------------------------------------------
rule <k> #deductMemory(OLDPEAK) => Cmem(SCHED, NEWPEAK) -Int Cmem(SCHED, OLDPEAK) ~> #deductGas ... </k>
<schedule> SCHED </schedule>
<peakMemory> NEWPEAK </peakMemory>
Cmemcomputes the absolute cost of using N bytes of memory. It scales linearly up to a certain amount and quadratically afterwards. A certain amount of memory is also free, as computed byCpricedmem.Cpricedmemis the memory that is actually charged, which is the actual memory usage minus the memory allowance, which is an amount of memory free in each contract call frame.
syntax Int ::= Cmem ( Schedule , Int ) [function, memo]
| Cpricedmem ( Schedule, Int ) [function]
// -------------------------------------------------------
rule Cmem(SCHED, N) => (Cpricedmem(SCHED, N) *Int Gmemory < SCHED >) +Int ((Cpricedmem(SCHED, N) *Int Cpricedmem(SCHED, N)) /Int Gquadcoeff < SCHED >)
rule Cpricedmem(SCHED, N) => maxInt(0, N -Int Smemallowance < SCHED > )
Each opcode has an intrinsic gas cost of execution as well.
#computeloads all the relevant surronding state and uses that to compute the intrinsic execution gas of each opcode.
Note that, unlike EVM, operations need to take into account the size of the operands.
syntax InternalOp ::= "#compute" "[" Instruction "," Schedule "]"
// -----------------------------------------------------------------
The bitwise expressions have a constant cost plus a linear factor in the number of words manipulated.
rule #compute [ _ = not W, SCHED ] => Gnot < SCHED > +Int intSize(W) *Int Gnotword < SCHED >
rule #compute [ _ = and W0 , W1, SCHED ] => Gbitwise < SCHED > +Int minInt(intSize(W0), intSize(W1)) *Int Gbitwiseword < SCHED >
rule #compute [ _ = or W0 , W1, SCHED ] => Gbitwise < SCHED > +Int maxInt(intSize(W0), intSize(W1)) *Int Gbitwiseword < SCHED >
rule #compute [ _ = xor W0 , W1, SCHED ] => Gnot < SCHED > +Int maxInt(intSize(W0), intSize(W1)) *Int Gnotword < SCHED >
rule #compute [ _ = shift W0 , W1, SCHED ] => Gbitwise < SCHED > +Int maxInt(1, intSize(W0) +Int bitsInWords(W1, SCHED)) *Int Gbitwiseword < SCHED >
rule #compute [ _ = log2 W, SCHED ] => Glogarithm < SCHED > +Int intSize(W) *Int Glogarithmword < SCHED >
iszero has a constant cost, whereas cmp has a constant cost and a linear factor in the smaller of the two sizes.
rule #compute [ _ = iszero _W, SCHED ] => Giszero < SCHED >
rule #compute [ _ = cmp _ W0 , W1, SCHED ] => Gcmp < SCHED > +Int minInt(intSize(W0), intSize(W1)) *Int Gcmpword < SCHED >
addandsubhave a linear cost in the larger of the two sizes.mul,div,modandexphave more complicated costs, which are detailed elswhere.
rule #compute [ _ = add W0 , W1, SCHED ] => Gadd < SCHED > +Int maxInt(intSize(W0), intSize(W1)) *Int Gaddword < SCHED >
rule #compute [ _ = sub W0 , W1, SCHED ] => Gadd < SCHED > +Int maxInt(intSize(W0), intSize(W1)) *Int Gaddword < SCHED >
rule #compute [ _ = mul W0 , W1, SCHED ] => Cmul(SCHED, intSize(W0), intSize(W1))
rule #compute [ _ = div W0 , W1, SCHED ] => Cdiv(SCHED, intSize(W0), intSize(W1))
rule #compute [ _ = mod W0 , W1, SCHED ] => Cdiv(SCHED, intSize(W0), intSize(W1))
rule #compute [ _ = exp W0 , W1, SCHED ] => Cexp(SCHED, intSize(W0), W0, W1)
addmodis the cost of an addition plus the cost of the modulus.mulmodis the cost of two moduli, plus a multiplication, plus another modulus.expmodhas a more complicated cost and is defined elswhere.
rule #compute [ _ = addmod W0 , W1 , W2, SCHED ] => Gadd < SCHED > +Int maxInt(intSize(W0), intSize(W1)) *Int Gaddword < SCHED > +Int Cdiv(SCHED, maxInt(intSize(W0), intSize(W1)) +Int 1, intSize(W2))
rule #compute [ _ = mulmod W0 , W1 , W2, SCHED ] => Cmul(SCHED, intSize(W0), intSize(W1)) +Int Cdiv(SCHED, intSize(W0) +Int intSize(W1), intSize(W2))
rule #compute [ _ = expmod W0 , W1 , W2, SCHED ] => Cexpmod(SCHED, intSize(W0), intSize(W1), intSize(W2), W2)
The cost of hashing a memory cell is equal to a constant plus the size of the cell in words.
rule <k> #compute [ _ = sha3 W0, SCHED ] => Gsha3 < SCHED > +Int bytesInWords(lengthBytes(LM)) *Int Gsha3word < SCHED > ... </k>
<localMem>... W0 |-> LM ...</localMem>
rule <k> #compute [ _ = sha3 W0, SCHED ] => Gsha3 < SCHED > ... </k>
<localMem> LM </localMem>
requires notBool W0 in_keys(LM)
bytehas a constant cost.twos,sext, andbswaphave a constant cost plus a linear factor in theWIDTHparameter.
rule #compute [ _ = byte _ , _, SCHED ] => Gbyte < SCHED >
rule #compute [ _ = twos WIDTH, _, SCHED ] => Gtwos < SCHED > +Int maxInt(1, bytesInWords(chop(WIDTH))) *Int Gtwosword < SCHED >
rule #compute [ _ = sext WIDTH, _, SCHED ] => Gsext < SCHED > +Int maxInt(1, bytesInWords(chop(WIDTH))) *Int Gsextword < SCHED >
rule #compute [ _ = bswap WIDTH, _, SCHED ] => Gbswap < SCHED > +Int maxInt(1, bytesInWords(chop(WIDTH))) *Int Gbswapword < SCHED >
Each of these operations merely reads a constant value from the execution context.
rule #compute [ _ = call @iele.gas ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.gasprice ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.gaslimit ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.number ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.msize ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.codesize ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.beneficiary ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.address ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.origin ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.caller ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.timestamp ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.difficulty ( _ ), SCHED ] => Greadstate < SCHED >
rule #compute [ _ = call @iele.callvalue ( _ ), SCHED ] => Greadstate < SCHED >
The blockhash function looks up state in the blockchain, and is therefore more expensive than the other builtin functions.
rule #compute [ _ = call @iele.blockhash ( _ ), SCHED ] => Gblockhash < SCHED >
Each of these operations pays a constant cost to look up information about an account on the network.
rule #compute [ _ = call @iele.balance ( _ ), SCHED ] => Gbalance < SCHED >
rule #compute [ _ = call @iele.extcodesize ( _ ), SCHED ] => Gextcodesize < SCHED >
rule #compute [ _ = calladdress _ at _, SCHED ] => Gcalladdress < SCHED >
The cost to load a value into a register is simply the cost to copy its value.
rule <k> #compute [ _DEST = % SRC:Int, SCHED ] => Gmove < SCHED > *Int intSize(getInt(REGS [ SRC ])) ... </k>
<regs> REGS </regs>
requires notBool Gnewmove << SCHED >>
rule <k> #compute [ _DEST = % _SRC:Int, SCHED ] => Gmove < SCHED > ... </k>
requires Gnewmove << SCHED >>
rule <k> #compute [ _DEST = SRC:Int, SCHED ] => Gmove < SCHED > *Int intSize(SRC) ... </k>
requires notBool Gnewmove << SCHED >>
rule <k> #compute [ _DEST = _SRC:Int, SCHED ] => Gmove < SCHED > ... </k>
requires Gnewmove << SCHED >>
The cost of jumping to a label, both conditionally and unconditionally, is a constant, but the cost of a conditional jump is slightly higher since it must test the register against zero.
rule #compute [ br _, SCHED ] => Gbr < SCHED >
rule #compute [ br _ , _, SCHED ] => Gbrcond < SCHED >
The cost of an intra-contract call is the cost to initialize the new set of registers, the cost to copy the arguments to the call frame, and the constant cost to perform the jump and store the return address.
rule <k> #compute [ _ = call @ NAME ( ARGS ), SCHED ] => Gcallreg < SCHED > *Int REGISTERS +Int intSizes(ARGS) *Int Gmove < SCHED > +Int Glocalcall < SCHED > ... </k>
<funcId> NAME </funcId>
<nregs> REGISTERS </nregs>
requires notBool Gnewmove << SCHED >>
rule <k> #compute [ _ = call @ NAME ( _ARGS ), SCHED ] => Gcallreg < SCHED > *Int REGISTERS +Int Glocalcall < SCHED > ... </k>
<funcId> NAME </funcId>
<nregs> REGISTERS </nregs>
requires Gnewmove << SCHED >>
rule <k> #compute [ _ = call (IDX:Int => @ FUNC) ( _ ), _ ] ... </k>
<funcLabels> ... IDX |-> FUNC ... </funcLabels>
// this will throw an exception, so the gas cost doesn't really matter
rule <k> #compute [ _ = call IDX:Int ( _ ), _ ] => 0 ... </k>
<funcLabels> LABELS </funcLabels>
requires notBool IDX in_keys(LABELS)
The cost to return is folded into the cost of the call instruction.
rule <k> #compute [ ret ARGS::NonEmptyInts, SCHED ] => Gmove < SCHED > *Int #sizeRegs(ARGS) +Int 8 ... </k>
<localCalls> ListItem(_) ... </localCalls>
requires notBool Gnewmove << SCHED >>
rule <k> #compute [ ret _::NonEmptyInts, SCHED ] => 0 ... </k>
<localCalls> .List </localCalls>
requires notBool Gnewmove << SCHED >>
rule <k> #compute [ ret _::NonEmptyInts, SCHED ] => 0 ... </k>
requires Gnewmove << SCHED >>
rule #compute [ revert _, _SCHED ] => 0
The cost to call another contract is very similar to the cost in EVM:
- A constant cost for the call itself
- A constant cost if a value is transferred along with the call
- A constant cost if the call creates a new empty account
- The cost of initializing the memory of the called frame with the arguments to the function.
- The gas stipend paid to the callee to execute its code.
rule <k> #compute [ _, RETS::LValues = call _ at ACCTTO ( ARGS ) send VALUE , gaslimit GCAP, SCHED ] => Ccall(SCHED, #accountEmpty(ACCTTO), GCAP *Int Sgasdivisor < SCHED >, GAVAIL, VALUE, #sizeLVals(RETS), Ccallarg(SCHED, ARGS)) ... </k>
<gas> GAVAIL </gas>
rule <k> #compute [ _, RETS::LValues = staticcall _ at ACCTTO ( ARGS ) gaslimit GCAP, SCHED ] => Ccall(SCHED, #accountEmpty(ACCTTO), GCAP *Int Sgasdivisor < SCHED >, GAVAIL, 0, #sizeLVals(RETS), Ccallarg(SCHED, ARGS)) ... </k>
<gas> GAVAIL </gas>
The cost of logging is similar to the cost in EVM: a constant ccost plus a cost per byte of unindexed data plus a cost per indexed log topic.
rule <k> #compute [ log IDX, SCHED ] => (Glog < SCHED > +Int (Glogdata < SCHED > *Int bytesInWords(lengthBytes(LM))) +Int (0 *Int Glogtopic < SCHED >)) ... </k> <localMem>... IDX |-> LM ...</localMem>
rule <k> #compute [ log IDX , _:Int, SCHED ] => (Glog < SCHED > +Int (Glogdata < SCHED > *Int bytesInWords(lengthBytes(LM))) +Int (1 *Int Glogtopic < SCHED >)) ... </k> <localMem>... IDX |-> LM ...</localMem>
rule <k> #compute [ log IDX , _:Int , _:Int, SCHED ] => (Glog < SCHED > +Int (Glogdata < SCHED > *Int bytesInWords(lengthBytes(LM))) +Int (2 *Int Glogtopic < SCHED >)) ... </k> <localMem>... IDX |-> LM ...</localMem>
rule <k> #compute [ log IDX , _:Int , _:Int , _:Int, SCHED ] => (Glog < SCHED > +Int (Glogdata < SCHED > *Int bytesInWords(lengthBytes(LM))) +Int (3 *Int Glogtopic < SCHED >)) ... </k> <localMem>... IDX |-> LM ...</localMem>
rule <k> #compute [ log IDX , _:Int , _:Int , _:Int, _:Int, SCHED ] => (Glog < SCHED > +Int (Glogdata < SCHED > *Int bytesInWords(lengthBytes(LM))) +Int (4 *Int Glogtopic < SCHED >)) ... </k> <localMem>... IDX |-> LM ...</localMem>
rule <k> #compute [ log IDX, _SCHED ] ... </k>
<localMem> LM (.Map => IDX |-> .Bytes) </localMem>
requires notBool IDX in_keys(LM)
rule <k> #compute [ log IDX, _, _SCHED ] ... </k>
<localMem> LM (.Map => IDX |-> .Bytes) </localMem>
requires notBool IDX in_keys(LM)
loadpays a constant cost plus a cost per word loaded. The constant cost is higher if we must compute the width to be loaded dynamically.storepays a constant cost plus a cost per word stored. The constant cost is higher if we must compute the width to be stored dynamically.
rule <k> #compute [ _ = load INDEX, SCHED ] => Gloadcell < SCHED > +Int bytesInWords(lengthBytes(LM)) *Int Gloadword < SCHED > ... </k>
<localMem>... INDEX |-> LM ...</localMem>
rule <k> #compute [ _ = load INDEX, SCHED ] => Gloadcell < SCHED > ... </k>
<localMem> LM </localMem>
requires notBool INDEX in_keys(LM)
rule #compute [ _ = load _INDEX , _OFFSET , WIDTH, SCHED ] => Gload < SCHED > +Int bytesInWords(WIDTH) *Int Gloadword < SCHED >
rule #compute [ store VALUE , _INDEX, SCHED ] => Gstorecell < SCHED > +Int intSize(VALUE) *Int Gstoreword < SCHED >
rule #compute [ store _VALUE , _INDEX , _OFFSET , WIDTH, SCHED ] => Gstore < SCHED > +Int bytesInWords(WIDTH) *Int Gstoreword < SCHED >
sloadpays a constant cost plus a cost per word in the key, plus a cost per word loaded.
rule <k> #compute [ _ = sload INDEX, SCHED ] => Gsload < SCHED > +Int Gsloadkey < SCHED > *Int intSize(INDEX) +Int Gsloadword < SCHED > *Int intSize(VALUE) ... </k>
<id> ACCT </id>
<account>
<acctID> ACCT </acctID>
<storage> ... INDEX |-> VALUE ... </storage>
...
</account>
sstorepays a constant cost plus a cost per word in the key and in the value, plus a larger cost for increasing the size of the storage of the account that is partially refunded when the storage is released.
rule <k> #compute [ sstore VALUE , INDEX, SCHED ] => Csstore(SCHED, INDEX, VALUE, OLDVALUE) ... </k>
<id> ACCT </id>
<account>
<acctID> ACCT </acctID>
<storage> ... INDEX |-> OLDVALUE ... </storage>
...
</account>
rule <k> (.K => #lookupStorage(ACCT, INDEX)) ~> #compute [ sstore _VALUE , INDEX, _ ] ... </k>
<id> ACCT </id>
<account>
<acctID> ACCT </acctID>
<storage> STORAGE </storage>
...
</account>
requires notBool INDEX in_keys(STORAGE)
createpays a constant cost to initialize the account, a cost to copy the arguments of the constructor, plus a stipend to the constructor of 63/64ths of the current gas.copycreatepays a very similar cost tocreatebut with a slightly higher constant because the account code must be looked up on the blockchain.
rule #compute [ _ , _ = create _ ( ARGS ) send _, SCHED ] => Gcreate < SCHED > +Int Gmove < SCHED > *Int Ccallarg(SCHED, ARGS)
rule #compute [ _ , _ = copycreate _ ( ARGS ) send _, SCHED ] => Gcopycreate < SCHED > +Int Gmove < SCHED > *Int Ccallarg(SCHED, ARGS)
selfdestructcosts a fixed amount plus a cost if the account the funds are transferred to must be created.
rule <k> #compute [ selfdestruct ACCTTO, SCHED ] => Cselfdestruct(SCHED, #accountEmpty(ACCTTO), BAL) ... </k>
<id> ACCTFROM </id>
<account>
<acctID> ACCTFROM </acctID>
<balance> BAL </balance>
...
</account>
Each of the precompiled contracts pays a fixed cost per word of data passed to the contract plus a constant.
rule <k> #compute [ ECREC, SCHED ] => Gecrec < SCHED > ... </k>
rule <k> #compute [ SHA256, SCHED ] => Gsha256 < SCHED > +Int Gsha256word < SCHED > *Int bytesInWords(maxInt(LEN, intSize(DATA))) ... </k> <callData> LEN , DATA , .Ints </callData>
rule <k> #compute [ RIP160, SCHED ] => Grip160 < SCHED > +Int Grip160word < SCHED > *Int bytesInWords(maxInt(LEN, intSize(DATA))) ... </k> <callData> LEN , DATA , .Ints </callData>
rule <k> #compute [ ID, _SCHED ] => 0 ... </k>
rule #compute [ ECADD, SCHED ] => Gecadd < SCHED >
rule #compute [ ECMUL, SCHED ] => Gecmul < SCHED >
rule <k> #compute [ ECPAIRING, SCHED ] => Gecpairing < SCHED > +Int LEN *Int Gecpairingpair < SCHED > ... </k> <callData> LEN , _ </callData>
There are several helpers for calculating gas.
Note: These are all functions as the operator #compute has already loaded all the relevant state.
syntax Int ::= Csstore ( Schedule , Int , Int , Int ) [function]
// ----------------------------------------------------------
rule Csstore(SCHED, INDEX, VALUE, OLDVALUE) => Gsstore < SCHED > +Int Gsstorekey < SCHED > *Int intSize(INDEX) +Int Gsstoreword < SCHED > *Int intSize(VALUE) +Int #if VALUE =/=Int 0 andBool OLDVALUE ==Int 0 #then Gsstoresetkey < SCHED > *Int intSize(INDEX) +Int Gsstoreset < SCHED > *Int intSize(VALUE) #else maxInt(0, Gsstoreset < SCHED > *Int (intSize(VALUE) -Int intSize(OLDVALUE))) #fi
syntax Operand ::= Ccall ( Schedule , BExp , Int , Int , Int , Int , Int ) [strict(2)]
| Ccallgas ( Schedule , BExp , Int , Int , Int , Int , Int ) [strict(2)]
syntax Int ::= Cgascap ( Schedule , Int , Int , Int ) [function]
| Cextra ( Schedule , Bool , Int , Int , Int ) [function]
| Cxfer ( Schedule , Int ) [function]
| Cnew ( Schedule , Bool , Int ) [function]
| Ccallarg ( Schedule , Operands ) [function]
// ----------------------------------------------------------------------------------------
rule Ccall(SCHED, ISEMPTY:Bool, GCAP, GAVAIL, VALUE, RETS, ARGS) => Cextra(SCHED, ISEMPTY, VALUE, RETS, ARGS) +Int Cgascap(SCHED, GCAP, GAVAIL, Cextra(SCHED, ISEMPTY, VALUE, RETS, ARGS))
rule Ccallgas(SCHED, ISEMPTY:Bool, GCAP, GAVAIL, 0, RETS, ARGS) => Cgascap(SCHED, GCAP, GAVAIL, Cextra(SCHED, ISEMPTY, 0, RETS, ARGS))
rule Ccallgas(SCHED, ISEMPTY:Bool, GCAP, GAVAIL, VALUE, RETS, ARGS) => Cgascap(SCHED, GCAP, GAVAIL, Cextra(SCHED, ISEMPTY, VALUE, RETS, ARGS)) +Int Gcallstipend < SCHED > requires VALUE =/=K 0
rule Cgascap(SCHED, GCAP, GAVAIL, GEXTRA) => minInt(#allBut64th(GAVAIL -Int GEXTRA), GCAP) requires GAVAIL >=Int GEXTRA andBool notBool Gstaticcalldepth << SCHED >>
rule Cgascap(SCHED, GCAP, GAVAIL, GEXTRA) => GCAP requires GAVAIL <Int GEXTRA orBool Gstaticcalldepth << SCHED >>
rule Cextra(SCHED, ISEMPTY, VALUE, RETS, ARGS) => Gcall < SCHED > +Int Cnew(SCHED, ISEMPTY, VALUE) +Int Cxfer(SCHED, VALUE) +Int Gcallreg < SCHED > *Int (RETS +Int ARGS)
rule Cxfer(_SCHED, 0) => 0
rule Cxfer( SCHED, N) => Gcallvalue < SCHED > requires N =/=K 0
rule Cnew( SCHED, ISEMPTY:Bool, VALUE) => Gnewaccount < SCHED >
requires ISEMPTY andBool VALUE =/=Int 0
rule Cnew(_SCHED, ISEMPTY:Bool, VALUE) => 0
requires notBool ISEMPTY orBool VALUE ==Int 0
rule Ccallarg(SCHED, ARGS) => intSizes(ARGS)
requires notBool Gnewmove << SCHED >>
rule Ccallarg(SCHED, ARGS) => #sizeRegs(ARGS)
requires Gnewmove << SCHED >>
syntax Operand ::= Cselfdestruct ( Schedule , BExp , Int ) [strict(2)]
// ----------------------------------------------------------------------
rule Cselfdestruct(SCHED, ISEMPTY:Bool, BAL) => Gselfdestruct < SCHED > +Int Gnewaccount < SCHED >
requires ISEMPTY andBool ( Gselfdestructnewaccount << SCHED >>) andBool BAL =/=Int 0
rule Cselfdestruct(SCHED, ISEMPTY:Bool, BAL) => Gselfdestruct < SCHED >
requires ISEMPTY andBool (notBool Gselfdestructnewaccount << SCHED >> orBool BAL ==Int 0)
rule Cselfdestruct(SCHED, ISEMPTY:Bool, _BAL) => Gselfdestruct < SCHED >
requires notBool ISEMPTY
syntax KResult ::= Bool
syntax BExp ::= Bool
| #accountEmpty(Int)
syntax Bool ::= #accountEmpty(Contract, Int, Int) [klabel(accountEmpty), function, symbol]
// ------------------------------------------------------------------------------------------
rule <k> #accountEmpty(ACCT) => #accountEmpty(CODE, NONCE, BAL) ... </k>
<account>
<acctID> ACCT </acctID>
<code> CODE </code>
<nonce> NONCE </nonce>
<balance> BAL </balance>
...
</account>
rule <k> (.K => #loadAccount ACCT) ~> #accountEmpty(ACCT) ... </k>
<activeAccounts> ACCTS </activeAccounts>
requires notBool ACCT in ACCTS
rule #accountEmpty(CODE, NONCE, BAL) => CODE ==K #emptyCode andBool NONCE ==Int 0 andBool BAL ==Int 0
syntax Int ::= #allBut64th ( Int ) [function]
// ---------------------------------------------
rule #allBut64th(N) => N -Int (N /Int 64)
syntax Int ::= G0 ( Schedule , Bytes , Ints ) [function, klabel(G0create)]
| G0 ( Schedule , String , Ints ) [function, klabel(G0call)]
| G0 ( Schedule , Bytes , Bool ) [function, klabel(G0aux)]
| G0 ( Schedule , Int , Bytes , Bool ) [function, klabel(G0auxaux)]
// -----------------------------------------------------------------------------------
rule G0(SCHED, BS, true) => Gtxcreate < SCHED > requires lengthBytes(BS) ==Int 0
rule G0(SCHED, BS, false) => Gtransaction < SCHED > requires lengthBytes(BS) ==Int 0
rule G0(SCHED, BS, ARGS) => G0(SCHED, #parseByteStackRaw(#rlpEncodeLength(#rlpEncodeString(Bytes2String(BS)) +String #rlpEncodeInts(ARGS), 192)), true)
rule G0(SCHED, FUNC, ARGS) => G0(SCHED, #parseByteStackRaw(#rlpEncodeLength(#rlpEncodeString(FUNC) +String #rlpEncodeInts(ARGS), 192)), false)
rule G0(SCHED, BS, ISCREATE::Bool) => G0(SCHED, lengthBytes(BS), BS, ISCREATE) requires lengthBytes(BS) =/=Int 0
rule G0(SCHED, 0, _BS, ISCREATE) => G0(SCHED, .Bytes, ISCREATE)
rule G0(SCHED, N, BS, ISCREATE) => Gtxdatazero < SCHED > +Int G0(SCHED, N -Int 1, BS, ISCREATE) requires N =/=Int 0 andBool BS[N -Int 1] ==Int 0
rule G0(SCHED, N, BS, ISCREATE) => Gtxdatanonzero < SCHED > +Int G0(SCHED, N -Int 1, BS, ISCREATE) requires N =/=Int 0 andBool BS[N -Int 1] =/=Int 0
syntax Int ::= "G*" "(" Int "," Int "," Int ")" [function]
// ----------------------------------------------------------
rule G*(GAVAIL, GLIMIT, REFUND) => GAVAIL +Int minInt((GLIMIT -Int GAVAIL)/Int 2, REFUND)
syntax Int ::= Cmul ( Schedule , Int , Int ) [function]
| Ckara ( Int , Int ) [function]
| Cdiv ( Schedule , Int , Int ) [function]
| Cexp ( Schedule , Int , Int , Int ) [function]
| Cexpmod ( Schedule , Int , Int , Int , Int ) [function]
// -----------------------------------------------------------------------
rule Cmul(SCHED, L1, L2) => Cmul(SCHED, L2, L1)
requires L2 >Int L1
rule Cmul(SCHED, L1, L2) =>
Gmulkara < SCHED > *Int Ckara(L1, L2) +Int
Gmulword < SCHED > *Int (L1 +Int L2) +Int
Gmul < SCHED >
[owise]
// Note that if L2 is low enough (< 32) then #overApproxKara(L2) = L2 * L2
rule Ckara(L1, L2) => L1 *Int #overApproxKara(L2) /Int L2
requires L1 >=Int L2
rule Ckara(L1, L2) => L2 *Int #overApproxKara(L1) /Int L1 [owise]
rule Cdiv(SCHED, L1, L2) =>
Gdivkara < SCHED > *Int Ckara(L1 -Int L2 +Int 1, L2) +Int
Gdivword < SCHED > *Int L1 +Int
Gdiv < SCHED >
requires L1 >=Int L2
rule Cdiv(SCHED, L1, _L2) =>
Gdivword < SCHED > *Int L1 +Int
Gdiv < SCHED >
requires notBool Gnewarith << SCHED >>
[owise]
rule Cdiv(SCHED, _L1, _L2) =>
Gdiv < SCHED >
requires Gnewarith << SCHED >>
[owise]
rule Cexp(SCHED, L1, W1, W2) =>
Gexpkara < SCHED > *Int #overApproxKara(#adjustedBitLength(L1, W1) *Int W2 /Int 64) +Int
Gexpword < SCHED > *Int L1 +Int
Gexp < SCHED >
requires notBool Gnewarith << SCHED >>
rule Cexp(SCHED, L1, W1, W2) =>
Gexpkara < SCHED > *Int #overApproxKara(#adjustedBitLength(L1, W1) *Int W2 /Int 64) +Int
Gexpword < SCHED > *Int #adjustedBitLength(L1, W1) +Int
Gexp < SCHED >
requires Gnewarith << SCHED >>
rule Cexpmod(SCHED, LB, LEX, LM, EX) =>
((Gexpmodkara < SCHED > *Int #overApproxKara(LM) *Int #adjustedBitLength(LEX, EX)) up/Int 10) +Int
Gexpmodmod < SCHED > *Int LM +Int
Gexpmodexp < SCHED > *Int #adjustedBitLength(LEX, EX) +Int
Gexpmod < SCHED >
requires LB <=Int LM
rule Cexpmod(SCHED, LB, LEX, LM, EX) =>
((Gexpmodkara < SCHED > *Int #overApproxKara(LM) *Int #adjustedBitLength(LEX, EX)) up/Int 10) +Int
Gexpmodmod < SCHED > *Int LM +Int
Gexpmodexp < SCHED > *Int #adjustedBitLength(LEX, EX) +Int
Cdiv(SCHED, LB, LM) +Int
Gexpmod < SCHED >
[owise]
Say we want to approximate x^log_2 3 with a family of quadratic functions, say of the form a2*x^2+a1*x+a0.
- we use the fact that
(2^k)^(log 3 / log 2) = 3^k - then, for
x = 2^k, it means we want to approximate3^kwitha2*4^k(+...), whencea2 ~= 1/(4/3)^k. - looking for powers of 2 (to make
a2*x^2a shift) which are smaller, but close to(4/3)^k, we see that(4/3)^5 ~= 4.21and(4/3)^10 ~=17.75 - we then can take candidates
x^2 for x <=32;x^2/4 + a1* x + a0 for 32 <= x <=1024, andx^2/16 + b1 * x + b0 for x >= 1024 - now, if we want the approximation to be differentiable, its derivative,
2* x for x <=32; x/2 + a1 for 32 <= x <=1024, x/8 + b1 for x >= 1024, must be continuous, so a1 = 2 * 32 - 32/2 = 48, andb1 = 1024/2 + a1 - 1024 / 8 = 432- next, the approximation must also be continuous, so
a0 = 32^2 - 32^2/4 - 48*32 = -768, andb0 = 1024^2/4+ 48*1024 -768 - 1024^2/16 - 432*1024 = - 197376
syntax Int ::= #overApproxKara ( Int ) [function]
// -----------------------------------------------------------------
rule #overApproxKara(N) => #if N <=Int 32 #then N *Int N
#else #if N <=Int 1024 #then N *Int N /Int 4 +Int 48 *Int N -Int 768
#else N *Int N /Int 16 +Int 432 *Int N -Int 197376
#fi #fi
Exponentiation algorithms work by sucessively performing at most two multiplication operations per bit in the exponent.
Because exponents could be very large, we approximate this length by counting the number of words in the exponent and multiplying by 64, the number of bits in a word. However, in order to create more precision on smaller inputs, if the number is less than 2^64, we compute down to the very last bit, by examining the individual bits of the low order word.
This same function can be used to approximate the bit size of an exponentiation base for non-modular exponentiation, which is used to compute a more accurate approximation of the length of the result than a measurement in words.
syntax Int ::= #adjustedBitLength(Int, Int) [function]
| #adjustedBitLength(Int) [function, klabel(#adjustedBitLengthAux)]
// --------------------------------------------------------------------------------
rule #adjustedBitLength(LEX, EX) => maxInt(1, #if LEX <=Int 1 #then 0 #else 64 *Int (LEX -Int 1) #fi +Int #adjustedBitLength(twos(8, EX)))
rule #adjustedBitLength(0) => 0
rule #adjustedBitLength(N) => log2Int(N) [owise]
The IELE semantics is designed to be extensible in future hard forks while still maintaining an accurate semantics of the language prior
to the fork. As such, we introduce a number of parameters to the gas model which are dependent on the gas schedule used.
Here we introduce only two gas schedules, the "DEFAULT" schedule, provided solely for backwards-compatibility with the EVM VMTests test suite,
and the "ALBE" schedule, representing the initial release of IELE. The name Albe is chosen due to its significance as the name for one of the Romanian Iele.
You can specify which profile is used by passing in the argument -cSCHEDULE=<FEE_SCHEDULE> when calling krun (the available <FEE_SCHEDULE> are supplied here).
A ScheduleFlag is a boolean determined by the fee schedule; applying a ScheduleFlag to a Schedule yields whether the flag is set or not.
syntax Bool ::= ScheduleFlag "<<" Schedule ">>" [function]
// ----------------------------------------------------------
syntax ScheduleFlag ::= "Gselfdestructnewaccount" | "Gstaticcalldepth"
| "Gnewmove" | "Gnewarith"
// ---------------------------------------------------------------
A ScheduleConst is a constant determined by the fee schedule; applying a ScheduleConst to a Schedule yields the correct constant for that schedule.
syntax Int ::= ScheduleConst "<" Schedule ">" [function]
// --------------------------------------------------------
syntax ScheduleConst ::= "Gmove" | "Greadstate" | "Gadd" | "Gaddword" | "Gmul" | "Gmulword" | "Gmulkara"
| "Gdiv" | "Gdivword" | "Gdivkara" | "Gexpkara" | "Gexpword" | "Gexp" | "Gexpmodkara" | "Gexpmodmod"
| "Gexpmodexp" | "Gexpmod" | "Gnot" | "Gnotword" | "Gbitwise" | "Gbitwiseword" | "Glogarithm" | "Glogarithmword"
| "Gbyte" | "Gtwos" | "Gtwosword" | "Gsext" | "Gsextword" | "Gbswap" | "Gbswapword" | "Giszero"
| "Gcmp" | "Gcmpword" | "Gbr" | "Gbrcond" | "Gblockhash" | "Gsha3" | "Gsha3word" | "Gloadcell"
| "Gload" | "Gloadword" | "Gstorecell" | "Gstore" | "Gstoreword" | "Gbalance" | "Gextcodesize" | "Gcalladdress"
| "Glog" | "Glogdata" | "Glogtopic" | "Gsstore" | "Gsstoreword" | "Gsstorekey" | "Gsstoreset" | "Gsstoresetkey"
| "Gsload" | "Gsloadkey" | "Gsloadword" | "Gselfdestruct" | "Gcallmemory" | "Gcallreg" | "Glocalcall" | "Gcallstipend"
| "Gcall" | "Gcallvalue" | "Gnewaccount" | "Gcreate" | "Gcopycreate" | "Gcodedeposit" | "Gecrec" | "Gsha256word"
| "Gsha256" | "Grip160word" | "Grip160" | "Gecadd" | "Gecmul" | "Gecpairing" | "Gecpairingpair" | "Gtransaction"
| "Gtxcreate" | "Gmemory" | "Gquadcoeff" | "Gtxdatanonzero" | "Gtxdatazero" | "Rsstoreset" | "Rselfdestruct" | "Rb"
| "Sgasdivisor" | "Smemallowance"
// ---------------------------------------------------------------------------------------------------------------------------------------------------------------
This schedule is used to execute the EVM VM tests, and contains minor variations from the actual schedule used for execution.
syntax Schedule ::= "DEFAULT" [klabel(DEFAULT), symbol]
// -------------------------------------------------------
rule Gmove < DEFAULT > => 3
rule Greadstate < DEFAULT > => 2
rule Gadd < DEFAULT > => 0
rule Gaddword < DEFAULT > => 3
rule Gmul < DEFAULT > => 0
rule Gmulword < DEFAULT > => 2
rule Gmulkara < DEFAULT > => 3
rule Gdiv < DEFAULT > => 0
rule Gdivword < DEFAULT > => 2
rule Gdivkara < DEFAULT > => 3
rule Gexpkara < DEFAULT > => 50
rule Gexpword < DEFAULT > => 10
rule Gexp < DEFAULT > => 0
rule Gexpmodkara < DEFAULT > => 40
rule Gexpmodmod < DEFAULT > => 0
rule Gexpmodexp < DEFAULT > => 0
rule Gexpmod < DEFAULT > => 0
rule Gnot < DEFAULT > => 0
rule Gnotword < DEFAULT > => 3
rule Gbitwise < DEFAULT > => 0
rule Gbitwiseword < DEFAULT > => 3
rule Glogarithm < DEFAULT > => 0
rule Glogarithmword < DEFAULT > => 3
rule Gbyte < DEFAULT > => 3
rule Gtwos < DEFAULT > => 0
rule Gtwosword < DEFAULT > => 5
rule Gsext < DEFAULT > => 0
rule Gsextword < DEFAULT > => 5
rule Gbswap < DEFAULT > => 0
rule Gbswapword < DEFAULT > => 5
rule Giszero < DEFAULT > => 3
rule Gcmp < DEFAULT > => 0
rule Gcmpword < DEFAULT > => 3
rule Gbr < DEFAULT > => 8
rule Gbrcond < DEFAULT > => 10
rule Gblockhash < DEFAULT > => 20
rule Gsha3 < DEFAULT > => 30
rule Gsha3word < DEFAULT > => 6
rule Gloadcell < DEFAULT > => 3
rule Gload < DEFAULT > => 0
rule Gloadword < DEFAULT > => 3
rule Gstorecell < DEFAULT > => 3
rule Gstore < DEFAULT > => 0
rule Gstoreword < DEFAULT > => 3
rule Gbalance < DEFAULT > => 400
rule Gextcodesize < DEFAULT > => 700
rule Gcalladdress < DEFAULT > => 700
rule Glog < DEFAULT > => 375
rule Glogdata < DEFAULT > => 8
rule Glogtopic < DEFAULT > => 375
rule Gsstore < DEFAULT > => 1000
rule Gsstoreword < DEFAULT > => 500
rule Gsstorekey < DEFAULT > => 500
rule Gsstoreset < DEFAULT > => 1875
rule Rsstoreset < DEFAULT > => 1875
rule Gsstoresetkey < DEFAULT > => 1875
rule Gsload < DEFAULT > => 50
rule Gsloadkey < DEFAULT > => 100
rule Gsloadword < DEFAULT > => 50
rule Gselfdestruct < DEFAULT > => 0
rule Gcallmemory < DEFAULT > => 2
rule Gcallreg < DEFAULT > => 3
rule Glocalcall < DEFAULT > => 11
rule Gcall < DEFAULT > => 40
rule Gcallstipend < DEFAULT > => 2300
rule Gcallvalue < DEFAULT > => 9000
rule Gnewaccount < DEFAULT > => 25000
rule Gcreate < DEFAULT > => 32000
rule Gcopycreate < DEFAULT > => 33000
rule Gcodedeposit < DEFAULT > => 200
rule Gecrec < DEFAULT > => 3000
rule Gsha256 < DEFAULT > => 60
rule Gsha256word < DEFAULT > => 3
rule Grip160 < DEFAULT > => 600
rule Grip160word < DEFAULT > => 30
rule Gecadd < DEFAULT > => 500
rule Gecmul < DEFAULT > => 40000
rule Gecpairing < DEFAULT > => 100000
rule Gecpairingpair < DEFAULT > => 80000
rule Gmemory < DEFAULT > => 1
rule Gquadcoeff < DEFAULT > => 8192
rule Gtransaction < DEFAULT > => 21000
rule Gtxcreate < DEFAULT > => 53000
rule Gtxdatazero < DEFAULT > => 4
rule Gtxdatanonzero < DEFAULT > => 68
rule Rselfdestruct < DEFAULT > => 24000
rule Rb < DEFAULT > => 3 *Int (10 ^Int 18)
rule Gselfdestructnewaccount << DEFAULT >> => false
rule Gstaticcalldepth << DEFAULT >> => true
rule Gnewmove << DEFAULT >> => false
rule Gnewarith << DEFAULT >> => false
rule Smemallowance < DEFAULT > => 4096
rule Sgasdivisor < DEFAULT > => 1
This is the initial schedule of IELE.
// Albe
// --------------------------
rule Gcall < ALBE > => 700
rule Gselfdestruct < ALBE > => 5000
rule SCHEDCONST < ALBE > => SCHEDCONST < DEFAULT > [owise]
rule Gselfdestructnewaccount << ALBE >> => true
rule Gstaticcalldepth << ALBE >> => false
rule SCHEDCONST << ALBE >> => SCHEDCONST << DEFAULT >> [owise]
This is the first major revision of IELE.
// Danse
// ---------------------------
rule Gmove < DANSE > => 2000
rule Greadstate < DANSE > => 2000
rule Gadd < DANSE > => 2800
rule Gaddword < DANSE > => 1
rule Gmul < DANSE > => 4900
rule Gmulword < DANSE > => 4
rule Gmulkara < DANSE > => 4
rule Gdiv < DANSE > => 4900
rule Gdivword < DANSE > => 5
rule Gdivkara < DANSE > => 8
rule Gexpkara < DANSE > => 2
rule Gexpword < DANSE > => 80
rule Gexp < DANSE > => 5300
rule Gexpmodkara < DANSE > => 15
rule Gexpmodmod < DANSE > => 180
rule Gexpmodexp < DANSE > => 8
rule Gexpmod < DANSE > => 6000
rule Gnot < DANSE > => 2700
rule Gnotword < DANSE > => 3
rule Gbitwise < DANSE > => 2900
rule Gbitwiseword < DANSE > => 1
rule Glogarithm < DANSE > => 2300
rule Glogarithmword < DANSE > => 1
rule Gbyte < DANSE > => 2500
rule Gtwos < DANSE > => 3100
rule Gtwosword < DANSE > => 1
rule Gsext < DANSE > => 3300
rule Gsextword < DANSE > => 5
rule Gbswap < DANSE > => 3300
rule Gbswapword < DANSE > => 10
rule Giszero < DANSE > => 1800
rule Gcmp < DANSE > => 2500
rule Gcmpword < DANSE > => 1
rule Gbr < DANSE > => 5000
rule Gbrcond < DANSE > => 5000
rule Gblockhash < DANSE > => 20000
rule Gsha3 < DANSE > => 8300
rule Gsha3word < DANSE > => 20
rule Gloadcell < DANSE > => 2900
rule Gload < DANSE > => 3300
rule Gloadword < DANSE > => 3
rule Gstorecell < DANSE > => 2800
rule Gstore < DANSE > => 3900
rule Gstoreword < DANSE > => 4
rule Gbalance < DANSE > => 400000
rule Gextcodesize < DANSE > => 700000
rule Gcalladdress < DANSE > => 700000
rule Glog < DANSE > => 375000
rule Glogdata < DANSE > => 8000
rule Glogtopic < DANSE > => 375000
rule Gsstore < DANSE > => 4950000
rule Gsstoreword < DANSE > => 300
rule Gsstorekey < DANSE > => 400
rule Gsstoreset < DANSE > => 1875000
rule Gsstoresetkey < DANSE > => 1875000
rule Gsload < DANSE > => 190000
rule Gsloadkey < DANSE > => 8000
rule Gsloadword < DANSE > => 2000
rule Gselfdestruct < DANSE > => 0
rule Gcallmemory < DANSE > => 2
rule Gcallreg < DANSE > => 1000
rule Glocalcall < DANSE > => 6800
rule Gcall < DANSE > => 40000
rule Gcallstipend < DANSE > => 2300000
rule Gcallvalue < DANSE > => 9000000
rule Gnewaccount < DANSE > => 25000000
rule Gcreate < DANSE > => 32000000
rule Gcopycreate < DANSE > => 33000000
rule Gcodedeposit < DANSE > => 200000
rule Gecrec < DANSE > => 3000000
rule Gsha256 < DANSE > => 25000
rule Gsha256word < DANSE > => 30
rule Grip160 < DANSE > => 25000
rule Grip160word < DANSE > => 30
rule Gecadd < DANSE > => 35000
rule Gecmul < DANSE > => 1700000
rule Gecpairing < DANSE > => 100000000
rule Gecpairingpair < DANSE > => 26000000
rule Gmemory < DANSE > => 750
rule Sgasdivisor < DANSE > => 1000
rule SCHEDCONST < DANSE > => SCHEDCONST < ALBE > [owise]
rule Gnewmove << DANSE >> => true
rule Gnewarith << DANSE >> => true
rule SCHEDCONST << DANSE >> => SCHEDCONST << ALBE >> [owise]
endmodule