fix padding of bytecode claims (inside public input)

Author: TomWambsgans

crates/rec_aggregation/src/compilation.rs

@@ -30,9 +30,11 @@ pub fn init_aggregation_bytecode() {
 fn compile_main_program(inner_program_log_size: usize, bytecode_zero_eval: F) -> Bytecode {
     let bytecode_point_n_vars = inner_program_log_size + log2_ceil_usize(N_INSTRUCTION_COLUMNS);
     let claim_data_size = (bytecode_point_n_vars + 1) * DIMENSION;
+    let claim_data_size_padded = claim_data_size.next_multiple_of(DIGEST_LEN);
     // pub_input layout: n_sigs(1) + slice_hash(8) + slot_low(1) + slot_high(1)
-    //                   + message + merkle_chunks_for_slot + bytecode_claim + bytecode_hash(8)
-    let pub_input_size = 1 + DIGEST_LEN + 2 + MESSAGE_LEN_FE + N_MERKLE_CHUNKS_FOR_SLOT + claim_data_size + DIGEST_LEN;
+    //                   + message + merkle_chunks_for_slot + bytecode_claim_padded + bytecode_hash(8)
+    let pub_input_size =
+        1 + DIGEST_LEN + 2 + MESSAGE_LEN_FE + N_MERKLE_CHUNKS_FOR_SLOT + claim_data_size_padded + DIGEST_LEN;
     let inner_public_memory_log_size = log2_ceil_usize(NONRESERVED_PROGRAM_INPUT_START + pub_input_size);
     let replacements = build_replacements(
         inner_program_log_size,

crates/rec_aggregation/src/lib.rs

@@ -74,6 +74,10 @@ fn build_non_reserved_public_input(
     pi.push(slot_hi);
     pi.extend(compute_merkle_chunks_for_slot(slot));
     pi.extend_from_slice(bytecode_claim_output);
+    pi.extend(std::iter::repeat_n(
+        F::ZERO,
+        bytecode_claim_output.len().next_multiple_of(DIGEST_LEN) - bytecode_claim_output.len(),
+    ));
     pi.extend_from_slice(&poseidon16_compress_pair(bytecode_hash, &SNARK_DOMAIN_SEP));
     pi
 }