 ebfull
|
45c73dbd8f
|
Merge pull request #54 from ebfull/sprout-circuit-minimal
Sprout circuit implementation
|
2018-04-02 16:55:09 -06:00 |
|
|
ebfull
|
1026e92194
|
Merge pull request #63 from ebfull/gh
First block of GH invocation using random beacon output
|
2018-03-28 16:05:20 -06:00 |
|
|
Sean Bowe
|
9f24b68b3a
|
Update constraint system hashes.
|
2018-03-27 21:41:11 -06:00 |
|
|
Sean Bowe
|
3704b2422e
|
Fix benchmark due to anchor change in witness.
|
2018-03-27 21:31:32 -06:00 |
|
|
Sean Bowe
|
9418001d0e
|
First block of GH invocation using random beacon output.
|
2018-03-27 14:30:08 -06:00 |
|
|
ebfull
|
470c9572eb
|
Merge pull request #60 from ebfull/optional-enforce
Allow the authentication path to be not enforced
|
2018-03-27 14:27:53 -06:00 |
|
|
ebfull
|
7ee29503ec
|
Merge pull request #61 from str4d/bench-final
Update benchmark to use final Sapling circuit implementation
|
2018-03-27 13:13:23 -06:00 |
|
|
Sean Bowe
|
cfd378685f
|
Add more test vectors to Sprout circuit implementation.
|
2018-03-26 21:47:40 -06:00 |
|
|
Sean Bowe
|
def5de3f16
|
Allow the authentication path to be not enforced for zero-value notes, for indistinguishability.
|
2018-03-26 13:30:14 -06:00 |
|
|
Sean Bowe
|
4de908b1e5
|
Fix bug in circuit uncovered by test vector.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
162a3877e5
|
JoinSplit circuit implementation for Sprout.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
ac13cb05bc
|
Implementation of SHA256.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
75c5269d3b
|
Implementation of SHA256 choice/majority for UInt32.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
36a6b5fd90
|
Implementation of SHA256 majority operation for Boolean.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
abca61401e
|
Implementation of SHA256 choice operation for Boolean.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
4f0a553fbb
|
Implement UInt32 encoding/decoding with big-endian representation.
|
2018-03-21 19:21:16 -06:00 |
|
|
Sean Bowe
|
51bb5f0f70
|
Implement UInt32::shr() for SHA256.
|
2018-03-21 19:21:16 -06:00 |
|
|
ebfull
|
e6397507ca
|
Merge pull request #57 from ebfull/final-circuit-changes
Final circuit changes (part 1)
|
2018-03-21 19:11:08 -06:00 |
|
|
Sean Bowe
|
601e8e38f8
|
Little-endian byte order interpretation of the output of CRH^ivk.
|
2018-03-19 18:06:44 -06:00 |
|
|
Sean Bowe
|
f9e58c01ce
|
Swap bit-endianness of value in note commitment.
|
2018-03-19 17:54:44 -06:00 |
|
|
Sean Bowe
|
b14c9f8d68
|
Change personalizations to actually match spec this time.
|
2018-03-19 17:26:28 -06:00 |
|
|
Sean Bowe
|
219d03cc11
|
Perform multiple checks of circuit in test.
|
2018-03-19 17:05:51 -06:00 |
|
|
Sean Bowe
|
8b6f113052
|
Change personalization to more closely align with the spec.
|
2018-03-17 10:24:55 -06:00 |
|
|
Sean Bowe
|
d09c4d6ce8
|
Simplify value commitment gadget.
|
2018-03-17 09:10:13 -06:00 |
|
|
Sean Bowe
|
6d01e78711
|
Fix variable names in output circuit
|
2018-03-17 09:02:29 -06:00 |
|
|
Sean Bowe
|
13b03a0a1a
|
Relocate circuit components for intuitive code paths.
|
2018-03-16 22:21:29 -06:00 |
|
|
Sean Bowe
|
00ee962429
|
Fix some names of variables.
|
2018-03-16 15:46:19 -06:00 |
|
|
Sean Bowe
|
8b2f231e2f
|
Change personalization to match specification.
|
2018-03-16 15:46:19 -06:00 |
|
|
Sean Bowe
|
7e05feb90b
|
Changes to names and circuit design to match spec.
|
2018-03-16 15:46:15 -06:00 |
|
|
ebfull
|
c09292672a
|
Merge pull request #56 from rex4539/fix-typos
Fix typos
|
2018-03-16 15:44:02 -06:00 |
|
|
ebfull
|
39f1152e16
|
Merge pull request #53 from ebfull/circuit-improvements
Minor circuit improvements
|
2018-03-15 12:47:26 -06:00 |
|
|
Sean Bowe
|
21625d69e0
|
Place Sapling circuit into submodule.
|
2018-03-15 12:44:19 -06:00 |
|
|
Sean Bowe
|
ca202ef304
|
Introduce input multipacking abstraction for nullifiers.
|
2018-03-15 12:36:05 -06:00 |
|
|
Sean Bowe
|
52eb59766b
|
Optimize UInt32::addmany/BLAKE2s to combine equality constraints. (Closes #5)
|
2018-03-15 12:31:10 -06:00 |
|
|
Sean Bowe
|
827e85547e
|
Public input verification utility for the test framework
|
2018-03-15 11:42:22 -06:00 |
|
|
ebfull
|
3c07a2d9b3
|
Merge pull request #30 from plutomonkey/boolean_enforce_equal
Optimise Boolean::enforce_equal.
|
2018-03-14 07:28:33 -06:00 |
|
|
Sean Bowe
|
2c69abe268
|
Add Uncommitted^Sapling.
|
2018-03-09 14:17:45 -07:00 |
|
|
Sean Bowe
|
c1784f0fdf
|
Check g_d is not small order in Spend circuit.
|
2018-03-09 14:08:01 -07:00 |
|
|
ebfull
|
390f2c129b
|
Merge pull request #37 from ebfull/circuit-tests
Circuit tests
|
2018-03-08 19:18:40 -07:00 |
|
|
Sean Bowe
|
b6e1b52a44
|
Fix comment about Montgomery curve selection
|
2018-03-08 13:03:07 -07:00 |
|
|
Sean Bowe
|
db28ff7ba1
|
Simplify the Output witness.
|
2018-03-08 01:49:27 -07:00 |
|
|
Sean Bowe
|
9998400117
|
Relocate structs for cleanliness.
|
2018-03-08 01:37:55 -07:00 |
|
|
Sean Bowe
|
512a394b30
|
Simplify witness for Spend statement.
|
2018-03-08 01:36:16 -07:00 |
|
|
Sean Bowe
|
3fbbd933cf
|
Simplify value commitment abstraction.
|
2018-03-08 01:16:21 -07:00 |
|
|
Sean Bowe
|
d6d86737c8
|
Remove some code duplication for value commitment witnessing.
|
2018-03-08 01:01:00 -07:00 |
|
|
Sean Bowe
|
f61cc88a71
|
More comment improvements.
|
2018-03-08 00:51:53 -07:00 |
|
|
Sean Bowe
|
b6ef12b077
|
General code quality improvements.
|
2018-03-08 00:41:47 -07:00 |
|
|
Sean Bowe
|
896b144a7d
|
Move first block of group hash to constants submodule.
|
2018-03-08 00:09:34 -07:00 |
|
|
Sean Bowe
|
c7c8d3c039
|
Move personalization constants to submodule.
|
2018-03-08 00:06:53 -07:00 |
|
|
Sean Bowe
|
25a8050df8
|
Remaining tests for input circuit
|
2018-03-07 23:59:04 -07:00 |
|
|
Sean Bowe
|
b998190f9e
|
Disable this, for now.
|
2018-03-07 23:45:08 -07:00 |
|
|
Sean Bowe
|
0242ed35ab
|
Add some circuit tests for inputs.
|
2018-03-07 12:19:56 -07:00 |
|
|
Sean Bowe
|
2d4be07560
|
Fix group hash comment.
|
2018-03-06 22:26:03 -07:00 |
|
|
Sean Bowe
|
ef85173df5
|
Fix comments in jubjub code.
|
2018-03-06 22:25:15 -07:00 |
|
|
Sean Bowe
|
b0b3514fa7
|
Add bench_50 example.
|
2018-03-06 10:21:30 -07:00 |
|
|
Sean Bowe
|
1f65d4b353
|
Change tree depth to 32 in test.
|
2018-03-06 10:04:02 -07:00 |
|
|
Sean Bowe
|
1f2bb62657
|
Rename proving key to proof generation key to disambiguate from the SNARK.
|
2018-03-06 09:56:29 -07:00 |
|
|
Sean Bowe
|
c31092ce7f
|
Remove unnecessary mut binding.
|
2018-03-06 09:39:56 -07:00 |
|
|
ebfull
|
c253e51e3d
|
Merge pull request #35 from ebfull/primitives
WIP bundle
|
2018-03-06 09:10:23 -07:00 |
|
|
Sean Bowe
|
63c6830429
|
Cache fewer pedersen hash generators.
|
2018-03-06 09:03:29 -07:00 |
|
|
Sean Bowe
|
7a9879eb54
|
Make EdwardsPoint (x, y) not public.
|
2018-03-06 08:38:34 -07:00 |
|
|
Sean Bowe
|
f155c01cf5
|
Personalize GH for each generator independently.
|
2018-03-06 08:30:28 -07:00 |
|
|
Sean Bowe
|
b831942501
|
Adopt BLAKE2s personalization throughout protocol.
|
2018-03-05 19:32:27 -07:00 |
|
|
Sean Bowe
|
d21ff08176
|
Group hash should use a first block containing random data as per spec.
|
2018-03-05 18:08:49 -07:00 |
|
|
Sean Bowe
|
058801bdfc
|
Switch to using the blake2-rfc crate instead.
|
2018-03-05 17:58:34 -07:00 |
|
|
Sean Bowe
|
2e846844e7
|
Perform ak group order check in Spend circuit.
|
2018-03-05 17:46:12 -07:00 |
|
|
Sean Bowe
|
7bb630a4b1
|
Use correct personalization for merkle tree.
|
2018-03-05 17:27:55 -07:00 |
|
|
Sean Bowe
|
c6cf0c718c
|
Value placed in note contents should be in big endian bit order.
|
2018-03-05 16:10:55 -07:00 |
|
|
Sean Bowe
|
b45a37febb
|
Add comments and reorder some generators.
|
2018-03-05 16:00:04 -07:00 |
|
|
Sean Bowe
|
69010d1502
|
Relocate Pedersen hash personalization enum.
|
2018-03-05 15:25:40 -07:00 |
|
|
Sean Bowe
|
8cbcd7739c
|
Rename into_bits and into_bits_strict to signify endianness.
|
2018-03-05 15:12:51 -07:00 |
|
|
Sean Bowe
|
3971ecd375
|
Abstract away the boolean conversion of field witnessing.
|
2018-03-05 10:52:56 -07:00 |
|
|
Sean Bowe
|
543f5cd49c
|
Change bit-endianness of into_bits/into_bits_strict.
|
2018-03-05 10:27:14 -07:00 |
|
|
Sean Bowe
|
3e15751fd1
|
Allocate the note value directly in little-endian bit order.
|
2018-03-05 09:37:13 -07:00 |
|
|
Sean Bowe
|
e52befb58e
|
Introduce inputize abstractions to simplify circuit code.
|
2018-03-04 23:33:05 -07:00 |
|
|
Sean Bowe
|
51c35a9bcf
|
Adopt new versions of pairing and bellman.
|
2018-03-04 22:25:04 -07:00 |
|
|
Sean Bowe
|
57687cf70f
|
Creation of the Note primitive.
|
2018-02-24 22:53:00 -07:00 |
|
|
ebfull
|
4f4a2d63db
|
Merge pull request #34 from ebfull/output-circuit
WIP circuit development
|
2018-02-24 17:22:42 -07:00 |
|
|
Sean Bowe
|
27674bf8ff
|
Derive Clone for EdwardsPoint.
|
2018-02-24 17:11:17 -07:00 |
|
|
Sean Bowe
|
3346fba915
|
Implementation of Jubjub point representation.
|
2018-02-24 14:11:01 -07:00 |
|
|
Sean Bowe
|
4441a0da41
|
Hash the constraint systems to check integrity.
|
2018-02-24 09:09:20 -07:00 |
|
|
Sean Bowe
|
23d17b9042
|
Minor adjustments.
|
2018-02-23 18:09:26 -07:00 |
|
|
Sean Bowe
|
7a7774d8af
|
Remove unused imports in Boolean.
|
2018-02-23 11:28:17 -07:00 |
|
|
Sean Bowe
|
8c37212645
|
Remove kary_and from Boolean.
|
2018-02-23 11:25:59 -07:00 |
|
|
Sean Bowe
|
a45986ff97
|
Remove enforce_nand.
|
2018-02-23 11:24:42 -07:00 |
|
|
Sean Bowe
|
0d56c7a902
|
Remove enforce_in_field.
|
2018-02-23 11:18:39 -07:00 |
|
|
Sean Bowe
|
69abd0391f
|
Optimize into_bits_strict.
|
2018-02-23 11:15:14 -07:00 |
|
|
Sean Bowe
|
97585a30ad
|
Remove from_bits_strict from AllocatedNum.
|
2018-02-23 09:26:12 -07:00 |
|
|
Sean Bowe
|
c812805b31
|
Slight refactor of representations
|
2018-02-22 18:43:07 -07:00 |
|
|
Sean Bowe
|
ba7298de3f
|
Crappy mock-up of the circuit.
|
2018-02-22 11:36:44 -07:00 |
|
|
Sean Bowe
|
4b6623cf44
|
Add some personalization and a generator.
|
2018-02-22 07:29:55 -07:00 |
|
|
ebfull
|
1a89b3a486
|
Merge pull request #33 from ebfull/general-improvements
General improvements
|
2018-02-20 18:39:02 -07:00 |
|
|
Sean Bowe
|
e8480a2b2c
|
Utility for witnessing points on the curve.
|
2018-02-20 18:36:53 -07:00 |
|
|
Sean Bowe
|
c221bc9126
|
Rename mont to ecc in circuit code.
|
2018-02-20 18:18:29 -07:00 |
|
|
Sean Bowe
|
a1c749e6a0
|
Change fixed-base exponentiation API to handle scalars better.
|
2018-02-20 18:12:27 -07:00 |
|
|
Sean Bowe
|
88bdff6ce9
|
Pedersen hashes with full optimization
|
2018-02-20 17:22:00 -07:00 |
|
|
Sean Bowe
|
4fa73efc1e
|
Remove conditional negation implementation from AllocatedNum.
|
2018-02-20 16:41:33 -07:00 |
|
|
Sean Bowe
|
c89d47bb07
|
Remove Montgomery point doubling implementation in the circuit.
|
2018-02-20 16:38:44 -07:00 |
|
|
Sean Bowe
|
1610bcfbcf
|
Perform the y-coordinate conditional negation and lookup simultaneously.
|
2018-02-20 16:31:27 -07:00 |
|
|
Sean Bowe
|
6f66fd3f9d
|
Express x and y coordinates from lookup as linear combinations.
|
2018-02-20 16:11:48 -07:00 |
|