Commit Graph
100 Commits
Author SHA1 Message Date
Sean Bowe b6ef12b077 General code quality improvements. 2018-03-08 00:41:47 -07:00
Sean Bowe 896b144a7d Move first block of group hash to constants submodule. 2018-03-08 00:09:34 -07:00
Sean Bowe c7c8d3c039 Move personalization constants to submodule. 2018-03-08 00:06:53 -07:00
Sean Bowe 25a8050df8 Remaining tests for input circuit 2018-03-07 23:59:04 -07:00
Sean Bowe b998190f9e Disable this, for now. 2018-03-07 23:45:08 -07:00
Sean Bowe 0242ed35ab Add some circuit tests for inputs. 2018-03-07 12:19:56 -07:00
Sean Bowe 2d4be07560 Fix group hash comment. 2018-03-06 22:26:03 -07:00
Sean Bowe ef85173df5 Fix comments in jubjub code. 2018-03-06 22:25:15 -07:00
Sean Bowe b0b3514fa7 Add bench_50 example. 2018-03-06 10:21:30 -07:00
Sean Bowe 1f65d4b353 Change tree depth to 32 in test. 2018-03-06 10:04:02 -07:00
Sean Bowe 1f2bb62657 Rename proving key to proof generation key to disambiguate from the SNARK. 2018-03-06 09:56:29 -07:00
Sean Bowe c31092ce7f Remove unnecessary mut binding. 2018-03-06 09:39:56 -07:00
ebfull c253e51e3d Merge pull request #35 from ebfull/primitives
WIP bundle
2018-03-06 09:10:23 -07:00
Sean Bowe 63c6830429 Cache fewer pedersen hash generators. 2018-03-06 09:03:29 -07:00
Sean Bowe 7a9879eb54 Make EdwardsPoint (x, y) not public. 2018-03-06 08:38:34 -07:00
Sean Bowe f155c01cf5 Personalize GH for each generator independently. 2018-03-06 08:30:28 -07:00
Sean Bowe b831942501 Adopt BLAKE2s personalization throughout protocol. 2018-03-05 19:32:27 -07:00
Sean Bowe d21ff08176 Group hash should use a first block containing random data as per spec. 2018-03-05 18:08:49 -07:00
Sean Bowe 058801bdfc Switch to using the blake2-rfc crate instead. 2018-03-05 17:58:34 -07:00
Sean Bowe 2e846844e7 Perform ak group order check in Spend circuit. 2018-03-05 17:46:12 -07:00
Sean Bowe 7bb630a4b1 Use correct personalization for merkle tree. 2018-03-05 17:27:55 -07:00
Sean Bowe c6cf0c718c Value placed in note contents should be in big endian bit order. 2018-03-05 16:10:55 -07:00
Sean Bowe b45a37febb Add comments and reorder some generators. 2018-03-05 16:00:04 -07:00
Sean Bowe 69010d1502 Relocate Pedersen hash personalization enum. 2018-03-05 15:25:40 -07:00
Sean Bowe 8cbcd7739c Rename into_bits and into_bits_strict to signify endianness. 2018-03-05 15:12:51 -07:00
Sean Bowe 3971ecd375 Abstract away the boolean conversion of field witnessing. 2018-03-05 10:52:56 -07:00
Sean Bowe 543f5cd49c Change bit-endianness of into_bits/into_bits_strict. 2018-03-05 10:27:14 -07:00
Sean Bowe 3e15751fd1 Allocate the note value directly in little-endian bit order. 2018-03-05 09:37:13 -07:00
Sean Bowe e52befb58e Introduce inputize abstractions to simplify circuit code. 2018-03-04 23:33:05 -07:00
Sean Bowe 51c35a9bcf Adopt new versions of pairing and bellman. 2018-03-04 22:25:04 -07:00
Sean Bowe 57687cf70f Creation of the Note primitive. 2018-02-24 22:53:00 -07:00
ebfull 4f4a2d63db Merge pull request #34 from ebfull/output-circuit
WIP circuit development
2018-02-24 17:22:42 -07:00
Sean Bowe 27674bf8ff Derive Clone for EdwardsPoint. 2018-02-24 17:11:17 -07:00
Sean Bowe 3346fba915 Implementation of Jubjub point representation. 2018-02-24 14:11:01 -07:00
Sean Bowe 4441a0da41 Hash the constraint systems to check integrity. 2018-02-24 09:09:20 -07:00
Sean Bowe 23d17b9042 Minor adjustments. 2018-02-23 18:09:26 -07:00
Sean Bowe 7a7774d8af Remove unused imports in Boolean. 2018-02-23 11:28:17 -07:00
Sean Bowe 8c37212645 Remove kary_and from Boolean. 2018-02-23 11:25:59 -07:00
Sean Bowe a45986ff97 Remove enforce_nand. 2018-02-23 11:24:42 -07:00
Sean Bowe 0d56c7a902 Remove enforce_in_field. 2018-02-23 11:18:39 -07:00
Sean Bowe 69abd0391f Optimize into_bits_strict. 2018-02-23 11:15:14 -07:00
Sean Bowe 97585a30ad Remove from_bits_strict from AllocatedNum. 2018-02-23 09:26:12 -07:00
Sean Bowe c812805b31 Slight refactor of representations 2018-02-22 18:43:07 -07:00
Sean Bowe ba7298de3f Crappy mock-up of the circuit. 2018-02-22 11:36:44 -07:00
Sean Bowe 4b6623cf44 Add some personalization and a generator. 2018-02-22 07:29:55 -07:00
ebfull 1a89b3a486 Merge pull request #33 from ebfull/general-improvements
General improvements
2018-02-20 18:39:02 -07:00
Sean Bowe e8480a2b2c Utility for witnessing points on the curve. 2018-02-20 18:36:53 -07:00
Sean Bowe c221bc9126 Rename mont to ecc in circuit code. 2018-02-20 18:18:29 -07:00
Sean Bowe a1c749e6a0 Change fixed-base exponentiation API to handle scalars better. 2018-02-20 18:12:27 -07:00
Sean Bowe 88bdff6ce9 Pedersen hashes with full optimization 2018-02-20 17:22:00 -07:00
Sean Bowe 4fa73efc1e Remove conditional negation implementation from AllocatedNum. 2018-02-20 16:41:33 -07:00
Sean Bowe c89d47bb07 Remove Montgomery point doubling implementation in the circuit. 2018-02-20 16:38:44 -07:00
Sean Bowe 1610bcfbcf Perform the y-coordinate conditional negation and lookup simultaneously. 2018-02-20 16:31:27 -07:00
Sean Bowe 6f66fd3f9d Express x and y coordinates from lookup as linear combinations. 2018-02-20 16:11:48 -07:00
Sean Bowe b37d9b11cb More efficient implementation of Edwards doubling in the circuit. 2018-02-20 15:38:28 -07:00
Sean Bowe 6e80c12365 Add TODO 2018-02-20 15:11:29 -07:00
Sean Bowe d779f31ccd Force personalization of Pedersen hashes. 2018-02-20 15:11:29 -07:00
Sean Bowe 39175a0c2a Remove unneeded imports 2018-02-20 15:11:29 -07:00
Sean Bowe 5118fd5008 Add new fixed generators for the output circuit 2018-02-20 15:11:29 -07:00
Sean Bowe ec7323159c Booleanize u64 objects. 2018-02-20 15:11:29 -07:00
Sean Bowe 1df7fbeeff Refactor "booleanization" of objects. 2018-02-20 15:11:29 -07:00
ebfull 8d633db82b Merge pull request #29 from ebfull/pedersen-chunks
63 chunks per pedersen hash segment
2018-02-20 15:09:59 -07:00
ebfull c091e274ee Merge pull request #32 from ebfull/bellman-update
Bellman update
2018-02-16 09:09:27 -07:00
Sean Bowe 2f95a9094a Refactor to handle changes to ConstraintSystem API (no more Variable associated type, one is now static method). 2018-02-16 08:45:18 -07:00
Sean Bowe 814cfef769 Use more descriptive synthesis errors now available in bellman. 2018-02-16 08:45:17 -07:00
Sean Bowe 683aa93b44 Account for change in bellman's API for enforcement to use closures. 2018-02-16 08:44:27 -07:00
Sean Bowe 821d22261e Raise the number of chunks in Pedersen hashes to 63. 2018-02-11 12:59:57 -07:00
Sean Bowe 52829af6d8 Fix test for pedersen hash chunks per generator. 2018-02-11 12:59:49 -07:00
ebfull c8cc190781 Merge pull request #21 from ebfull/gh-revisions
Edwards scalar multiplication inside the circuit
2018-02-10 11:24:11 -07:00
Sean Bowe 73e73d7c8c Remove TODOs by creating tickets. 2018-02-07 13:55:34 -07:00
Sean Bowe edc4adc32c Implementation of fixed-base Edwards scalar multiplication in the circuit. 2018-02-07 13:33:09 -07:00
Sean Bowe 69833e5162 Start initializing generators for various components in the protocol. 2018-02-06 11:08:17 -07:00
Sean Bowe 55b8f7a575 Dynamic base twisted Edwards scalar multiplication in the circuit. 2018-02-02 14:24:18 -07:00
Sean Bowe f2c74a4b98 Implement conditional reversal of two allocated numbers. 2018-02-02 11:57:49 -07:00
Sean Bowe d49c0b0b0d Implement Edwards doubling in the circuit. 2018-02-02 10:01:33 -07:00
Sean Bowe 67f2cea200 Move window table lookup logic into its own module. 2018-02-02 09:50:59 -07:00
Sean Bowe ba3ef9c84c Implementation of 3-bit window table lookups. 2018-02-02 09:41:44 -07:00
Sean Bowe 9d49a60f48 Replace Montgomery point interpretation with twisted Edwards. 2018-01-29 10:38:18 -07:00
Sean Bowe f00e8a8292 Change group_hash to output points in the twisted Edwards form. 2018-01-29 08:56:58 -07:00
Sean Bowe 55598e4d4f Define get_for_y for twisted Edwards points. 2018-01-29 08:32:06 -07:00
Sean Bowe bfda59f80b Remove group hash implementation from inside the circuit, as it is no longer necessary. 2018-01-29 07:24:59 -07:00
ebfull 7d590491bd Merge pull request #15 from ebfull/pedersen-hashes
Pedersen hashes inside and outside the circuit
2018-01-29 06:06:52 -07:00
Sean Bowe 42514e7c47 Remove TODO's in favor of github issues. 2018-01-29 06:06:10 -07:00
Sean Bowe 6841763ae7 Add TODO for improving lookup performance. 2017-12-28 16:10:19 -07:00
Sean Bowe 849f330441 Add test to monitor the number of constraints consumed by the pedersen hash (in the context of a merkle tree). 2017-12-28 12:00:22 -07:00
Sean Bowe e9c9618ef4 Implement pedersen hashes inside and outside of the circuit. 2017-12-28 11:06:05 -07:00
Sean Bowe 07f2e553a7 Implement twisted Edwards point conversion and addition in the circuit. 2017-12-22 11:52:13 -07:00
Sean Bowe 8e3bef80a4 Bump version of bellman. 2017-12-22 11:52:13 -07:00
Sean Bowe e1ab3be3cc Implementation of conditional negation for AllocatedNum. 2017-12-22 11:52:13 -07:00
Sean Bowe 87548f3d1d Implementation of Montgomery point addition in the circuit. 2017-12-22 11:52:08 -07:00
ebfull 041060e5ca Merge pull request #13 from ebfull/tidy-up
Tidy up the codebase (TODOs into github issues)
2017-12-18 22:11:05 -07:00
Sean Bowe 031ae638ce Tidy up the codebase (TODOs into github issues). 2017-12-18 22:08:57 -07:00
ebfull 49cc4e05d9 Merge pull request #4 from ebfull/refactor-jubjub
Group Hash implementation in the circuit
2017-12-18 21:38:30 -07:00
Sean Bowe 1e56289f19 Implementation of group hash in the circuit. 2017-12-18 11:34:15 -07:00
Sean Bowe d143d3230a Relocate grouphash implementation. 2017-12-18 11:15:02 -07:00
Sean Bowe 7d6a57661b Add Montgomery point interpretation. 2017-12-17 10:07:00 -07:00
Sean Bowe eb8803f9eb Implementation of into_bits_strict for Num. 2017-12-17 09:31:33 -07:00
Sean Bowe 068fbbc2be Implementation of into_bits for Num. 2017-12-17 09:12:04 -07:00
Sean Bowe 6c6a193551 Implementation of from_bits_strict for Num. 2017-12-16 17:03:40 -07:00
Sean Bowe d04c5acdb8 Implement enforce_in_field and enforce_nand for Boolean. 2017-12-16 16:01:13 -07:00