Commit Graph
100 Commits
Author SHA1 Message Date
ebfull c2862a4382 Merge pull request #78 from gtank/make-privatekey-public
redjubjub: make PrivateKey internal scalar public
2018-07-12 14:01:11 -06:00
ebfull 6abfcca25a Merge pull request #74 from ebfull/ivk-pub
Make ivk pub
2018-05-18 12:45:38 -06:00
Sean Bowe 89f47ef5c2 Make ivk pub 2018-05-18 12:42:26 -06:00
ebfull eb409fa3cf Merge pull request #72 from ebfull/little-endian
Switch to little endian
2018-05-17 14:03:43 -06:00
Sean Bowe 2ff318eecb Use little endian for everything in Sapling. 2018-05-17 13:01:31 -06:00
Sean Bowe f491e02b56 Correctly interpret BLAKE2s inputs and outputs as little endian. 2018-05-17 13:01:31 -06:00
Sean Bowe 87c62e2248 Update to the latest pairing crate version. 2018-05-17 13:01:29 -06:00
ebfull 7beeb52730 Merge pull request #69 from ebfull/make-util-pub
Make util module public
2018-05-07 17:47:31 -06:00
Sean Bowe 36cd38e239 Make util module public. 2018-05-07 17:47:04 -06:00
ebfull 3b8246f3eb Merge pull request #68 from ebfull/redjubjub-final-work
Make PublicKey inner Point public so that we can use it during zk-SNARK verification
2018-05-07 14:21:49 -06:00
Sean Bowe 5687acfaf8 Make PublicKey inner Point public so that we can use it during zk-SNARK verification. 2018-05-01 15:23:34 -06:00
ebfull 347666705c Merge pull request #67 from str4d/redjubjub-serialisation
RedJubjub serialisation
2018-04-30 08:50:03 -06:00
ebfull 6e08a5a22b Merge pull request #66 from str4d/fix-spend-nf-comment
Fix comment
2018-04-29 13:08:10 -06:00
ebfull e4175d81e9 Merge pull request #64 from str4d/redjubjub
RedJubjub
2018-04-19 12:44:39 -06:00
Sean Bowe e554b473dd Update to bellman 0.1 2018-04-06 13:29:58 -06:00
ebfull 45c73dbd8f Merge pull request #54 from ebfull/sprout-circuit-minimal
Sprout circuit implementation
2018-04-02 16:55:09 -06:00
ebfull 1026e92194 Merge pull request #63 from ebfull/gh
First block of GH invocation using random beacon output
2018-03-28 16:05:20 -06:00
Sean Bowe 9f24b68b3a Update constraint system hashes. 2018-03-27 21:41:11 -06:00
Sean Bowe 3704b2422e Fix benchmark due to anchor change in witness. 2018-03-27 21:31:32 -06:00
Sean Bowe 9418001d0e First block of GH invocation using random beacon output. 2018-03-27 14:30:08 -06:00
ebfull 470c9572eb Merge pull request #60 from ebfull/optional-enforce
Allow the authentication path to be not enforced
2018-03-27 14:27:53 -06:00
ebfull 7ee29503ec Merge pull request #61 from str4d/bench-final
Update benchmark to use final Sapling circuit implementation
2018-03-27 13:13:23 -06:00
Sean Bowe cfd378685f Add more test vectors to Sprout circuit implementation. 2018-03-26 21:47:40 -06:00
Sean Bowe def5de3f16 Allow the authentication path to be not enforced for zero-value notes, for indistinguishability. 2018-03-26 13:30:14 -06:00
Sean Bowe 4de908b1e5 Fix bug in circuit uncovered by test vector. 2018-03-21 19:21:16 -06:00
Sean Bowe 162a3877e5 JoinSplit circuit implementation for Sprout. 2018-03-21 19:21:16 -06:00
Sean Bowe ac13cb05bc Implementation of SHA256. 2018-03-21 19:21:16 -06:00
Sean Bowe 75c5269d3b Implementation of SHA256 choice/majority for UInt32. 2018-03-21 19:21:16 -06:00
Sean Bowe 36a6b5fd90 Implementation of SHA256 majority operation for Boolean. 2018-03-21 19:21:16 -06:00
Sean Bowe abca61401e Implementation of SHA256 choice operation for Boolean. 2018-03-21 19:21:16 -06:00
Sean Bowe 4f0a553fbb Implement UInt32 encoding/decoding with big-endian representation. 2018-03-21 19:21:16 -06:00
Sean Bowe 51bb5f0f70 Implement UInt32::shr() for SHA256. 2018-03-21 19:21:16 -06:00
ebfull e6397507ca Merge pull request #57 from ebfull/final-circuit-changes
Final circuit changes (part 1)
2018-03-21 19:11:08 -06:00
Sean Bowe 601e8e38f8 Little-endian byte order interpretation of the output of CRH^ivk. 2018-03-19 18:06:44 -06:00
Sean Bowe f9e58c01ce Swap bit-endianness of value in note commitment. 2018-03-19 17:54:44 -06:00
Sean Bowe b14c9f8d68 Change personalizations to actually match spec this time. 2018-03-19 17:26:28 -06:00
Sean Bowe 219d03cc11 Perform multiple checks of circuit in test. 2018-03-19 17:05:51 -06:00
Sean Bowe 8b6f113052 Change personalization to more closely align with the spec. 2018-03-17 10:24:55 -06:00
Sean Bowe d09c4d6ce8 Simplify value commitment gadget. 2018-03-17 09:10:13 -06:00
Sean Bowe 6d01e78711 Fix variable names in output circuit 2018-03-17 09:02:29 -06:00
Sean Bowe 13b03a0a1a Relocate circuit components for intuitive code paths. 2018-03-16 22:21:29 -06:00
Sean Bowe 00ee962429 Fix some names of variables. 2018-03-16 15:46:19 -06:00
Sean Bowe 8b2f231e2f Change personalization to match specification. 2018-03-16 15:46:19 -06:00
Sean Bowe 7e05feb90b Changes to names and circuit design to match spec. 2018-03-16 15:46:15 -06:00
ebfull c09292672a Merge pull request #56 from rex4539/fix-typos
Fix typos
2018-03-16 15:44:02 -06:00
ebfull 39f1152e16 Merge pull request #53 from ebfull/circuit-improvements
Minor circuit improvements
2018-03-15 12:47:26 -06:00
Sean Bowe 21625d69e0 Place Sapling circuit into submodule. 2018-03-15 12:44:19 -06:00
Sean Bowe ca202ef304 Introduce input multipacking abstraction for nullifiers. 2018-03-15 12:36:05 -06:00
Sean Bowe 52eb59766b Optimize UInt32::addmany/BLAKE2s to combine equality constraints. (Closes #5) 2018-03-15 12:31:10 -06:00
Sean Bowe 827e85547e Public input verification utility for the test framework 2018-03-15 11:42:22 -06:00
ebfull 3c07a2d9b3 Merge pull request #30 from plutomonkey/boolean_enforce_equal
Optimise Boolean::enforce_equal.
2018-03-14 07:28:33 -06:00
Sean Bowe 2c69abe268 Add Uncommitted^Sapling. 2018-03-09 14:17:45 -07:00
Sean Bowe c1784f0fdf Check g_d is not small order in Spend circuit. 2018-03-09 14:08:01 -07:00
ebfull 390f2c129b Merge pull request #37 from ebfull/circuit-tests
Circuit tests
2018-03-08 19:18:40 -07:00
Sean Bowe b6e1b52a44 Fix comment about Montgomery curve selection 2018-03-08 13:03:07 -07:00
Sean Bowe db28ff7ba1 Simplify the Output witness. 2018-03-08 01:49:27 -07:00
Sean Bowe 9998400117 Relocate structs for cleanliness. 2018-03-08 01:37:55 -07:00
Sean Bowe 512a394b30 Simplify witness for Spend statement. 2018-03-08 01:36:16 -07:00
Sean Bowe 3fbbd933cf Simplify value commitment abstraction. 2018-03-08 01:16:21 -07:00
Sean Bowe d6d86737c8 Remove some code duplication for value commitment witnessing. 2018-03-08 01:01:00 -07:00
Sean Bowe f61cc88a71 More comment improvements. 2018-03-08 00:51:53 -07:00
Sean Bowe b6ef12b077 General code quality improvements. 2018-03-08 00:41:47 -07:00
Sean Bowe 896b144a7d Move first block of group hash to constants submodule. 2018-03-08 00:09:34 -07:00
Sean Bowe c7c8d3c039 Move personalization constants to submodule. 2018-03-08 00:06:53 -07:00
Sean Bowe 25a8050df8 Remaining tests for input circuit 2018-03-07 23:59:04 -07:00
Sean Bowe b998190f9e Disable this, for now. 2018-03-07 23:45:08 -07:00
Sean Bowe 0242ed35ab Add some circuit tests for inputs. 2018-03-07 12:19:56 -07:00
Sean Bowe 2d4be07560 Fix group hash comment. 2018-03-06 22:26:03 -07:00
Sean Bowe ef85173df5 Fix comments in jubjub code. 2018-03-06 22:25:15 -07:00
Sean Bowe b0b3514fa7 Add bench_50 example. 2018-03-06 10:21:30 -07:00
Sean Bowe 1f65d4b353 Change tree depth to 32 in test. 2018-03-06 10:04:02 -07:00
Sean Bowe 1f2bb62657 Rename proving key to proof generation key to disambiguate from the SNARK. 2018-03-06 09:56:29 -07:00
Sean Bowe c31092ce7f Remove unnecessary mut binding. 2018-03-06 09:39:56 -07:00
ebfull c253e51e3d Merge pull request #35 from ebfull/primitives
WIP bundle
2018-03-06 09:10:23 -07:00
Sean Bowe 63c6830429 Cache fewer pedersen hash generators. 2018-03-06 09:03:29 -07:00
Sean Bowe 7a9879eb54 Make EdwardsPoint (x, y) not public. 2018-03-06 08:38:34 -07:00
Sean Bowe f155c01cf5 Personalize GH for each generator independently. 2018-03-06 08:30:28 -07:00
Sean Bowe b831942501 Adopt BLAKE2s personalization throughout protocol. 2018-03-05 19:32:27 -07:00
Sean Bowe d21ff08176 Group hash should use a first block containing random data as per spec. 2018-03-05 18:08:49 -07:00
Sean Bowe 058801bdfc Switch to using the blake2-rfc crate instead. 2018-03-05 17:58:34 -07:00
Sean Bowe 2e846844e7 Perform ak group order check in Spend circuit. 2018-03-05 17:46:12 -07:00
Sean Bowe 7bb630a4b1 Use correct personalization for merkle tree. 2018-03-05 17:27:55 -07:00
Sean Bowe c6cf0c718c Value placed in note contents should be in big endian bit order. 2018-03-05 16:10:55 -07:00
Sean Bowe b45a37febb Add comments and reorder some generators. 2018-03-05 16:00:04 -07:00
Sean Bowe 69010d1502 Relocate Pedersen hash personalization enum. 2018-03-05 15:25:40 -07:00
Sean Bowe 8cbcd7739c Rename into_bits and into_bits_strict to signify endianness. 2018-03-05 15:12:51 -07:00
Sean Bowe 3971ecd375 Abstract away the boolean conversion of field witnessing. 2018-03-05 10:52:56 -07:00
Sean Bowe 543f5cd49c Change bit-endianness of into_bits/into_bits_strict. 2018-03-05 10:27:14 -07:00
Sean Bowe 3e15751fd1 Allocate the note value directly in little-endian bit order. 2018-03-05 09:37:13 -07:00
Sean Bowe e52befb58e Introduce inputize abstractions to simplify circuit code. 2018-03-04 23:33:05 -07:00
Sean Bowe 51c35a9bcf Adopt new versions of pairing and bellman. 2018-03-04 22:25:04 -07:00
Sean Bowe 57687cf70f Creation of the Note primitive. 2018-02-24 22:53:00 -07:00
ebfull 4f4a2d63db Merge pull request #34 from ebfull/output-circuit
WIP circuit development
2018-02-24 17:22:42 -07:00
Sean Bowe 27674bf8ff Derive Clone for EdwardsPoint. 2018-02-24 17:11:17 -07:00
Sean Bowe 3346fba915 Implementation of Jubjub point representation. 2018-02-24 14:11:01 -07:00
Sean Bowe 4441a0da41 Hash the constraint systems to check integrity. 2018-02-24 09:09:20 -07:00
Sean Bowe 23d17b9042 Minor adjustments. 2018-02-23 18:09:26 -07:00
Sean Bowe 7a7774d8af Remove unused imports in Boolean. 2018-02-23 11:28:17 -07:00
Sean Bowe 8c37212645 Remove kary_and from Boolean. 2018-02-23 11:25:59 -07:00
Sean Bowe a45986ff97 Remove enforce_nand. 2018-02-23 11:24:42 -07:00