198 Commits

Author SHA1 Message Date
ebfull
21084bde20
Merge pull request #81 from ebfull/must_use
Add must_use to operations over Edwards points
2018-07-30 18:40:16 -06:00
Sean Bowe
b4d41b689c
Add must_use to operations over Edwards/Montgomery points. 2018-07-30 18:37:01 -06:00
ebfull
b70d6e66fc
Merge pull request #79 from ebfull/pedersen-hash-performance
Improve Pedersen hash performance
2018-07-30 18:29:14 -06:00
ebfull
99c03c5708
Merge pull request #80 from ebfull/cofactor-signature-checking
Cofactor signature checking
2018-07-30 11:50:26 -06:00
Sean Bowe
95b498af33
Implement specialized doubling formula for extended twisted edwards coordinates. 2018-07-30 07:30:40 -06:00
Sean Bowe
821810cd82
Change pedersen hash outside the circuit to use window table lookups. 2018-07-30 07:30:40 -06:00
Sean Bowe
9cb8accf09
Fix nits 2018-07-30 07:29:23 -06:00
Sean Bowe
a57d2773ab
Add demonstration implementation of batch verification. 2018-07-27 10:54:21 -06:00
Sean Bowe
cae9715a8e
Change signature verification equation to permit batch verification. 2018-07-27 10:37:26 -06:00
Sean Bowe
3e43cae526
Add test that torsion doesn't affect signature verification. 2018-07-27 10:28:08 -06:00
ebfull
c2862a4382
Merge pull request #78 from gtank/make-privatekey-public
redjubjub: make PrivateKey internal scalar public
2018-07-12 14:01:11 -06:00
George Tankersley
df7bfce0be redjubjub: make PrivateKey internal scalar public 2018-07-12 19:58:32 +00:00
ebfull
6abfcca25a
Merge pull request #74 from ebfull/ivk-pub
Make ivk pub
2018-05-18 12:45:38 -06:00
Sean Bowe
89f47ef5c2
Make ivk pub 2018-05-18 12:42:26 -06:00
ebfull
eb409fa3cf
Merge pull request #72 from ebfull/little-endian
Switch to little endian
2018-05-17 14:03:43 -06:00
Sean Bowe
2ff318eecb
Use little endian for everything in Sapling. 2018-05-17 13:01:31 -06:00
Sean Bowe
f491e02b56
Correctly interpret BLAKE2s inputs and outputs as little endian. 2018-05-17 13:01:31 -06:00
Sean Bowe
87c62e2248
Update to the latest pairing crate version. 2018-05-17 13:01:29 -06:00
ebfull
7beeb52730
Merge pull request #69 from ebfull/make-util-pub
Make util module public
2018-05-07 17:47:31 -06:00
Sean Bowe
36cd38e239
Make util module public. 2018-05-07 17:47:04 -06:00
ebfull
3b8246f3eb
Merge pull request #68 from ebfull/redjubjub-final-work
Make PublicKey inner Point public so that we can use it during zk-SNARK verification
2018-05-07 14:21:49 -06:00
Sean Bowe
5687acfaf8
Make PublicKey inner Point public so that we can use it during zk-SNARK verification. 2018-05-01 15:23:34 -06:00
ebfull
347666705c
Merge pull request #67 from str4d/redjubjub-serialisation
RedJubjub serialisation
2018-04-30 08:50:03 -06:00
Jack Grigg
b27dc2914b
Remove redundant signature check
E::Fs guarantees its representation is in the field, implicitly enforcing
that S < order(G).
2018-04-30 13:55:41 +01:00
ebfull
6e08a5a22b
Merge pull request #66 from str4d/fix-spend-nf-comment
Fix comment
2018-04-29 13:08:10 -06:00
Jack Grigg
e94dbf2523
Parameterize the generator in RedJubjub
Per the specification, the generator is different between BindingSig and
SpendAuthSig.
2018-04-26 22:42:54 +01:00
Jack Grigg
4eab1fc68a
Implement RedJubjub serialization
Also alters the Signature struct to store Rbar and Sbar instead of R and S,
to more closely match the specification.
2018-04-26 22:42:20 +01:00
Jack Grigg
f54feda94f
Fix comment
h/t omershlo from Zcash Community Chat for spotting it!
2018-04-26 12:30:08 +01:00
ebfull
e4175d81e9
Merge pull request #64 from str4d/redjubjub
RedJubjub
2018-04-19 12:44:39 -06:00
Jack Grigg
840c23bd23
Specify pre-conditions for signature validation 2018-04-19 16:17:40 +01:00
Jack Grigg
45e4ca38e4
Match additive notation with variable name 2018-04-18 23:59:22 +01:00
Jack Grigg
916dbce2df
Implement RedJubjub
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
2018-04-17 00:40:11 +01:00
Jack Grigg
0f230a70b9
Implement uniform sampling of Jubjub scalars
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
2018-04-15 15:52:45 -06:00
Sean Bowe
e554b473dd
Update to bellman 0.1 2018-04-06 13:29:58 -06:00
ebfull
45c73dbd8f
Merge pull request #54 from ebfull/sprout-circuit-minimal
Sprout circuit implementation
2018-04-02 16:55:09 -06:00
ebfull
1026e92194
Merge pull request #63 from ebfull/gh
First block of GH invocation using random beacon output
2018-03-28 16:05:20 -06:00
Sean Bowe
9f24b68b3a
Update constraint system hashes. 2018-03-27 21:41:11 -06:00
Sean Bowe
3704b2422e
Fix benchmark due to anchor change in witness. 2018-03-27 21:31:32 -06:00
Sean Bowe
9418001d0e
First block of GH invocation using random beacon output. 2018-03-27 14:30:08 -06:00
ebfull
470c9572eb
Merge pull request #60 from ebfull/optional-enforce
Allow the authentication path to be not enforced
2018-03-27 14:27:53 -06:00
ebfull
7ee29503ec
Merge pull request #61 from str4d/bench-final
Update benchmark to use final Sapling circuit implementation
2018-03-27 13:13:23 -06:00
Jack Grigg
97bead9977
Update benchmark to use final Sapling circuit implementation 2018-03-27 16:03:02 +02:00
Sean Bowe
cfd378685f
Add more test vectors to Sprout circuit implementation. 2018-03-26 21:47:40 -06:00
Sean Bowe
def5de3f16
Allow the authentication path to be not enforced for zero-value notes, for indistinguishability. 2018-03-26 13:30:14 -06:00
Jack Grigg
d715e812bd
Un-disable benchmark 2018-03-24 00:40:16 +01:00
Sean Bowe
4de908b1e5
Fix bug in circuit uncovered by test vector. 2018-03-21 19:21:16 -06:00
Sean Bowe
162a3877e5
JoinSplit circuit implementation for Sprout. 2018-03-21 19:21:16 -06:00
Sean Bowe
ac13cb05bc
Implementation of SHA256. 2018-03-21 19:21:16 -06:00
Sean Bowe
75c5269d3b
Implementation of SHA256 choice/majority for UInt32. 2018-03-21 19:21:16 -06:00
Sean Bowe
36a6b5fd90
Implementation of SHA256 majority operation for Boolean. 2018-03-21 19:21:16 -06:00