Commit Graph

181 Commits

Author SHA1 Message Date
Sean Bowe 87c62e2248
Update to the latest pairing crate version. 2018-05-17 13:01:29 -06:00
ebfull 7beeb52730
Merge pull request #69 from ebfull/make-util-pub
Make util module public
2018-05-07 17:47:31 -06:00
Sean Bowe 36cd38e239
Make util module public. 2018-05-07 17:47:04 -06:00
ebfull 3b8246f3eb
Merge pull request #68 from ebfull/redjubjub-final-work
Make PublicKey inner Point public so that we can use it during zk-SNARK verification
2018-05-07 14:21:49 -06:00
Sean Bowe 5687acfaf8
Make PublicKey inner Point public so that we can use it during zk-SNARK verification. 2018-05-01 15:23:34 -06:00
ebfull 347666705c
Merge pull request #67 from str4d/redjubjub-serialisation
RedJubjub serialisation
2018-04-30 08:50:03 -06:00
Jack Grigg b27dc2914b
Remove redundant signature check
E::Fs guarantees its representation is in the field, implicitly enforcing
that S < order(G).
2018-04-30 13:55:41 +01:00
ebfull 6e08a5a22b
Merge pull request #66 from str4d/fix-spend-nf-comment
Fix comment
2018-04-29 13:08:10 -06:00
Jack Grigg e94dbf2523
Parameterize the generator in RedJubjub
Per the specification, the generator is different between BindingSig and
SpendAuthSig.
2018-04-26 22:42:54 +01:00
Jack Grigg 4eab1fc68a
Implement RedJubjub serialization
Also alters the Signature struct to store Rbar and Sbar instead of R and S,
to more closely match the specification.
2018-04-26 22:42:20 +01:00
Jack Grigg f54feda94f
Fix comment
h/t omershlo from Zcash Community Chat for spotting it!
2018-04-26 12:30:08 +01:00
ebfull e4175d81e9
Merge pull request #64 from str4d/redjubjub
RedJubjub
2018-04-19 12:44:39 -06:00
Jack Grigg 840c23bd23
Specify pre-conditions for signature validation 2018-04-19 16:17:40 +01:00
Jack Grigg 45e4ca38e4
Match additive notation with variable name 2018-04-18 23:59:22 +01:00
Jack Grigg 916dbce2df
Implement RedJubjub
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
2018-04-17 00:40:11 +01:00
Jack Grigg 0f230a70b9
Implement uniform sampling of Jubjub scalars
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
2018-04-15 15:52:45 -06:00
Sean Bowe e554b473dd
Update to bellman 0.1 2018-04-06 13:29:58 -06:00
ebfull 45c73dbd8f
Merge pull request #54 from ebfull/sprout-circuit-minimal
Sprout circuit implementation
2018-04-02 16:55:09 -06:00
ebfull 1026e92194
Merge pull request #63 from ebfull/gh
First block of GH invocation using random beacon output
2018-03-28 16:05:20 -06:00
Sean Bowe 9f24b68b3a
Update constraint system hashes. 2018-03-27 21:41:11 -06:00
Sean Bowe 3704b2422e
Fix benchmark due to anchor change in witness. 2018-03-27 21:31:32 -06:00
Sean Bowe 9418001d0e
First block of GH invocation using random beacon output. 2018-03-27 14:30:08 -06:00
ebfull 470c9572eb
Merge pull request #60 from ebfull/optional-enforce
Allow the authentication path to be not enforced
2018-03-27 14:27:53 -06:00
ebfull 7ee29503ec
Merge pull request #61 from str4d/bench-final
Update benchmark to use final Sapling circuit implementation
2018-03-27 13:13:23 -06:00
Jack Grigg 97bead9977
Update benchmark to use final Sapling circuit implementation 2018-03-27 16:03:02 +02:00
Sean Bowe cfd378685f
Add more test vectors to Sprout circuit implementation. 2018-03-26 21:47:40 -06:00
Sean Bowe def5de3f16
Allow the authentication path to be not enforced for zero-value notes, for indistinguishability. 2018-03-26 13:30:14 -06:00
Jack Grigg d715e812bd
Un-disable benchmark 2018-03-24 00:40:16 +01:00
Sean Bowe 4de908b1e5
Fix bug in circuit uncovered by test vector. 2018-03-21 19:21:16 -06:00
Sean Bowe 162a3877e5
JoinSplit circuit implementation for Sprout. 2018-03-21 19:21:16 -06:00
Sean Bowe ac13cb05bc
Implementation of SHA256. 2018-03-21 19:21:16 -06:00
Sean Bowe 75c5269d3b
Implementation of SHA256 choice/majority for UInt32. 2018-03-21 19:21:16 -06:00
Sean Bowe 36a6b5fd90
Implementation of SHA256 majority operation for Boolean. 2018-03-21 19:21:16 -06:00
Sean Bowe abca61401e
Implementation of SHA256 choice operation for Boolean. 2018-03-21 19:21:16 -06:00
Sean Bowe 4f0a553fbb
Implement UInt32 encoding/decoding with big-endian representation. 2018-03-21 19:21:16 -06:00
Sean Bowe 51bb5f0f70
Implement UInt32::shr() for SHA256. 2018-03-21 19:21:16 -06:00
ebfull e6397507ca
Merge pull request #57 from ebfull/final-circuit-changes
Final circuit changes (part 1)
2018-03-21 19:11:08 -06:00
Sean Bowe 601e8e38f8
Little-endian byte order interpretation of the output of CRH^ivk. 2018-03-19 18:06:44 -06:00
Sean Bowe f9e58c01ce
Swap bit-endianness of value in note commitment. 2018-03-19 17:54:44 -06:00
Sean Bowe b14c9f8d68
Change personalizations to actually match spec this time. 2018-03-19 17:26:28 -06:00
Sean Bowe 219d03cc11
Perform multiple checks of circuit in test. 2018-03-19 17:05:51 -06:00
Sean Bowe 8b6f113052
Change personalization to more closely align with the spec. 2018-03-17 10:24:55 -06:00
Sean Bowe d09c4d6ce8
Simplify value commitment gadget. 2018-03-17 09:10:13 -06:00
Sean Bowe 6d01e78711
Fix variable names in output circuit 2018-03-17 09:02:29 -06:00
Sean Bowe 13b03a0a1a
Relocate circuit components for intuitive code paths. 2018-03-16 22:21:29 -06:00
Sean Bowe 00ee962429
Fix some names of variables. 2018-03-16 15:46:19 -06:00
Sean Bowe 8b2f231e2f
Change personalization to match specification. 2018-03-16 15:46:19 -06:00
Sean Bowe 7e05feb90b
Changes to names and circuit design to match spec. 2018-03-16 15:46:15 -06:00
ebfull c09292672a
Merge pull request #56 from rex4539/fix-typos
Fix typos
2018-03-16 15:44:02 -06:00
Dimitris Apostolou a7d704cd10
Fix typos 2018-03-16 23:25:36 +02:00