Sean Bowe
|
36cd38e239
|
Make util module public.
|
2018-05-07 17:47:04 -06:00 |
|
Sean Bowe
|
5687acfaf8
|
Make PublicKey inner Point public so that we can use it during zk-SNARK verification.
|
2018-05-01 15:23:34 -06:00 |
|
ebfull
|
347666705c
|
Merge pull request #67 from str4d/redjubjub-serialisation
RedJubjub serialisation
|
2018-04-30 08:50:03 -06:00 |
Jack Grigg
|
b27dc2914b
|
Remove redundant signature check
E::Fs guarantees its representation is in the field, implicitly enforcing
that S < order(G).
|
2018-04-30 13:55:41 +01:00 |
|
Jack Grigg
|
e94dbf2523
|
Parameterize the generator in RedJubjub
Per the specification, the generator is different between BindingSig and
SpendAuthSig.
|
2018-04-26 22:42:54 +01:00 |
|
Jack Grigg
|
4eab1fc68a
|
Implement RedJubjub serialization
Also alters the Signature struct to store Rbar and Sbar instead of R and S,
to more closely match the specification.
|
2018-04-26 22:42:20 +01:00 |
|
Jack Grigg
|
f54feda94f
|
Fix comment
h/t omershlo from Zcash Community Chat for spotting it!
|
2018-04-26 12:30:08 +01:00 |
|
Jack Grigg
|
840c23bd23
|
Specify pre-conditions for signature validation
|
2018-04-19 16:17:40 +01:00 |
|
Jack Grigg
|
45e4ca38e4
|
Match additive notation with variable name
|
2018-04-18 23:59:22 +01:00 |
|
Jack Grigg
|
916dbce2df
|
Implement RedJubjub
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
|
2018-04-17 00:40:11 +01:00 |
|
Jack Grigg
|
0f230a70b9
|
Implement uniform sampling of Jubjub scalars
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
|
2018-04-15 15:52:45 -06:00 |
|
ebfull
|
45c73dbd8f
|
Merge pull request #54 from ebfull/sprout-circuit-minimal
Sprout circuit implementation
|
2018-04-02 16:55:09 -06:00 |
|
Sean Bowe
|
9f24b68b3a
|
Update constraint system hashes.
|
2018-03-27 21:41:11 -06:00 |
|
Sean Bowe
|
9418001d0e
|
First block of GH invocation using random beacon output.
|
2018-03-27 14:30:08 -06:00 |
|
Sean Bowe
|
cfd378685f
|
Add more test vectors to Sprout circuit implementation.
|
2018-03-26 21:47:40 -06:00 |
|
Sean Bowe
|
def5de3f16
|
Allow the authentication path to be not enforced for zero-value notes, for indistinguishability.
|
2018-03-26 13:30:14 -06:00 |
|
Sean Bowe
|
4de908b1e5
|
Fix bug in circuit uncovered by test vector.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
162a3877e5
|
JoinSplit circuit implementation for Sprout.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
ac13cb05bc
|
Implementation of SHA256.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
75c5269d3b
|
Implementation of SHA256 choice/majority for UInt32.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
36a6b5fd90
|
Implementation of SHA256 majority operation for Boolean.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
abca61401e
|
Implementation of SHA256 choice operation for Boolean.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
4f0a553fbb
|
Implement UInt32 encoding/decoding with big-endian representation.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
51bb5f0f70
|
Implement UInt32::shr() for SHA256.
|
2018-03-21 19:21:16 -06:00 |
|
Sean Bowe
|
601e8e38f8
|
Little-endian byte order interpretation of the output of CRH^ivk.
|
2018-03-19 18:06:44 -06:00 |
|
Sean Bowe
|
f9e58c01ce
|
Swap bit-endianness of value in note commitment.
|
2018-03-19 17:54:44 -06:00 |
|
Sean Bowe
|
b14c9f8d68
|
Change personalizations to actually match spec this time.
|
2018-03-19 17:26:28 -06:00 |
|
Sean Bowe
|
219d03cc11
|
Perform multiple checks of circuit in test.
|
2018-03-19 17:05:51 -06:00 |
|
Sean Bowe
|
8b6f113052
|
Change personalization to more closely align with the spec.
|
2018-03-17 10:24:55 -06:00 |
|
Sean Bowe
|
d09c4d6ce8
|
Simplify value commitment gadget.
|
2018-03-17 09:10:13 -06:00 |
|
Sean Bowe
|
6d01e78711
|
Fix variable names in output circuit
|
2018-03-17 09:02:29 -06:00 |
|
Sean Bowe
|
13b03a0a1a
|
Relocate circuit components for intuitive code paths.
|
2018-03-16 22:21:29 -06:00 |
|
Sean Bowe
|
00ee962429
|
Fix some names of variables.
|
2018-03-16 15:46:19 -06:00 |
|
Sean Bowe
|
8b2f231e2f
|
Change personalization to match specification.
|
2018-03-16 15:46:19 -06:00 |
|
Sean Bowe
|
7e05feb90b
|
Changes to names and circuit design to match spec.
|
2018-03-16 15:46:15 -06:00 |
Dimitris Apostolou
|
a7d704cd10
|
Fix typos
|
2018-03-16 23:25:36 +02:00 |
|
ebfull
|
39f1152e16
|
Merge pull request #53 from ebfull/circuit-improvements
Minor circuit improvements
|
2018-03-15 12:47:26 -06:00 |
|
Sean Bowe
|
21625d69e0
|
Place Sapling circuit into submodule.
|
2018-03-15 12:44:19 -06:00 |
|
Sean Bowe
|
ca202ef304
|
Introduce input multipacking abstraction for nullifiers.
|
2018-03-15 12:36:05 -06:00 |
|
Sean Bowe
|
52eb59766b
|
Optimize UInt32::addmany/BLAKE2s to combine equality constraints. (Closes #5)
|
2018-03-15 12:31:10 -06:00 |
|
Sean Bowe
|
827e85547e
|
Public input verification utility for the test framework
|
2018-03-15 11:42:22 -06:00 |
Jason Davies
|
661f318eb7
|
Optimise Boolean::enforce_equal.
Use a single constraint instead of two.
Fixes #6.
|
2018-03-09 23:53:28 +00:00 |
|
Sean Bowe
|
2c69abe268
|
Add Uncommitted^Sapling.
|
2018-03-09 14:17:45 -07:00 |
|
Sean Bowe
|
c1784f0fdf
|
Check g_d is not small order in Spend circuit.
|
2018-03-09 14:08:01 -07:00 |
|
Sean Bowe
|
b6e1b52a44
|
Fix comment about Montgomery curve selection
|
2018-03-08 13:03:07 -07:00 |
|
Sean Bowe
|
db28ff7ba1
|
Simplify the Output witness.
|
2018-03-08 01:49:27 -07:00 |
|
Sean Bowe
|
9998400117
|
Relocate structs for cleanliness.
|
2018-03-08 01:37:55 -07:00 |
|
Sean Bowe
|
512a394b30
|
Simplify witness for Spend statement.
|
2018-03-08 01:36:16 -07:00 |
|
Sean Bowe
|
3fbbd933cf
|
Simplify value commitment abstraction.
|
2018-03-08 01:16:21 -07:00 |
|
Sean Bowe
|
d6d86737c8
|
Remove some code duplication for value commitment witnessing.
|
2018-03-08 01:01:00 -07:00 |