Sean Bowe
|
f61cc88a71
|
More comment improvements.
|
2018-03-08 00:51:53 -07:00 |
|
Sean Bowe
|
b6ef12b077
|
General code quality improvements.
|
2018-03-08 00:41:47 -07:00 |
|
Sean Bowe
|
896b144a7d
|
Move first block of group hash to constants submodule.
|
2018-03-08 00:09:34 -07:00 |
|
Sean Bowe
|
c7c8d3c039
|
Move personalization constants to submodule.
|
2018-03-08 00:06:53 -07:00 |
|
Sean Bowe
|
25a8050df8
|
Remaining tests for input circuit
|
2018-03-07 23:59:04 -07:00 |
|
Sean Bowe
|
0242ed35ab
|
Add some circuit tests for inputs.
|
2018-03-07 12:19:56 -07:00 |
|
Sean Bowe
|
2d4be07560
|
Fix group hash comment.
|
2018-03-06 22:26:03 -07:00 |
|
Sean Bowe
|
ef85173df5
|
Fix comments in jubjub code.
|
2018-03-06 22:25:15 -07:00 |
|
Sean Bowe
|
1f65d4b353
|
Change tree depth to 32 in test.
|
2018-03-06 10:04:02 -07:00 |
|
Sean Bowe
|
1f2bb62657
|
Rename proving key to proof generation key to disambiguate from the SNARK.
|
2018-03-06 09:56:29 -07:00 |
|
Sean Bowe
|
c31092ce7f
|
Remove unnecessary mut binding.
|
2018-03-06 09:39:56 -07:00 |
|
Sean Bowe
|
63c6830429
|
Cache fewer pedersen hash generators.
|
2018-03-06 09:03:29 -07:00 |
|
Sean Bowe
|
7a9879eb54
|
Make EdwardsPoint (x, y) not public.
|
2018-03-06 08:38:34 -07:00 |
|
Sean Bowe
|
f155c01cf5
|
Personalize GH for each generator independently.
|
2018-03-06 08:30:28 -07:00 |
|
Sean Bowe
|
b831942501
|
Adopt BLAKE2s personalization throughout protocol.
|
2018-03-05 19:32:27 -07:00 |
|
Sean Bowe
|
d21ff08176
|
Group hash should use a first block containing random data as per spec.
|
2018-03-05 18:08:49 -07:00 |
|
Sean Bowe
|
058801bdfc
|
Switch to using the blake2-rfc crate instead.
|
2018-03-05 17:58:34 -07:00 |
|
Sean Bowe
|
2e846844e7
|
Perform ak group order check in Spend circuit.
|
2018-03-05 17:46:12 -07:00 |
|
Sean Bowe
|
7bb630a4b1
|
Use correct personalization for merkle tree.
|
2018-03-05 17:27:55 -07:00 |
|
Sean Bowe
|
c6cf0c718c
|
Value placed in note contents should be in big endian bit order.
|
2018-03-05 16:10:55 -07:00 |
|
Sean Bowe
|
b45a37febb
|
Add comments and reorder some generators.
|
2018-03-05 16:00:04 -07:00 |
|
Sean Bowe
|
69010d1502
|
Relocate Pedersen hash personalization enum.
|
2018-03-05 15:25:40 -07:00 |
|
Sean Bowe
|
8cbcd7739c
|
Rename into_bits and into_bits_strict to signify endianness.
|
2018-03-05 15:12:51 -07:00 |
|
Sean Bowe
|
3971ecd375
|
Abstract away the boolean conversion of field witnessing.
|
2018-03-05 10:52:56 -07:00 |
|
Sean Bowe
|
543f5cd49c
|
Change bit-endianness of into_bits/into_bits_strict.
|
2018-03-05 10:27:14 -07:00 |
|
Sean Bowe
|
3e15751fd1
|
Allocate the note value directly in little-endian bit order.
|
2018-03-05 09:37:13 -07:00 |
|
Sean Bowe
|
e52befb58e
|
Introduce inputize abstractions to simplify circuit code.
|
2018-03-04 23:33:05 -07:00 |
|
Sean Bowe
|
51c35a9bcf
|
Adopt new versions of pairing and bellman.
|
2018-03-04 22:25:04 -07:00 |
|
Sean Bowe
|
57687cf70f
|
Creation of the Note primitive.
|
2018-02-24 22:53:00 -07:00 |
|
Sean Bowe
|
27674bf8ff
|
Derive Clone for EdwardsPoint.
|
2018-02-24 17:11:17 -07:00 |
|
Sean Bowe
|
3346fba915
|
Implementation of Jubjub point representation.
|
2018-02-24 14:11:01 -07:00 |
|
Sean Bowe
|
4441a0da41
|
Hash the constraint systems to check integrity.
|
2018-02-24 09:09:20 -07:00 |
|
Sean Bowe
|
23d17b9042
|
Minor adjustments.
|
2018-02-23 18:09:26 -07:00 |
|
Sean Bowe
|
7a7774d8af
|
Remove unused imports in Boolean.
|
2018-02-23 11:28:17 -07:00 |
|
Sean Bowe
|
8c37212645
|
Remove kary_and from Boolean.
|
2018-02-23 11:25:59 -07:00 |
|
Sean Bowe
|
a45986ff97
|
Remove enforce_nand.
|
2018-02-23 11:24:42 -07:00 |
|
Sean Bowe
|
0d56c7a902
|
Remove enforce_in_field.
|
2018-02-23 11:18:39 -07:00 |
|
Sean Bowe
|
69abd0391f
|
Optimize into_bits_strict.
|
2018-02-23 11:15:14 -07:00 |
|
Sean Bowe
|
97585a30ad
|
Remove from_bits_strict from AllocatedNum.
|
2018-02-23 09:26:12 -07:00 |
|
Sean Bowe
|
c812805b31
|
Slight refactor of representations
|
2018-02-22 18:43:07 -07:00 |
|
Sean Bowe
|
ba7298de3f
|
Crappy mock-up of the circuit.
|
2018-02-22 11:36:44 -07:00 |
|
Sean Bowe
|
4b6623cf44
|
Add some personalization and a generator.
|
2018-02-22 07:29:55 -07:00 |
|
Sean Bowe
|
e8480a2b2c
|
Utility for witnessing points on the curve.
|
2018-02-20 18:36:53 -07:00 |
|
Sean Bowe
|
c221bc9126
|
Rename `mont` to `ecc` in circuit code.
|
2018-02-20 18:18:29 -07:00 |
|
Sean Bowe
|
a1c749e6a0
|
Change fixed-base exponentiation API to handle scalars better.
|
2018-02-20 18:12:27 -07:00 |
|
Sean Bowe
|
88bdff6ce9
|
Pedersen hashes with full optimization
|
2018-02-20 17:22:00 -07:00 |
|
Sean Bowe
|
4fa73efc1e
|
Remove conditional negation implementation from AllocatedNum.
|
2018-02-20 16:41:33 -07:00 |
|
Sean Bowe
|
c89d47bb07
|
Remove Montgomery point doubling implementation in the circuit.
|
2018-02-20 16:38:44 -07:00 |
|
Sean Bowe
|
1610bcfbcf
|
Perform the y-coordinate conditional negation and lookup simultaneously.
|
2018-02-20 16:31:27 -07:00 |
|
Sean Bowe
|
6f66fd3f9d
|
Express x and y coordinates from lookup as linear combinations.
|
2018-02-20 16:11:48 -07:00 |
|
Sean Bowe
|
b37d9b11cb
|
More efficient implementation of Edwards doubling in the circuit.
|
2018-02-20 15:38:28 -07:00 |
|
Sean Bowe
|
6e80c12365
|
Add TODO
|
2018-02-20 15:11:29 -07:00 |
|
Sean Bowe
|
d779f31ccd
|
Force personalization of Pedersen hashes.
|
2018-02-20 15:11:29 -07:00 |
|
Sean Bowe
|
39175a0c2a
|
Remove unneeded imports
|
2018-02-20 15:11:29 -07:00 |
|
Sean Bowe
|
5118fd5008
|
Add new fixed generators for the output circuit
|
2018-02-20 15:11:29 -07:00 |
|
Sean Bowe
|
ec7323159c
|
Booleanize u64 objects.
|
2018-02-20 15:11:29 -07:00 |
|
Sean Bowe
|
1df7fbeeff
|
Refactor "booleanization" of objects.
|
2018-02-20 15:11:29 -07:00 |
|
ebfull
|
8d633db82b
|
Merge pull request #29 from ebfull/pedersen-chunks
63 chunks per pedersen hash segment
|
2018-02-20 15:09:59 -07:00 |
|
Sean Bowe
|
2f95a9094a
|
Refactor to handle changes to ConstraintSystem API (no more Variable associated type, one is now static method).
|
2018-02-16 08:45:18 -07:00 |
|
Sean Bowe
|
814cfef769
|
Use more descriptive synthesis errors now available in bellman.
|
2018-02-16 08:45:17 -07:00 |
|
Sean Bowe
|
683aa93b44
|
Account for change in bellman's API for enforcement to use closures.
|
2018-02-16 08:44:27 -07:00 |
|
Sean Bowe
|
821d22261e
|
Raise the number of chunks in Pedersen hashes to 63.
|
2018-02-11 12:59:57 -07:00 |
|
Sean Bowe
|
52829af6d8
|
Fix test for pedersen hash chunks per generator.
|
2018-02-11 12:59:49 -07:00 |
|
Sean Bowe
|
73e73d7c8c
|
Remove TODOs by creating tickets.
|
2018-02-07 13:55:34 -07:00 |
|
Sean Bowe
|
edc4adc32c
|
Implementation of fixed-base Edwards scalar multiplication in the circuit.
|
2018-02-07 13:33:09 -07:00 |
|
Sean Bowe
|
69833e5162
|
Start initializing generators for various components in the protocol.
|
2018-02-06 11:08:17 -07:00 |
|
Sean Bowe
|
55b8f7a575
|
Dynamic base twisted Edwards scalar multiplication in the circuit.
|
2018-02-02 14:24:18 -07:00 |
|
Sean Bowe
|
f2c74a4b98
|
Implement conditional reversal of two allocated numbers.
|
2018-02-02 11:57:49 -07:00 |
|
Sean Bowe
|
d49c0b0b0d
|
Implement Edwards doubling in the circuit.
|
2018-02-02 10:01:33 -07:00 |
|
Sean Bowe
|
67f2cea200
|
Move window table lookup logic into its own module.
|
2018-02-02 09:50:59 -07:00 |
|
Sean Bowe
|
ba3ef9c84c
|
Implementation of 3-bit window table lookups.
|
2018-02-02 09:41:44 -07:00 |
|
Sean Bowe
|
9d49a60f48
|
Replace Montgomery point interpretation with twisted Edwards.
|
2018-01-29 10:38:18 -07:00 |
|
Sean Bowe
|
f00e8a8292
|
Change group_hash to output points in the twisted Edwards form.
|
2018-01-29 08:56:58 -07:00 |
|
Sean Bowe
|
55598e4d4f
|
Define get_for_y for twisted Edwards points.
|
2018-01-29 08:32:06 -07:00 |
|
Sean Bowe
|
bfda59f80b
|
Remove group hash implementation from inside the circuit, as it is no longer necessary.
|
2018-01-29 07:24:59 -07:00 |
|
Sean Bowe
|
42514e7c47
|
Remove TODO's in favor of github issues.
|
2018-01-29 06:06:10 -07:00 |
|
Sean Bowe
|
6841763ae7
|
Add TODO for improving lookup performance.
|
2017-12-28 16:10:19 -07:00 |
|
Sean Bowe
|
849f330441
|
Add test to monitor the number of constraints consumed by the pedersen hash (in the context of a merkle tree).
|
2017-12-28 12:00:22 -07:00 |
|
Sean Bowe
|
e9c9618ef4
|
Implement pedersen hashes inside and outside of the circuit.
|
2017-12-28 11:06:05 -07:00 |
|
Sean Bowe
|
07f2e553a7
|
Implement twisted Edwards point conversion and addition in the circuit.
|
2017-12-22 11:52:13 -07:00 |
|
Sean Bowe
|
e1ab3be3cc
|
Implementation of conditional negation for AllocatedNum.
|
2017-12-22 11:52:13 -07:00 |
|
Sean Bowe
|
87548f3d1d
|
Implementation of Montgomery point addition in the circuit.
|
2017-12-22 11:52:08 -07:00 |
|
Sean Bowe
|
031ae638ce
|
Tidy up the codebase (TODOs into github issues).
|
2017-12-18 22:08:57 -07:00 |
|
Sean Bowe
|
1e56289f19
|
Implementation of group hash in the circuit.
|
2017-12-18 11:34:15 -07:00 |
|
Sean Bowe
|
d143d3230a
|
Relocate grouphash implementation.
|
2017-12-18 11:15:02 -07:00 |
Jay Graber
|
635bd8104e
|
Add grouphash
|
2017-12-18 10:58:59 -07:00 |
|
Sean Bowe
|
7d6a57661b
|
Add Montgomery point interpretation.
|
2017-12-17 10:07:00 -07:00 |
|
Sean Bowe
|
eb8803f9eb
|
Implementation of `into_bits_strict` for `Num`.
|
2017-12-17 09:31:33 -07:00 |
|
Sean Bowe
|
068fbbc2be
|
Implementation of `into_bits` for `Num`.
|
2017-12-17 09:12:04 -07:00 |
|
Sean Bowe
|
6c6a193551
|
Implementation of `from_bits_strict` for `Num`.
|
2017-12-16 17:03:40 -07:00 |
|
Sean Bowe
|
d04c5acdb8
|
Implement `enforce_in_field` and `enforce_nand` for Boolean.
|
2017-12-16 16:01:13 -07:00 |
|
Sean Bowe
|
dfd82439de
|
Implementation of k-ary AND.
|
2017-12-15 14:12:38 -07:00 |
|
Sean Bowe
|
46cbfb4831
|
Implementation of Montgomery point doubling in the circuit.
|
2017-12-14 15:41:37 -07:00 |
|
Sean Bowe
|
8c4433ee82
|
Add 2A precomputation to jubjub parameters.
|
2017-12-14 11:34:57 -07:00 |
|
Sean Bowe
|
6b43a4ed10
|
Make UInt32::addmany produce constant results when fed constant inputs, to allow for blake2s block precomputation for group hash.
|
2017-12-12 14:53:16 -07:00 |
|
Sean Bowe
|
3a6e8d448f
|
Add `get_for_x` to Montgomery implementation.
|
2017-12-12 10:31:13 -07:00 |
|
Sean Bowe
|
e9d3923829
|
Refactor jubjub implementation to be abstract over field, parameters.
|
2017-12-11 23:06:05 -07:00 |
|
Sean Bowe
|
c0f5645ab4
|
Do not perform inversions when converting from Montgomery to projective extended twisted Edwards.
|
2017-12-06 17:22:35 -07:00 |
|
Sean Bowe
|
7c48792511
|
Some test cleanups.
|
2017-12-06 10:21:56 -07:00 |
|
Sean Bowe
|
86619c7334
|
Implementation of fundamental circuitry and primitive Jubjub curve arithmetic.
|
2017-12-06 10:06:34 -07:00 |