Commit Graph

1757 Commits

Author SHA1 Message Date
Sean Bowe 8b6f113052
Change personalization to more closely align with the spec. 2018-03-17 10:24:55 -06:00
Sean Bowe d09c4d6ce8
Simplify value commitment gadget. 2018-03-17 09:10:13 -06:00
Sean Bowe 6d01e78711
Fix variable names in output circuit 2018-03-17 09:02:29 -06:00
Sean Bowe 13b03a0a1a
Relocate circuit components for intuitive code paths. 2018-03-16 22:21:29 -06:00
Sean Bowe 00ee962429
Fix some names of variables. 2018-03-16 15:46:19 -06:00
Sean Bowe 8b2f231e2f
Change personalization to match specification. 2018-03-16 15:46:19 -06:00
Sean Bowe 7e05feb90b
Changes to names and circuit design to match spec. 2018-03-16 15:46:15 -06:00
ebfull c09292672a
Merge pull request #56 from rex4539/fix-typos
Fix typos
2018-03-16 15:44:02 -06:00
Dimitris Apostolou a7d704cd10
Fix typos 2018-03-16 23:25:36 +02:00
ebfull 39f1152e16
Merge pull request #53 from ebfull/circuit-improvements
Minor circuit improvements
2018-03-15 12:47:26 -06:00
Sean Bowe 21625d69e0
Place Sapling circuit into submodule. 2018-03-15 12:44:19 -06:00
Sean Bowe ca202ef304
Introduce input multipacking abstraction for nullifiers. 2018-03-15 12:36:05 -06:00
Sean Bowe 52eb59766b
Optimize UInt32::addmany/BLAKE2s to combine equality constraints. (Closes #5) 2018-03-15 12:31:10 -06:00
Sean Bowe 827e85547e
Public input verification utility for the test framework 2018-03-15 11:42:22 -06:00
ebfull 3c07a2d9b3
Merge pull request #30 from plutomonkey/boolean_enforce_equal
Optimise Boolean::enforce_equal.
2018-03-14 07:28:33 -06:00
Jason Davies 661f318eb7
Optimise Boolean::enforce_equal.
Use a single constraint instead of two.

Fixes #6.
2018-03-09 23:53:28 +00:00
Sean Bowe 2c69abe268
Add Uncommitted^Sapling. 2018-03-09 14:17:45 -07:00
Sean Bowe c1784f0fdf
Check g_d is not small order in Spend circuit. 2018-03-09 14:08:01 -07:00
ebfull 390f2c129b
Merge pull request #37 from ebfull/circuit-tests
Circuit tests
2018-03-08 19:18:40 -07:00
Sean Bowe b6e1b52a44
Fix comment about Montgomery curve selection 2018-03-08 13:03:07 -07:00
Sean Bowe db28ff7ba1
Simplify the Output witness. 2018-03-08 01:49:27 -07:00
Sean Bowe 9998400117
Relocate structs for cleanliness. 2018-03-08 01:37:55 -07:00
Sean Bowe 512a394b30
Simplify witness for Spend statement. 2018-03-08 01:36:16 -07:00
Sean Bowe 3fbbd933cf
Simplify value commitment abstraction. 2018-03-08 01:16:21 -07:00
Sean Bowe d6d86737c8
Remove some code duplication for value commitment witnessing. 2018-03-08 01:01:00 -07:00
Sean Bowe f61cc88a71
More comment improvements. 2018-03-08 00:51:53 -07:00
Sean Bowe b6ef12b077
General code quality improvements. 2018-03-08 00:41:47 -07:00
Sean Bowe 896b144a7d
Move first block of group hash to constants submodule. 2018-03-08 00:09:34 -07:00
Sean Bowe c7c8d3c039
Move personalization constants to submodule. 2018-03-08 00:06:53 -07:00
Sean Bowe 25a8050df8
Remaining tests for input circuit 2018-03-07 23:59:04 -07:00
Sean Bowe b998190f9e
Disable this, for now. 2018-03-07 23:45:08 -07:00
Sean Bowe 0242ed35ab
Add some circuit tests for inputs. 2018-03-07 12:19:56 -07:00
Sean Bowe 2d4be07560
Fix group hash comment. 2018-03-06 22:26:03 -07:00
Sean Bowe ef85173df5
Fix comments in jubjub code. 2018-03-06 22:25:15 -07:00
Sean Bowe b0b3514fa7
Add bench_50 example. 2018-03-06 10:21:30 -07:00
Sean Bowe 1f65d4b353
Change tree depth to 32 in test. 2018-03-06 10:04:02 -07:00
Sean Bowe 1f2bb62657
Rename proving key to proof generation key to disambiguate from the SNARK. 2018-03-06 09:56:29 -07:00
Sean Bowe c31092ce7f
Remove unnecessary mut binding. 2018-03-06 09:39:56 -07:00
ebfull c253e51e3d
Merge pull request #35 from ebfull/primitives
WIP bundle
2018-03-06 09:10:23 -07:00
Sean Bowe 63c6830429
Cache fewer pedersen hash generators. 2018-03-06 09:03:29 -07:00
Sean Bowe 7a9879eb54
Make EdwardsPoint (x, y) not public. 2018-03-06 08:38:34 -07:00
Sean Bowe f155c01cf5
Personalize GH for each generator independently. 2018-03-06 08:30:28 -07:00
Sean Bowe b831942501
Adopt BLAKE2s personalization throughout protocol. 2018-03-05 19:32:27 -07:00
Sean Bowe d21ff08176
Group hash should use a first block containing random data as per spec. 2018-03-05 18:08:49 -07:00
Sean Bowe 058801bdfc
Switch to using the blake2-rfc crate instead. 2018-03-05 17:58:34 -07:00
Sean Bowe 2e846844e7
Perform ak group order check in Spend circuit. 2018-03-05 17:46:12 -07:00
Sean Bowe 7bb630a4b1
Use correct personalization for merkle tree. 2018-03-05 17:27:55 -07:00
Sean Bowe c6cf0c718c
Value placed in note contents should be in big endian bit order. 2018-03-05 16:10:55 -07:00
Sean Bowe b45a37febb
Add comments and reorder some generators. 2018-03-05 16:00:04 -07:00
Sean Bowe 69010d1502
Relocate Pedersen hash personalization enum. 2018-03-05 15:25:40 -07:00