e8fdd0e1f3
Impl TryFrom for Commitments, call from impl ZcashDeserialize
2020-08-14 02:04:12 -04:00
5d13880461
Remove Zcash(De)Serialize impls for *Commitments
2020-08-14 02:04:12 -04:00
014afd8e4a
Move Pedersen hash functions to their own submodule
2020-08-14 02:04:12 -04:00
be7ea200c8
Accept an Amount<NonNegative> for the value arg of a ValueCommitment constructor
2020-08-14 02:04:12 -04:00
e024e43896
Support nullifier derivation from borrowed Spending, NullifierDeriving keys
2020-08-14 02:04:12 -04:00
40b5a73a15
impl From<&NullifierDerivingKey>, use that to derive Sapling Nullifier
2020-08-14 02:04:12 -04:00
a8625b7b84
Remove empty doc comment
2020-08-14 02:04:12 -04:00
a3530b0eed
Move pedersen_hash() to go with the other Sapling hash functions, for now
2020-08-14 02:04:12 -04:00
0242df30cb
A space
2020-08-14 02:04:12 -04:00
9d9491c4e8
Index at 1, not 0, the main loop of PedersenHashToPoint, to match spec math
2020-08-14 02:04:12 -04:00
e5c07721b4
Typo fix
...
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
2020-08-14 02:04:12 -04:00
ca81e48843
Remove an extra line
2020-08-14 02:04:12 -04:00
60ae9d74e7
Typo
...
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
2020-08-14 02:04:12 -04:00
fe45c6402a
Remove clippy::unit_arg allowance
2020-08-14 02:04:12 -04:00
2942bad6ff
Make diversify_hash() private again
2020-08-14 02:04:12 -04:00
5a249f8da5
A space
...
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
2020-08-14 02:04:12 -04:00
5ba453c2a1
Remove unused SaplingNoteTreeRootHash types re: Heartwood
2020-08-14 02:04:12 -04:00
68871c5bd4
From<Nullifier> for [u8; 32]
2020-08-14 02:04:12 -04:00
b2584c4a8f
A space
2020-08-14 02:04:12 -04:00
0c299972ec
Clarify docstring about the Jubjub prime-order subgroup on generate_trapdoor()
2020-08-14 02:04:12 -04:00
f816761a5c
The pedersen hash to point test vectors now pass
2020-08-14 02:04:12 -04:00
425275ad35
Fix exclusive range, shift up enumerate() indexes with map()
2020-08-14 02:04:12 -04:00
be22ef64e5
At least fewer M_i() rounds for test cases
2020-08-14 02:04:12 -04:00
41c8076dab
Add test vectors that aren't being consumed right now
2020-08-14 02:04:12 -04:00
14d502a54b
Compute pedersen hash to point in scalar field
2020-08-14 02:04:12 -04:00
8ececebea7
A space
...
Co-authored-by: teor <teor@riseup.net>
2020-08-14 02:04:12 -04:00
3b01dc50ef
Use unicode scalar field characters instead of LaTeX
...
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
2020-08-14 02:04:12 -04:00
1d494a2b7a
Docstring wrap
2020-08-14 02:04:12 -04:00
e22afa3c8f
Generate uniformly random scalar w/ Fr::from_bytes_wide()
...
Which reduces mod r always.
2020-08-14 02:04:12 -04:00
c46cda920f
Add primitive merkle_crh_sapling function
2020-08-14 02:04:12 -04:00
10a9aa5844
Add prf_nf and use in From impl to derive Sapling Nullifier
2020-08-14 02:04:12 -04:00
eb731a6e2f
Add note commitment tree Position type
2020-08-14 02:04:12 -04:00
65f8f2c613
Add mixing_pedersen_hash
...
Tidy constructors for NoteCommitment
2020-08-14 02:04:12 -04:00
ed888b38ef
Correctly generate a sapling NoteCommitment from the NoteCommitmentRandomness
2020-08-14 02:04:12 -04:00
b6385ca36f
Move commitment types into commitments module
...
Docs, tidy
2020-08-14 02:04:12 -04:00
4ccec84768
Add explicit pedersen_hash function
2020-08-14 02:04:12 -04:00
83c41869e1
Improve docs
2020-08-14 02:04:12 -04:00
caef323f9b
pedersen_hash_to_point() works, with submethods using bitvec
...
Also tidy, document
2020-08-14 02:04:12 -04:00
919557c20c
My BitSlice doesn't have a known size at compile time?
...
error[E0277]: the size for values of type cannot be known at compilation time
2020-08-14 02:04:12 -04:00
579f1ed134
Flesh out windowed_pedersen_commitment_r
2020-08-14 02:04:12 -04:00
9d87f30d18
Start of, but currently unfinished, Sapling note commitment / Windowed Pedersen Commitment
2020-08-14 02:04:12 -04:00
f64e0c4bc5
Sapling value commitment, half done Sapling note commitment
2020-08-14 02:04:12 -04:00
823b06b219
Break out subtypes into modules, including arbitrary's
2020-08-14 02:04:12 -04:00
dfb10ab10f
Add NoteCommitment.extract_u()
2020-08-14 02:04:12 -04:00
33730a05cb
Do not confuse a NoteCommitment for U(NoteCommitment)
2020-08-14 02:04:12 -04:00
0f46a9b6a8
NoteCommitments, renames, ValueCommitment, strategies, stub commit()
2020-08-14 02:04:12 -04:00
fa053e2b0b
Derive a Sprout nullifier from a nullifier seed (rho) and spending key
2020-08-14 02:04:12 -04:00
0d618a3abf
Start treestate module
2020-08-14 02:04:12 -04:00
28a7420079
Remove unused imports
2020-08-14 02:04:12 -04:00
15899bc6d3
More Note refinements
2020-08-14 02:04:12 -04:00
2c285985c8
Move nullifiers to respective note modules, pull in existing types from keys
2020-08-14 02:04:12 -04:00
8b78a55c71
Start work implementing sprout note commitment function
2020-08-14 02:04:12 -04:00
0e21a70b88
feature: Implement CompactDifficulty to Work ( #838 )
...
* Implement CompactDifficulty to Work
* Add Bitcoin test vectors for difficulty
2020-08-14 09:48:15 +10:00
07917421cb
Correct coinbase check ( #898 )
...
* chain: add Transaction::is_coinbase()
This matches the check in zcashd/src/primitives/transaction.h:682
(CTransaction::IsCoinBase).
* chain: correct Block::is_coinbase_first
This matches zcashd/src/main.cpp:3968-3974 in CheckBlock.
Previously, the check allowed the first transaction to have multiple coinbase inputs.
* chain: return slices from Transaction::inputs()/outputs()
They're slices internally so we might as well just expose them that way.
2020-08-13 14:04:43 -07:00
36093b4721
Tweak light client root hash definition.
...
This changes the `light_client_root_hash` field to `light_client_root_bytes` to
hint that it's unparsed, and makes it public to match the rest of the
`BlockHeader` fields. The `LightClientRootHash` serialization methods are
hidden from the public API, so that the `LightClientRootHash` has to be
constructed by the method on the `Block`.
2020-08-11 19:13:50 -04:00
f8a24f9c11
Rename script fields to lock/unlock scripts. ( #866 )
...
This is slightly clearer and more correct than the previous pk_script.
2020-08-10 11:49:38 -07:00
7afd76f5fb
feature: Add light_client_root_hash(network) to Block
...
* use the right variant in LightClientRootHash::from_bytes()
* make block.header.light_client_root_hash pub(super)
* add tests for LightClientRootHash and block.light_client_root_hash
2020-08-10 18:54:42 +10:00
ee6f0de14d
refactor: Move NetworkUpgrade to zebra-chain
2020-08-10 18:54:42 +10:00
c4eb136426
feature: Add a LightClientRootHash type
2020-08-10 18:54:42 +10:00
53ce01fd23
fix: Rename the light client hash field
2020-08-10 18:54:42 +10:00
a987394782
Add KaTeX to rendered docs. ( #832 )
...
This adds a single test formula to the `zebra-chain` docs. We can remove it
after merging this and running it through CI to confirm that it works.
2020-08-05 17:34:30 -07:00
d49c11ee70
fix: Allow PROPTEST_CASES to override the lower block case default
2020-08-05 02:07:05 -07:00
ac7a4ae517
fix: Speed up the block round trip proptest
...
Reduce the number of cases run by the block round trip proptest, to
speed up the Zebra tests.
2020-08-04 22:35:01 -07:00
78b5bf5e9a
refactor: Move the difficulty tests into their own file
2020-08-04 15:24:52 -04:00
efb9313460
fix: Resolve a type ambiguity in a proptest
...
For some reason, implementing
`PartialOrd<BlockHeaderHash> for ExpandedDifficulty` (or its converse)
makes this unrelated code ambiguous.
2020-08-04 12:29:07 +10:00
c8b502a5da
feature: Compare ExpandedDifficulty and BlockHeaderHash
2020-08-04 12:29:07 +10:00
b7fac7b3bc
feature: Make ExpandedDifficulty use U256 internally
...
Adds a dependency on the primitive-types crate.
Also adds custom hex debug formatting for compact and expanded
difficulties.
2020-08-04 12:29:07 +10:00
c04d1b7b8f
doc: Consensus-critical difficulty encodings
2020-08-04 12:29:07 +10:00
06157a7c8e
Update the BlockHeader fields for Heartwood ( #767 )
...
The Heartwood upgrade changes the meaning of the hashFinalSaplingRoot to
hashLightClientRoot. Since we don't know the network upgrade heights in
zebra-chain, we just use [u8; 32] for now.
2020-08-04 12:15:28 +10:00
195948e5b1
feature: Add an ExpandedDifficulty type and conversion
...
Also add tests.
2020-08-03 10:28:31 +10:00
c4dec3fb36
feature: Make a CompactDifficulty wrapper
...
Wrap the compact difficulty "bits" field in a CompactDifficulty struct,
and rename the header field for clarity.
2020-08-03 10:28:31 +10:00
1015db25a8
remap the state storage to only store blocks once ( #741 )
2020-07-31 09:21:54 +10:00
7d0a3debb6
chain: ensure impl Deserialize for Amount validates data.
...
This uses serde's try_from attribute to run deserialized values through the
TryFrom impl. Also adds a test to make sure that validation actually does
happen.
2020-07-28 12:20:40 -07:00
5ece62f0a5
fix: Update comments for Heartwood's hashChainHistoryRoot
2020-07-27 14:00:56 -04:00
41225660fb
doc: The genesis coinbase is the same in every network
2020-07-23 03:46:24 -04:00
7d4e717182
Add block locator request to state layer ( #712 )
...
* Add block locator request to state layer
* pass genesis in request
* Update zebrad/src/commands/start/sync.rs
* fix errors
2020-07-22 18:01:31 -07:00
90ec2982bf
docs: fix broken links
2020-07-22 17:55:52 -07:00
db2eb80b3e
Create consensus utils and move byte_reverse_hex function to it ( #705 )
...
* move byte_reverse_hex function
2020-07-22 12:29:14 +10:00
b8de256c48
remove serialization error variant of EquihashError
2020-07-22 11:09:22 +10:00
1b0c0f027f
Add Hard-Coded Checkpoint Lists ( #674 )
...
* Add checkpoint list generation scripts
* Limit the checkpoint block data size
* Limit the checkpoint height gap
* Add Mainnet and Testnet checkpoint lists
* Parse hard-coded checkpoint lists
The lists were generated using the following limits:
- 256 MB spacing, based on block byte size, and
- 2000 blocks.
2020-07-21 23:11:51 +10:00
fe2a468417
add favicon to generated docs ( #681 )
2020-07-17 16:45:29 -07:00
1915634d2b
Check for bad heights or hashes in checkpoint lists ( #639 )
...
* Add MIN and MAX for BlockHeight and LockTime
* Remove duplicate test cases
* fix a comment about the minimum lock time
The minimum LockTime::Time is 5 November 1985 00:53:20 UTC, so the first
day that only contains valid times is 6 November 1985 (in all timezones).
Similarly, the maximum LockTime::Time is 7 February 2106 06::28::15 UTC,
so the last day that only contains valid times in all time zones is
5 February 2106.
* fix: Reject checkpoint lists with bad hashes or heights
Reject the all-zeroes hash, because it is the parent hash of the genesis
block, and should never appear in a checkpoint list.
Reject checkpoint heights that are greater than the maximum block
height.
2020-07-16 15:09:22 +10:00
a19fdd9f25
fix: Rename to is_time_valid_at
2020-07-15 09:16:54 -07:00
b2bb872df0
Use Unicode for section reference
...
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
2020-07-15 09:16:54 -07:00
c2e4f7b0a5
refactor: Move the local clock check to a BlockHeader method
2020-07-15 09:16:54 -07:00
5548dffd3b
refactor: Move the coinbase first check to a Block method
2020-07-15 09:16:54 -07:00
e452ba1c13
fix: Use matches!() based on a new nightly clippy lint
2020-07-15 12:50:11 +10:00
5d6a5ca329
Add consensus coinbase checks ( #593 )
...
* add coinbase check and test case
Co-authored-by: Jane Lusby <jane@zfnd.org>
2020-07-10 09:13:44 +10:00
0474a79669
Add cool helpers for using zcash_serialize / zcash_deserialize ( #586 )
...
Co-authored-by: Dimitris Apostolou <dimitris.apostolou@icloud.com>
2020-07-09 15:29:31 -04:00
8b72781fe1
deps: Update redjubjub to 0.2
...
Closes #606 .
2020-07-09 15:20:23 -04:00
f14e577ea9
apply clippy code suggestions
2020-07-07 18:33:14 -04:00
e54438f4e4
Update zebra-chain/src/block/header.rs
2020-07-07 11:13:49 -07:00
ba81d7d4c0
Fix typos
2020-07-07 11:13:49 -07:00
a733580fd8
add proptests for invalid forms of input ( #550 )
...
* add proptests for invalid forms of input
* apply proptests to each valid block we have
* start moving equihash logic to BlockHeader
* provide an error based interface
* cleanup logging in dependent crate
* use is_equihash_solution_valid everywhere
* switch to proper equihash crate branch
2020-07-07 11:01:02 -07:00
db30e53470
Create a test for block size ( #558 )
...
* add block size limit test
* calculate max_transactions_in_block and max_inputs_in_tx
* abstract block generation
* move all test vectors to zebra-test
2020-07-07 10:37:32 +10:00
d736355f9f
Add ZIP143 and ZIP243 test vectors ( #585 )
2020-07-03 09:45:40 +10:00
c8829d8408
fix: Adjust bounds on the LockTime Arbitrary impl
...
The previous code could generate LockTime::Time with (u32::MAX + 1),
but the maximum valid value is u32::MAX due to the field size.
2020-07-02 14:30:34 +10:00
00e750654a
add nullifier types ( #568 )
...
* add nullifier types
* Apply suggestions from code review
Co-authored-by: Deirdre Connolly <deirdre@zfnd.org>
* add zcash_deserialize impls
* Add docs
Co-authored-by: Deirdre Connolly <deirdre@zfnd.org>
2020-07-01 17:57:32 -07:00
c216f5ca25
Refine type for MAC ( #577 )
2020-07-01 17:57:03 -07:00
8281b9040c
Start work on new Amount type ( #554 )
2020-07-01 16:31:30 -07:00
7bace99569
fix: Update a comment with the correct parity-zcash path
2020-07-01 16:03:14 -04:00
6cbb6d4574
consolidate arbitrary impls to one file in zebra-chain ( #553 )
...
* consolidate arbitrary impls to one file in zebra-chain
* move the ones I missed
* move test-vectors
Co-authored-by: Jane Lusby <jane@zfnd.org>
2020-06-30 14:23:38 -07:00
afd0e90a74
Implement equihash verification ( #549 )
...
This change brings in the `equihash` crate from librustzcash and uses it to add a basic `is_valid` test for `EquihashSolutions`.
Co-authored-by: Jane Lusby <jane@zfnd.org>
2020-06-26 11:21:02 -07:00
9cbd369a59
Refactor block module to have submodules ( #512 )
...
* create hash submodule for block
* create header submodule for block
* create serialize submodule for block
* add newline to hash.rs (fmt)
* Update zebra-chain/src/block/tests.rs
Co-authored-by: Jane Lusby <jlusby42@gmail.com>
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
Co-authored-by: Jane Lusby <jlusby42@gmail.com>
2020-06-25 09:18:05 -07:00
a9efb8715e
chain: Update the note about time truncation
2020-06-24 18:22:36 +10:00
3f5e2695e3
chain: Tweak the version and time test bounds
...
Use MAX constants for the block header version and time arbitrary test
ranges. Reduces the block header time arbitrary test range from 2**32 to
2**32-1 (u32::MAX). (2**32 is an invalid time value, which gets
truncated to 0 during serialization.)
Also add some comments about DateTime conversions.
Part of #477 .
2020-06-24 18:22:36 +10:00
719aa75581
chain: Add a comment about transaction sizes
...
We don't need to check transaction sizes yet, because we aren't
parsing or generating transactions outside of blocks.
Part of #483 .
2020-06-24 18:22:36 +10:00
e8561d8f9e
rename zebra-test-vectors to zebra-test
2020-06-22 20:23:02 -07:00
d8b48f885b
consensus: Add a checkpoint verifier stub ( #502 )
...
consensus: Add a checkpoint verifier stub
This stub only verifies blocks whose hashes are in the checkpoint
list.
It doesn't have tests, chain child verifies to their ancestors, or
support checkpoint maximum height queries.
Part of #429 .
2020-06-22 08:51:43 +10:00
9ddcccdcb4
Update ed25519-zebra to 0.3
2020-06-16 00:42:25 -04:00
a023ba9b16
Add serde bounds to zebra-chain structures. ( #231 )
2020-06-15 15:08:14 -07:00
210e11a86d
chain: Check the maximum block size when parsing
...
The maximum block size is 2,000,000 bytes. This commit also limits the
maximum transaction size in parsed blocks. (See #484 for the
corresponding limit on mempool transactions.)
The proptests might test the maximum block size, but they are
randomised. So we also want to explicitly test large block sizes.
(See #482 for these test cases and tests.)
Part of #477 .
2020-06-15 11:00:48 -07:00
585fa7a1ae
chain: Verify the solutionSize field in block headers
...
Verify the value of the equihash solution size field in block headers.
This field isn't stored in the BlockHeader struct, so we need to verify
it at parse time.
Part of #477 .
2020-06-15 19:04:43 +10:00
9f802cd8dd
Wrap Transaction in Arc
2020-06-06 18:13:17 -04:00
b263489af6
Export ed25519 zebra ( #445 )
...
And use that one, and our similar redjubjub export, everywhere.
Fixes #405
* Move PRs to 'In Progress' column on project board when created
2020-06-06 18:10:32 -04:00
f1de07889c
Fix a typo in a comment in block.rs
2020-06-04 04:49:23 -04:00
e9af80b875
Add initial version of zebra-state ( #414 )
...
* rename zebra-storage to zebra-state
* Setup initial skeleton for zebra-state
* add test
* Apply suggestions from code review
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
* move shared test vectors to a common crate
Co-authored-by: Jane Lusby <jane@zfnd.org>
Co-authored-by: Henry de Valence <hdevalence@hdevalence.ca>
2020-06-02 16:16:17 -07:00
4a2d2a359c
add cargo fmt to ci ( #403 )
...
* add cargo fmt to ci
* rebase on main
* switch to stable
Co-authored-by: Jane Lusby <jane@zfnd.org>
2020-05-27 19:12:25 -07:00
4dc307f2f3
fix last warnings
2020-05-27 15:42:29 -04:00
b6b35364f3
cleanup warnings throughout codebase
2020-05-27 15:42:29 -04:00
6465689555
transaction/hash.rs: Add FromStr implementation (issue #299 )
...
Co-authored-by: Deirdre Connolly <durumcrustulum@gmail.com>
2020-05-14 15:30:11 -04:00
6ed6ccd62e
Clean up imports and some doc comments
2020-04-29 22:42:52 -04:00
7367daef9f
Tidy TransparentAddress FromStr/Display
2020-04-22 02:17:17 -04:00
df7ed7ae81
Move note encryption types around ( #362 )
...
* Move around and dedupe note *Cipertext types
* Bump code coverage test timeout to 5 minutes
* Try uploading coverage to codecov.io
2020-04-19 14:45:25 -04:00
21eca164d8
Refine Output description ephemeral_key to jubjub::AffinePoint
...
And impl Arbitrary for Output to support better generation of those points in proptests.
2020-04-18 22:05:13 -04:00
7a4be955be
Remove todo
2020-04-18 22:05:13 -04:00
b53be18c8f
Remove unused From<[u8; 32]> for SpendAuthorizingKey
2020-04-18 04:40:31 -04:00
630d021886
Remove unused From<[u8; 32]> for ProofAuthorizingKey
2020-04-18 04:40:31 -04:00
d445799626
Remove the Deref's and make the From's consistent for all key types
2020-04-18 04:40:31 -04:00
37337c9e44
Remove some impl Deref's and PartialEq's that weren't used
...
Add some impl From<T> for [u8; 32] 's
2020-04-18 04:40:31 -04:00
f8022442cf
Remove some currently unused From impls for [u8; 32]
2020-04-18 04:40:31 -04:00
252acd85d8
Tidy imports
2020-04-18 04:40:31 -04:00
2156c6143b
Complete impl Arbitrary for TransmissionKey
2020-04-18 04:40:31 -04:00
abcca2c76b
Finish Sapling keys roundtrip proptest
2020-04-18 04:40:31 -04:00
001b39c588
Impl PartialEq for AuthorizingKey and FullViewingKey
2020-04-18 04:40:31 -04:00
5d430cff12
Do not try to make a jubjub extended point work as a scalar in redjubjub PublicKey From impl
2020-04-18 04:40:31 -04:00
94c6d74ecb
Add sapling key derivation bech32 encoding roundtrip proptest
...
And fix SpendingKey Display impl bug.
2020-04-18 04:40:31 -04:00
9daa1ba3c8
Impl PartialEq for some Sapling keys
2020-04-18 04:40:31 -04:00
ba3ba6d2d9
Impl From<SpendingKey> for Diversifier
...
This is the _DefaultDiversifier_ method.
2020-04-18 04:40:31 -04:00
16f1e3061f
Impl From<(AuthorizingKey, NullifierDerivingKey)> for IncomingViewingKey
2020-04-18 04:40:31 -04:00
e508d09e9b
Move sapling key tests to own module, test key derivation against test vectors
...
Impl a few From<[u8; 32]>'s for a few key types.
2020-04-18 04:40:31 -04:00
ce1415a8ee
Add generated test vectors from zcash-hackworks/zcash-test-vectors
2020-04-18 04:40:31 -04:00
f01ea1b4fa
Fix some Sprout key doc/message nits
2020-04-18 04:40:31 -04:00
adab7335b6
Impl From<[u8; 32]>/Display/FromStr for Sapling SpendingKey, including network field
2020-04-18 04:40:31 -04:00
68c281c590
Impl Display/FromStr for Sapling IncomingViewingKey, including network field
2020-04-18 04:40:31 -04:00
cdfcdc4751
Tidy imports
2020-04-18 04:40:31 -04:00
3eeb9925eb
Impl Debug, Display, and FromStr for Sapling FullViewingKey
2020-04-18 04:40:31 -04:00
c30a5a64b2
Get Sapling zaddr encoding roundtrip proptest working for now
...
TransmissionKey is just the jubjub affine point identity for now. :/
2020-04-18 04:40:31 -04:00
aa18937b60
Add network, impl Display and FromStr for SaplingShieldedAddress
2020-04-18 04:40:31 -04:00
ef9ab8b0ab
Remove Debug test
2020-04-18 04:40:31 -04:00
01599a0735
Fix unneeded initial value and mut
2020-04-18 04:40:31 -04:00
23cd346f28
Add missing doc comment for sapling addresses
2020-04-18 04:40:31 -04:00
43e60fd9a9
Lots of doc improvements
2020-04-18 04:40:31 -04:00
33821d427d
Add a lazy derive_keys_and_addresses test
2020-04-18 04:40:31 -04:00
f9d6625fae
All Sapling key derivation looks to be working
...
Modulo actual test vectors! Currently testing with random data each time to
just see if all the types derive without panicking.
2020-04-18 04:40:31 -04:00
b7bd642910
Clippy pass
2020-04-18 04:40:31 -04:00
bc13bccb8d
Add a bunch of stuff for JubJub GroupHash, FindGroupHash, etc
...
Until it can be imported into the jubjub crate and upstreamed.
It has been ported from the types used in zcash_primitives and cleaned up
but still needs testing.
2020-04-18 04:40:31 -04:00
4acce5aa30
Remove static lifetime on some constants
2020-04-18 04:40:31 -04:00
7e2ae70d66
Wrap AuthorizingKey around redjubjub::PublicKey<SpendAuth>
...
And derive From's and Into's for it, halfway through full key derivation via a test case.
2020-04-18 04:40:31 -04:00
8388b13ac9
Turn all type aliases into wrapper types with impl Deref
2020-04-18 04:40:31 -04:00
b9deef2956
Break out crh_ivk() and invoke in IncomingViewingKey derivation
...
There is only one invocation of this PRF but it's nice to keep it consistent with
the PRF^expand ones we have too.
2020-04-18 04:40:31 -04:00
786677e07b
Add and use prf_addr() for sprout key derivation
2020-04-18 04:40:31 -04:00
13f2c229d9
Add prf_expand() and use that in sapling key derivation
2020-04-18 04:40:31 -04:00
b3db623e29
Fill out SaplingShieldedAddress impls and some tests
2020-04-18 04:40:31 -04:00
451e592b28
Tidy keys::sapling, add commented out Arbitrary impl for now
2020-04-18 04:40:31 -04:00
743330fd0b
Make several types wrap jubjub types and impl Deref
2020-04-18 04:40:31 -04:00
39278a3095
Parameterize AuthorizingKey as PublicKeyBytes<SpendAuth>
2020-04-18 04:40:31 -04:00
097d4617df
Update sapling keys derived from spending key via blake2b
2020-04-18 04:40:31 -04:00
b167a3b96e
Create our own Scalar alias for now
2020-04-18 04:40:31 -04:00
8add92445c
Add jubjub, replace blake2 with blake2b_simd
2020-04-18 04:40:31 -04:00
1219f1b552
Improve FullViewingKey doc comment
2020-04-18 04:40:31 -04:00
ebe5cce3bb
Better doc comment for sapling::TranmissionKey
2020-04-18 04:40:31 -04:00
b175d1f1ba
Typo
...
Co-Authored-By: Daira Hopwood <daira@jacaranda.org>
2020-04-18 04:40:31 -04:00
f5bdd449ee
Derive OVK via Blake2b as PRF^expand with t=2
...
Co-Authored-By: Daira Hopwood <daira@jacaranda.org>
2020-04-18 04:40:31 -04:00
98a91ab92f
Add simple FullViewingKey for now
2020-04-18 04:40:31 -04:00
8e42c6d8b0
Add stub for SaplingShieldedAddress
2020-04-18 04:40:31 -04:00
e2743c0b15
Add all simple types for Sapling key derivation tree
2020-04-18 04:40:31 -04:00
21a8a29404
Better doc comments for Sprout SpendingKey fields
2020-04-15 03:22:48 -04:00
dd930c678b
Impl Display as the inverse of FromStr for SproutShieldedAddress
...
And add proptests for zcash (de)serialization and human-readable roundstrips.
2020-04-15 03:22:48 -04:00
e057e120bb
Impl Display/FromStr/ZcashSerialize/ZcashDeserialize for Sprout SpendingKey
...
Includes new field because the raw and Base58Check encoding depends on it.
2020-04-15 03:22:48 -04:00
6dc0830ea6
Impl Default for Network, as Mainnet
2020-04-15 03:22:48 -04:00
e83cddf4c6
Impl Display/FromStr/ZcashSerialize/ZcashDeserialize for Sprout IncomingViewingKeys
...
To match the raw and Base58Check encodings as in
https://zips.z.cash/protocol/protocol.pdf#sproutinviewingkeyencoding
2020-04-15 03:22:48 -04:00
05ca1c0c8a
Refine JoinSplit ephemeral keys to be x25519_dalek::PublicKey
...
Impls PartialEq and Eq and Arbitrary on JoinSplit because PublicKey
does not impl them and we can't do it directly.
Resolves #313
2020-04-13 15:32:04 -04:00
955a4ebc3c
Rename SpendDescription to Spend, OutputDescription to Output
2020-04-09 17:17:21 -04:00
2a7838d8e5
Clear up doc comments on SpendingKey
2020-03-28 02:42:13 -04:00
760edf9271
Tidy *serialize for TransparentAddress with match on network
2020-03-28 02:42:13 -04:00
a6d511eb71
s/weird/invalid/
2020-03-28 02:42:13 -04:00
2e063998fb
Add a new() and impl From<[u8; 32]> for SpendingKey
...
Currently fills/receives 32 random bytes and forces the top 4 bits to
zero, ala clamping. If there is a nicer way to csprng'ly fill 252 bits
without clamping, that would be nicer, less bias.
2020-03-28 02:42:13 -04:00
5f7f851481
Add an explicit test for Display trait on SproutShieldedAddress
2020-03-28 02:42:13 -04:00
ba25817943
Impl FromStr, tidy Debug for SproutShieldedAddress
2020-03-28 02:42:13 -04:00
2bd0f53647
Impl FromStr, tidy Debug and Display impls for TransparentAddress
2020-03-28 02:42:13 -04:00
fa1fa60531
Use a match on network inside SproutShieldedAddress::zcash_serialize()
2020-03-28 02:42:13 -04:00
afccdc3af6
Fix typos and doc comments
2020-03-28 02:42:13 -04:00
34f4bf05cd
Tidy
2020-03-28 02:42:13 -04:00
9a20b20070
Better doc comment for IncomingViewingKey
2020-03-28 02:42:13 -04:00
3bad5304b2
Explicitly use sha2::compress256
2020-03-28 02:42:13 -04:00
ffac1a33d7
Impl Debug for PayingKey
2020-03-28 02:42:13 -04:00
2fa566a35f
Impl Debug and Display for SproutShieldedAddress
2020-03-28 02:42:13 -04:00
caa06c901d
Update zebra-chain/src/addresses/sprout.rs doc comment
...
Co-Authored-By: Daira Hopwood <daira@jacaranda.org>
2020-03-28 02:42:13 -04:00
66b33172e4
Impl Arbitrary for SproutShieldedAddress and add roundtrip test
2020-03-28 02:42:13 -04:00
Deirdre Connolly
Jane Lusby
teor
Henry de Valence
Jane Lusby
Alfredo Garcia
Dimitris Apostolou
Kiminuo