Commit Graph

256 Commits

Author SHA1 Message Date
Jack Grigg 51cded6900 Move Spend circuit benchmark into benchmarks 2023-12-11 18:45:24 +00:00
Jack Grigg 34cd43a8f2 Fix Pedersen hash benchmark 2023-12-11 18:45:24 +00:00
Jack Grigg b955ff7c7e Fix Spend circuit benchmark 2023-12-11 18:45:24 +00:00
Jack Grigg 1a42fe1c83 Fix dependency feature flags 2023-12-11 18:45:24 +00:00
Jack Grigg 283830bdf4 Set up CI 2023-12-11 18:45:24 +00:00
str4d a1194fe800
Merge pull request #107 from zcash/full-refactor
Bring in refactor of the crate
2023-12-11 17:52:40 +00:00
Jack Grigg df6681c104 Bring in refactor of the crate
This refactor was performed over several years. The crate was previously
focused on the Sapling circuit; it now encompasses the Sapling protocol,
and has types better suited to use in non-circuit contexts. Many of the
circuit helper types were moved into the `bellman` crate, and the Sprout
circuit was left in `zcash_primitives`.

Source: https://github.com/zcash/librustzcash
Rev: zcash/librustzcash@6acc64e61c
2023-12-11 17:17:00 +00:00
Sean Bowe 49017b4e05
Remove outdated notice in README. 2018-11-26 16:15:36 -07:00
ebfull 21084bde20
Merge pull request #81 from ebfull/must_use
Add must_use to operations over Edwards points
2018-07-30 18:40:16 -06:00
Sean Bowe b4d41b689c
Add must_use to operations over Edwards/Montgomery points. 2018-07-30 18:37:01 -06:00
ebfull b70d6e66fc
Merge pull request #79 from ebfull/pedersen-hash-performance
Improve Pedersen hash performance
2018-07-30 18:29:14 -06:00
ebfull 99c03c5708
Merge pull request #80 from ebfull/cofactor-signature-checking
Cofactor signature checking
2018-07-30 11:50:26 -06:00
Sean Bowe 95b498af33
Implement specialized doubling formula for extended twisted edwards coordinates. 2018-07-30 07:30:40 -06:00
Sean Bowe 821810cd82
Change pedersen hash outside the circuit to use window table lookups. 2018-07-30 07:30:40 -06:00
Sean Bowe 9cb8accf09
Fix nits 2018-07-30 07:29:23 -06:00
Sean Bowe a57d2773ab
Add demonstration implementation of batch verification. 2018-07-27 10:54:21 -06:00
Sean Bowe cae9715a8e
Change signature verification equation to permit batch verification. 2018-07-27 10:37:26 -06:00
Sean Bowe 3e43cae526
Add test that torsion doesn't affect signature verification. 2018-07-27 10:28:08 -06:00
ebfull c2862a4382
Merge pull request #78 from gtank/make-privatekey-public
redjubjub: make PrivateKey internal scalar public
2018-07-12 14:01:11 -06:00
George Tankersley df7bfce0be redjubjub: make PrivateKey internal scalar public 2018-07-12 19:58:32 +00:00
ebfull 6abfcca25a
Merge pull request #74 from ebfull/ivk-pub
Make ivk pub
2018-05-18 12:45:38 -06:00
Sean Bowe 89f47ef5c2
Make ivk pub 2018-05-18 12:42:26 -06:00
ebfull eb409fa3cf
Merge pull request #72 from ebfull/little-endian
Switch to little endian
2018-05-17 14:03:43 -06:00
Sean Bowe 2ff318eecb
Use little endian for everything in Sapling. 2018-05-17 13:01:31 -06:00
Sean Bowe f491e02b56
Correctly interpret BLAKE2s inputs and outputs as little endian. 2018-05-17 13:01:31 -06:00
Sean Bowe 87c62e2248
Update to the latest pairing crate version. 2018-05-17 13:01:29 -06:00
ebfull 7beeb52730
Merge pull request #69 from ebfull/make-util-pub
Make util module public
2018-05-07 17:47:31 -06:00
Sean Bowe 36cd38e239
Make util module public. 2018-05-07 17:47:04 -06:00
ebfull 3b8246f3eb
Merge pull request #68 from ebfull/redjubjub-final-work
Make PublicKey inner Point public so that we can use it during zk-SNARK verification
2018-05-07 14:21:49 -06:00
Sean Bowe 5687acfaf8
Make PublicKey inner Point public so that we can use it during zk-SNARK verification. 2018-05-01 15:23:34 -06:00
ebfull 347666705c
Merge pull request #67 from str4d/redjubjub-serialisation
RedJubjub serialisation
2018-04-30 08:50:03 -06:00
Jack Grigg b27dc2914b
Remove redundant signature check
E::Fs guarantees its representation is in the field, implicitly enforcing
that S < order(G).
2018-04-30 13:55:41 +01:00
ebfull 6e08a5a22b
Merge pull request #66 from str4d/fix-spend-nf-comment
Fix comment
2018-04-29 13:08:10 -06:00
Jack Grigg e94dbf2523
Parameterize the generator in RedJubjub
Per the specification, the generator is different between BindingSig and
SpendAuthSig.
2018-04-26 22:42:54 +01:00
Jack Grigg 4eab1fc68a
Implement RedJubjub serialization
Also alters the Signature struct to store Rbar and Sbar instead of R and S,
to more closely match the specification.
2018-04-26 22:42:20 +01:00
Jack Grigg f54feda94f
Fix comment
h/t omershlo from Zcash Community Chat for spotting it!
2018-04-26 12:30:08 +01:00
ebfull e4175d81e9
Merge pull request #64 from str4d/redjubjub
RedJubjub
2018-04-19 12:44:39 -06:00
Jack Grigg 840c23bd23
Specify pre-conditions for signature validation 2018-04-19 16:17:40 +01:00
Jack Grigg 45e4ca38e4
Match additive notation with variable name 2018-04-18 23:59:22 +01:00
Jack Grigg 916dbce2df
Implement RedJubjub
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
2018-04-17 00:40:11 +01:00
Jack Grigg 0f230a70b9
Implement uniform sampling of Jubjub scalars
Co-authored-by: Sean Bowe <ewillbefull@gmail.com>
2018-04-15 15:52:45 -06:00
Sean Bowe e554b473dd
Update to bellman 0.1 2018-04-06 13:29:58 -06:00
ebfull 45c73dbd8f
Merge pull request #54 from ebfull/sprout-circuit-minimal
Sprout circuit implementation
2018-04-02 16:55:09 -06:00
ebfull 1026e92194
Merge pull request #63 from ebfull/gh
First block of GH invocation using random beacon output
2018-03-28 16:05:20 -06:00
Sean Bowe 9f24b68b3a
Update constraint system hashes. 2018-03-27 21:41:11 -06:00
Sean Bowe 3704b2422e
Fix benchmark due to anchor change in witness. 2018-03-27 21:31:32 -06:00
Sean Bowe 9418001d0e
First block of GH invocation using random beacon output. 2018-03-27 14:30:08 -06:00
ebfull 470c9572eb
Merge pull request #60 from ebfull/optional-enforce
Allow the authentication path to be not enforced
2018-03-27 14:27:53 -06:00
ebfull 7ee29503ec
Merge pull request #61 from str4d/bench-final
Update benchmark to use final Sapling circuit implementation
2018-03-27 13:13:23 -06:00
Jack Grigg 97bead9977
Update benchmark to use final Sapling circuit implementation 2018-03-27 16:03:02 +02:00