275 lines
8.5 KiB
Rust
275 lines
8.5 KiB
Rust
//! Rust bindings for Zcash transparent scripts.
|
|
|
|
#![doc(html_logo_url = "https://www.zfnd.org/images/zebra-icon.png")]
|
|
#![doc(html_root_url = "https://docs.rs/zcash_script/0.1.14")]
|
|
#![allow(missing_docs)]
|
|
#![allow(clippy::needless_lifetimes)]
|
|
#![allow(non_upper_case_globals)]
|
|
#![allow(non_camel_case_types)]
|
|
#![allow(non_snake_case)]
|
|
#![allow(unsafe_code)]
|
|
#![allow(unused_imports)]
|
|
#![allow(clippy::unwrap_or_default)]
|
|
|
|
// Use the generated C++ bindings
|
|
include!(concat!(env!("OUT_DIR"), "/bindings.rs"));
|
|
|
|
// Include the items from depend/zcash/src/rust/src/rustzcash.rs (librustzcash/lib.rs)
|
|
// that we need
|
|
|
|
/// The code that uses this constant is not called by zcash_script.
|
|
static mut SAPLING_SPEND_VK: Option<bellman::groth16::VerifyingKey<bls12_381::Bls12>> = None;
|
|
/// The code that uses this constant is not called by zcash_script.
|
|
static mut SAPLING_OUTPUT_VK: Option<bellman::groth16::VerifyingKey<bls12_381::Bls12>> = None;
|
|
/// The code that uses this constant is not called by zcash_script.
|
|
static mut SAPLING_SPEND_PARAMS: Option<bellman::groth16::Parameters<bls12_381::Bls12>> = None;
|
|
/// The code that uses this constant is not called by zcash_script.
|
|
static mut SAPLING_OUTPUT_PARAMS: Option<bellman::groth16::Parameters<bls12_381::Bls12>> = None;
|
|
|
|
/// The code that uses this constant is not called by zcash_script.
|
|
static mut ORCHARD_PK: Option<orchard::circuit::ProvingKey> = None;
|
|
/// The code that uses this constant is not called by zcash_script.
|
|
static mut ORCHARD_VK: Option<orchard::circuit::VerifyingKey> = None;
|
|
|
|
/// Converts CtOption<t> into Option<T>
|
|
fn de_ct<T>(ct: subtle::CtOption<T>) -> Option<T> {
|
|
if ct.is_some().into() {
|
|
Some(ct.unwrap())
|
|
} else {
|
|
None
|
|
}
|
|
}
|
|
|
|
/// The size of a Groth16 Sapling proof.
|
|
const GROTH_PROOF_SIZE: usize = 48 // π_A
|
|
+ 96 // π_B
|
|
+ 48; // π_C
|
|
|
|
// Include the modules from depend/zcash/src/rust (librustzcash) that we need
|
|
mod blake2b;
|
|
mod bridge;
|
|
mod bundlecache;
|
|
mod incremental_merkle_tree;
|
|
mod merkle_frontier;
|
|
mod note_encryption;
|
|
mod orchard_bundle;
|
|
mod params;
|
|
mod sapling;
|
|
mod streams;
|
|
mod test_harness_ffi;
|
|
mod wallet;
|
|
mod wallet_scanner;
|
|
mod zcashd_orchard;
|
|
|
|
mod builder_ffi;
|
|
mod orchard_ffi;
|
|
mod streams_ffi;
|
|
mod transaction_ffi;
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
pub use super::zcash_script_error_t;
|
|
use hex::FromHex;
|
|
|
|
lazy_static::lazy_static! {
|
|
pub static ref SCRIPT_PUBKEY: Vec<u8> = <Vec<u8>>::from_hex("76a914f47cac1e6fec195c055994e8064ffccce0044dd788ac").unwrap();
|
|
pub static ref SCRIPT_TX: Vec<u8> = <Vec<u8>>::from_hex("0400008085202f8901fcaf44919d4a17f6181a02a7ebe0420be6f7dad1ef86755b81d5a9567456653c010000006a473044022035224ed7276e61affd53315eca059c92876bc2df61d84277cafd7af61d4dbf4002203ed72ea497a9f6b38eb29df08e830d99e32377edb8a574b8a289024f0241d7c40121031f54b095eae066d96b2557c1f99e40e967978a5fd117465dbec0986ca74201a6feffffff020050d6dc0100000017a9141b8a9bda4b62cd0d0582b55455d0778c86f8628f870d03c812030000001976a914e4ff5512ffafe9287992a1cd177ca6e408e0300388ac62070d0095070d000000000000000000000000").expect("Block bytes are in valid hex representation");
|
|
}
|
|
|
|
/// Manually encode all previous outputs for a single output.
|
|
fn encode_all_prev_outputs(amount: i64, script_pub_key: &[u8]) -> (Vec<u8>, *const u8) {
|
|
// Number of transactions (CompactSize)
|
|
let mut all_prev_outputs = vec![1];
|
|
// Amount as 8 little-endian bytes
|
|
all_prev_outputs.extend(amount.to_le_bytes().iter().cloned());
|
|
// Length of the pub key script (CompactSize)
|
|
all_prev_outputs.push(script_pub_key.len() as u8);
|
|
// Pub key script
|
|
all_prev_outputs.extend(script_pub_key.iter().cloned());
|
|
let all_prev_outputs_ptr = all_prev_outputs.as_ptr();
|
|
(all_prev_outputs, all_prev_outputs_ptr)
|
|
}
|
|
|
|
pub fn verify_script(
|
|
script_pub_key: &[u8],
|
|
amount: i64,
|
|
tx_to: &[u8],
|
|
nIn: u32,
|
|
flags: u32,
|
|
consensus_branch_id: u32,
|
|
) -> Result<(), zcash_script_error_t> {
|
|
let script_ptr = script_pub_key.as_ptr();
|
|
let script_len = script_pub_key.len();
|
|
let tx_to_ptr = tx_to.as_ptr();
|
|
let tx_to_len = tx_to.len();
|
|
let mut err = 0;
|
|
|
|
let ret = unsafe {
|
|
super::zcash_script_verify(
|
|
script_ptr,
|
|
script_len as u32,
|
|
amount,
|
|
tx_to_ptr,
|
|
tx_to_len as u32,
|
|
nIn,
|
|
flags,
|
|
consensus_branch_id,
|
|
&mut err,
|
|
)
|
|
};
|
|
|
|
if ret != 1 {
|
|
return Err(err);
|
|
}
|
|
|
|
// Also test with the V5 API
|
|
|
|
let (all_prev_outputs, all_prev_outputs_ptr) =
|
|
encode_all_prev_outputs(amount, script_pub_key);
|
|
|
|
let ret = unsafe {
|
|
super::zcash_script_verify_v5(
|
|
tx_to_ptr,
|
|
tx_to_len as u32,
|
|
all_prev_outputs_ptr,
|
|
all_prev_outputs.len() as _,
|
|
nIn,
|
|
flags,
|
|
consensus_branch_id,
|
|
&mut err,
|
|
)
|
|
};
|
|
|
|
if ret == 1 {
|
|
Ok(())
|
|
} else {
|
|
Err(err)
|
|
}
|
|
}
|
|
|
|
pub fn verify_script_precompute(
|
|
script_pub_key: &[u8],
|
|
amount: i64,
|
|
tx_to: &[u8],
|
|
nIn: u32,
|
|
flags: u32,
|
|
consensus_branch_id: u32,
|
|
) -> Result<(), zcash_script_error_t> {
|
|
let script_ptr = script_pub_key.as_ptr();
|
|
let script_len = script_pub_key.len();
|
|
let tx_to_ptr = tx_to.as_ptr();
|
|
let tx_to_len = tx_to.len();
|
|
let mut err = 0;
|
|
|
|
let precomputed =
|
|
unsafe { super::zcash_script_new_precomputed_tx(tx_to_ptr, tx_to_len as _, &mut err) };
|
|
|
|
let ret = unsafe {
|
|
super::zcash_script_verify_precomputed(
|
|
precomputed,
|
|
nIn,
|
|
script_ptr,
|
|
script_len as _,
|
|
amount,
|
|
flags,
|
|
consensus_branch_id,
|
|
&mut err,
|
|
)
|
|
};
|
|
|
|
unsafe { super::zcash_script_free_precomputed_tx(precomputed) };
|
|
|
|
if ret != 1 {
|
|
return Err(err);
|
|
}
|
|
|
|
// Also test with the V5 API
|
|
|
|
let (all_prev_outputs, all_prev_outputs_ptr) =
|
|
encode_all_prev_outputs(amount, script_pub_key);
|
|
|
|
let precomputed = unsafe {
|
|
super::zcash_script_new_precomputed_tx_v5(
|
|
tx_to_ptr,
|
|
tx_to_len as _,
|
|
all_prev_outputs_ptr,
|
|
all_prev_outputs.len() as _,
|
|
&mut err,
|
|
)
|
|
};
|
|
|
|
let ret = unsafe {
|
|
super::zcash_script_verify_precomputed(
|
|
precomputed,
|
|
nIn,
|
|
script_ptr,
|
|
script_len as u32,
|
|
amount,
|
|
flags,
|
|
consensus_branch_id,
|
|
&mut err,
|
|
)
|
|
};
|
|
|
|
unsafe { super::zcash_script_free_precomputed_tx(precomputed) };
|
|
|
|
if ret == 1 {
|
|
Ok(())
|
|
} else {
|
|
Err(err)
|
|
}
|
|
}
|
|
|
|
#[test]
|
|
fn it_works() {
|
|
let coin = i64::pow(10, 8);
|
|
let script_pub_key = &*SCRIPT_PUBKEY;
|
|
let amount = 212 * coin;
|
|
let tx_to = &*SCRIPT_TX;
|
|
let nIn = 0;
|
|
let flags = 1;
|
|
let branch_id = 0x2bb40e60;
|
|
|
|
verify_script(script_pub_key, amount, tx_to, nIn, flags, branch_id).unwrap();
|
|
}
|
|
|
|
#[test]
|
|
fn it_works_precomputed() {
|
|
let coin = i64::pow(10, 8);
|
|
let script_pub_key = &*SCRIPT_PUBKEY;
|
|
let amount = 212 * coin;
|
|
let tx_to = &*SCRIPT_TX;
|
|
let nIn = 0;
|
|
let flags = 1;
|
|
let branch_id = 0x2bb40e60;
|
|
|
|
verify_script_precompute(script_pub_key, amount, tx_to, nIn, flags, branch_id).unwrap();
|
|
}
|
|
|
|
#[test]
|
|
fn it_doesnt_work() {
|
|
let coin = i64::pow(10, 8);
|
|
let script_pub_key = &*SCRIPT_PUBKEY;
|
|
let amount = 212 * coin;
|
|
let tx_to = &*SCRIPT_TX;
|
|
let nIn = 0;
|
|
let flags = 1;
|
|
let branch_id = 0x2bb40e61;
|
|
|
|
verify_script(script_pub_key, amount, tx_to, nIn, flags, branch_id).unwrap_err();
|
|
}
|
|
|
|
#[test]
|
|
fn it_doesnt_work_precomputed() {
|
|
let coin = i64::pow(10, 8);
|
|
let script_pub_key = &*SCRIPT_PUBKEY;
|
|
let amount = 212 * coin;
|
|
let tx_to = &*SCRIPT_TX;
|
|
let nIn = 0;
|
|
let flags = 1;
|
|
let branch_id = 0x2bb40e61;
|
|
|
|
verify_script_precompute(script_pub_key, amount, tx_to, nIn, flags, branch_id).unwrap_err();
|
|
}
|
|
}
|