116 Commits

Author	SHA1	Message	Date
ebfull	45c73dbd8f	Merge pull request #54 from ebfull/sprout-circuit-minimal ... Sprout circuit implementation	2018-04-02 16:55:09 -06:00
Sean Bowe	9f24b68b3a	Update constraint system hashes.	2018-03-27 21:41:11 -06:00
Sean Bowe	cfd378685f	Add more test vectors to Sprout circuit implementation.	2018-03-26 21:47:40 -06:00
Sean Bowe	def5de3f16	Allow the authentication path to be not enforced for zero-value notes, for indistinguishability.	2018-03-26 13:30:14 -06:00
Sean Bowe	4de908b1e5	Fix bug in circuit uncovered by test vector.	2018-03-21 19:21:16 -06:00
Sean Bowe	162a3877e5	JoinSplit circuit implementation for Sprout.	2018-03-21 19:21:16 -06:00
Sean Bowe	ac13cb05bc	Implementation of SHA256.	2018-03-21 19:21:16 -06:00
Sean Bowe	75c5269d3b	Implementation of SHA256 choice/majority for UInt32.	2018-03-21 19:21:16 -06:00
Sean Bowe	36a6b5fd90	Implementation of SHA256 majority operation for Boolean.	2018-03-21 19:21:16 -06:00
Sean Bowe	abca61401e	Implementation of SHA256 choice operation for Boolean.	2018-03-21 19:21:16 -06:00
Sean Bowe	4f0a553fbb	Implement UInt32 encoding/decoding with big-endian representation.	2018-03-21 19:21:16 -06:00
Sean Bowe	51bb5f0f70	Implement UInt32::shr() for SHA256.	2018-03-21 19:21:16 -06:00
Sean Bowe	601e8e38f8	Little-endian byte order interpretation of the output of CRH^ivk.	2018-03-19 18:06:44 -06:00
Sean Bowe	f9e58c01ce	Swap bit-endianness of value in note commitment.	2018-03-19 17:54:44 -06:00
Sean Bowe	b14c9f8d68	Change personalizations to actually match spec this time.	2018-03-19 17:26:28 -06:00
Sean Bowe	219d03cc11	Perform multiple checks of circuit in test.	2018-03-19 17:05:51 -06:00
Sean Bowe	8b6f113052	Change personalization to more closely align with the spec.	2018-03-17 10:24:55 -06:00
Sean Bowe	d09c4d6ce8	Simplify value commitment gadget.	2018-03-17 09:10:13 -06:00
Sean Bowe	6d01e78711	Fix variable names in output circuit	2018-03-17 09:02:29 -06:00
Sean Bowe	13b03a0a1a	Relocate circuit components for intuitive code paths.	2018-03-16 22:21:29 -06:00
Sean Bowe	00ee962429	Fix some names of variables.	2018-03-16 15:46:19 -06:00
Sean Bowe	8b2f231e2f	Change personalization to match specification.	2018-03-16 15:46:19 -06:00
Sean Bowe	7e05feb90b	Changes to names and circuit design to match spec.	2018-03-16 15:46:15 -06:00
ebfull	39f1152e16	Merge pull request #53 from ebfull/circuit-improvements ... Minor circuit improvements	2018-03-15 12:47:26 -06:00
Sean Bowe	21625d69e0	Place Sapling circuit into submodule.	2018-03-15 12:44:19 -06:00
Sean Bowe	ca202ef304	Introduce input multipacking abstraction for nullifiers.	2018-03-15 12:36:05 -06:00
Sean Bowe	52eb59766b	Optimize UInt32::addmany/BLAKE2s to combine equality constraints. (Closes #5)	2018-03-15 12:31:10 -06:00
Sean Bowe	827e85547e	Public input verification utility for the test framework	2018-03-15 11:42:22 -06:00
Jason Davies	661f318eb7	Optimise Boolean::enforce_equal. ... Use a single constraint instead of two. Fixes #6.	2018-03-09 23:53:28 +00:00
Sean Bowe	c1784f0fdf	Check g_d is not small order in Spend circuit.	2018-03-09 14:08:01 -07:00
Sean Bowe	db28ff7ba1	Simplify the Output witness.	2018-03-08 01:49:27 -07:00
Sean Bowe	9998400117	Relocate structs for cleanliness.	2018-03-08 01:37:55 -07:00
Sean Bowe	512a394b30	Simplify witness for Spend statement.	2018-03-08 01:36:16 -07:00
Sean Bowe	3fbbd933cf	Simplify value commitment abstraction.	2018-03-08 01:16:21 -07:00
Sean Bowe	d6d86737c8	Remove some code duplication for value commitment witnessing.	2018-03-08 01:01:00 -07:00
Sean Bowe	f61cc88a71	More comment improvements.	2018-03-08 00:51:53 -07:00
Sean Bowe	b6ef12b077	General code quality improvements.	2018-03-08 00:41:47 -07:00
Sean Bowe	c7c8d3c039	Move personalization constants to submodule.	2018-03-08 00:06:53 -07:00
Sean Bowe	25a8050df8	Remaining tests for input circuit	2018-03-07 23:59:04 -07:00
Sean Bowe	0242ed35ab	Add some circuit tests for inputs.	2018-03-07 12:19:56 -07:00
Sean Bowe	1f65d4b353	Change tree depth to 32 in test.	2018-03-06 10:04:02 -07:00
Sean Bowe	1f2bb62657	Rename proving key to proof generation key to disambiguate from the SNARK.	2018-03-06 09:56:29 -07:00
Sean Bowe	c31092ce7f	Remove unnecessary mut binding.	2018-03-06 09:39:56 -07:00
Sean Bowe	63c6830429	Cache fewer pedersen hash generators.	2018-03-06 09:03:29 -07:00
Sean Bowe	7a9879eb54	Make EdwardsPoint (x, y) not public.	2018-03-06 08:38:34 -07:00
Sean Bowe	f155c01cf5	Personalize GH for each generator independently.	2018-03-06 08:30:28 -07:00
Sean Bowe	b831942501	Adopt BLAKE2s personalization throughout protocol.	2018-03-05 19:32:27 -07:00
Sean Bowe	d21ff08176	Group hash should use a first block containing random data as per spec.	2018-03-05 18:08:49 -07:00
Sean Bowe	058801bdfc	Switch to using the blake2-rfc crate instead.	2018-03-05 17:58:34 -07:00
Sean Bowe	2e846844e7	Perform ak group order check in Spend circuit.	2018-03-05 17:46:12 -07:00