Commit Graph

729 Commits

Author SHA1 Message Date
Sean Bowe
9f24b68b3a Update constraint system hashes. 2018-03-27 21:41:11 -06:00
Sean Bowe
3704b2422e Fix benchmark due to anchor change in witness. 2018-03-27 21:31:32 -06:00
Sean Bowe
9418001d0e First block of GH invocation using random beacon output. 2018-03-27 14:30:08 -06:00
ebfull
470c9572eb Merge pull request #60 from ebfull/optional-enforce
Allow the authentication path to be not enforced
2018-03-27 14:27:53 -06:00
ebfull
7ee29503ec Merge pull request #61 from str4d/bench-final
Update benchmark to use final Sapling circuit implementation
2018-03-27 13:13:23 -06:00
Jack Grigg
97bead9977 Update benchmark to use final Sapling circuit implementation 2018-03-27 16:03:02 +02:00
Sean Bowe
cfd378685f Add more test vectors to Sprout circuit implementation. 2018-03-26 21:47:40 -06:00
Sean Bowe
def5de3f16 Allow the authentication path to be not enforced for zero-value notes, for indistinguishability. 2018-03-26 13:30:14 -06:00
Jack Grigg
d715e812bd Un-disable benchmark 2018-03-24 00:40:16 +01:00
Sean Bowe
4de908b1e5 Fix bug in circuit uncovered by test vector. 2018-03-21 19:21:16 -06:00
Sean Bowe
162a3877e5 JoinSplit circuit implementation for Sprout. 2018-03-21 19:21:16 -06:00
Sean Bowe
ac13cb05bc Implementation of SHA256. 2018-03-21 19:21:16 -06:00
Sean Bowe
75c5269d3b Implementation of SHA256 choice/majority for UInt32. 2018-03-21 19:21:16 -06:00
Sean Bowe
36a6b5fd90 Implementation of SHA256 majority operation for Boolean. 2018-03-21 19:21:16 -06:00
Sean Bowe
abca61401e Implementation of SHA256 choice operation for Boolean. 2018-03-21 19:21:16 -06:00
Sean Bowe
4f0a553fbb Implement UInt32 encoding/decoding with big-endian representation. 2018-03-21 19:21:16 -06:00
Sean Bowe
51bb5f0f70 Implement UInt32::shr() for SHA256. 2018-03-21 19:21:16 -06:00
ebfull
e6397507ca Merge pull request #57 from ebfull/final-circuit-changes
Final circuit changes (part 1)
2018-03-21 19:11:08 -06:00
Sean Bowe
601e8e38f8 Little-endian byte order interpretation of the output of CRH^ivk. 2018-03-19 18:06:44 -06:00
Sean Bowe
f9e58c01ce Swap bit-endianness of value in note commitment. 2018-03-19 17:54:44 -06:00
Sean Bowe
b14c9f8d68 Change personalizations to actually match spec this time. 2018-03-19 17:26:28 -06:00
Sean Bowe
219d03cc11 Perform multiple checks of circuit in test. 2018-03-19 17:05:51 -06:00
Sean Bowe
8b6f113052 Change personalization to more closely align with the spec. 2018-03-17 10:24:55 -06:00
Sean Bowe
d09c4d6ce8 Simplify value commitment gadget. 2018-03-17 09:10:13 -06:00
Sean Bowe
6d01e78711 Fix variable names in output circuit 2018-03-17 09:02:29 -06:00
Sean Bowe
13b03a0a1a Relocate circuit components for intuitive code paths. 2018-03-16 22:21:29 -06:00
Sean Bowe
00ee962429 Fix some names of variables. 2018-03-16 15:46:19 -06:00
Sean Bowe
8b2f231e2f Change personalization to match specification. 2018-03-16 15:46:19 -06:00
Sean Bowe
7e05feb90b Changes to names and circuit design to match spec. 2018-03-16 15:46:15 -06:00
ebfull
c09292672a Merge pull request #56 from rex4539/fix-typos
Fix typos
2018-03-16 15:44:02 -06:00
Dimitris Apostolou
a7d704cd10 Fix typos 2018-03-16 23:25:36 +02:00
ebfull
39f1152e16 Merge pull request #53 from ebfull/circuit-improvements
Minor circuit improvements
2018-03-15 12:47:26 -06:00
Sean Bowe
21625d69e0 Place Sapling circuit into submodule. 2018-03-15 12:44:19 -06:00
Sean Bowe
ca202ef304 Introduce input multipacking abstraction for nullifiers. 2018-03-15 12:36:05 -06:00
Sean Bowe
52eb59766b Optimize UInt32::addmany/BLAKE2s to combine equality constraints. (Closes #5) 2018-03-15 12:31:10 -06:00
Sean Bowe
827e85547e Public input verification utility for the test framework 2018-03-15 11:42:22 -06:00
ebfull
3c07a2d9b3 Merge pull request #30 from plutomonkey/boolean_enforce_equal
Optimise Boolean::enforce_equal.
2018-03-14 07:28:33 -06:00
Jason Davies
661f318eb7 Optimise Boolean::enforce_equal.
Use a single constraint instead of two.

Fixes #6.
2018-03-09 23:53:28 +00:00
Sean Bowe
2c69abe268 Add Uncommitted^Sapling. 2018-03-09 14:17:45 -07:00
Sean Bowe
c1784f0fdf Check g_d is not small order in Spend circuit. 2018-03-09 14:08:01 -07:00
ebfull
390f2c129b Merge pull request #37 from ebfull/circuit-tests
Circuit tests
2018-03-08 19:18:40 -07:00
Sean Bowe
b6e1b52a44 Fix comment about Montgomery curve selection 2018-03-08 13:03:07 -07:00
Sean Bowe
db28ff7ba1 Simplify the Output witness. 2018-03-08 01:49:27 -07:00
Sean Bowe
9998400117 Relocate structs for cleanliness. 2018-03-08 01:37:55 -07:00
Sean Bowe
512a394b30 Simplify witness for Spend statement. 2018-03-08 01:36:16 -07:00
Sean Bowe
3fbbd933cf Simplify value commitment abstraction. 2018-03-08 01:16:21 -07:00
Sean Bowe
d6d86737c8 Remove some code duplication for value commitment witnessing. 2018-03-08 01:01:00 -07:00
Sean Bowe
f61cc88a71 More comment improvements. 2018-03-08 00:51:53 -07:00
Sean Bowe
b6ef12b077 General code quality improvements. 2018-03-08 00:41:47 -07:00
Sean Bowe
896b144a7d Move first block of group hash to constants submodule. 2018-03-08 00:09:34 -07:00