forked from onflow/flow-go
-
Notifications
You must be signed in to change notification settings - Fork 0
/
bls12381_utils.h
143 lines (116 loc) · 4.2 KB
/
bls12381_utils.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
// +build relic
// this file contains utility functions for the curve BLS 12-381
// these tools are shared by the BLS signature scheme, the BLS based threshold signature
// and the BLS distributed key generation protocols
#ifndef _REL_MISC_INCLUDE_H
#define _REL_MISC_INCLUDE_H
#include "relic.h"
typedef uint8_t byte;
#define VALID RLC_OK
#define INVALID RLC_ERR
#define UNDEFINED (((VALID&1)^1) | ((INVALID&2)^2)) // different value than RLC_OK and RLC_ERR
#define BITS_TO_BYTES(x) ((x+7)>>3)
#define BITS_TO_DIGITS(x) ((x+63)>>6)
#define BYTES_TO_DIGITS(x) ((x+7)>>3)
#define MIN(a,b) ((a)>(b)?(b):(a))
// Fields and Group serialization lengths
#define SEC_BITS 128
#define Fp_BITS 381
#define Fr_BITS 255
#define Fp_BYTES BITS_TO_BYTES(Fp_BITS)
#define Fp2_BYTES (2*Fp_BYTES)
#define Fp_DIGITS BITS_TO_DIGITS(Fp_BITS)
#define Fr_BYTES BITS_TO_BYTES(Fr_BITS)
#define G1_BYTES (2*Fp_BYTES)
#define G2_BYTES (2*Fp2_BYTES)
// Compressed and uncompressed points
#define COMPRESSED 1
#define UNCOMPRESSED 0
#define G1_SERIALIZATION COMPRESSED
#define G2_SERIALIZATION COMPRESSED
// Subgroup membership check method
#define EXP_ORDER 0
#define BOWE 1
#define MEMBERSHIP_CHECK_G1 BOWE
#define MEMBERSHIP_CHECK_G2 EXP_ORDER
// constants used in the optimized SWU hash to curve
#if (hashToPoint == LOCAL_SSWU)
#define ELLP_Nx_LEN 12
#define ELLP_Dx_LEN 10
#define ELLP_Ny_LEN 16
#define ELLP_Dy_LEN 15
#endif
// Structure of precomputed data
typedef struct prec_ {
#if (hashToPoint == LOCAL_SSWU)
// constants needed in optimized SSWU
bn_st p_3div4;
fp_st sqrt_z;
// related hardcoded constants for faster access,
// where a1 is the coefficient of isogenous curve E1
fp_st minus_a1;
fp_st a1z;
// coefficients of the isogeny map
fp_st iso_Nx[ELLP_Nx_LEN];
fp_st iso_Ny[ELLP_Ny_LEN];
#endif
#if (MEMBERSHIP_CHECK_G1 == BOWE)
bn_st beta;
bn_st z2_1_by3;
#endif
// other field-related constants
bn_st p_1div2;
fp_t r; // Montgomery multiplication constant
} prec_st;
// BLS based SPoCK
int bls_spock_verify(const ep2_t, const byte*, const ep2_t, const byte*);
// hash to curve functions (functions in bls12381_hashtocurve.c)
void map_to_G1(ep_t, const byte*, const int);
// Utility functions
int get_valid();
int get_invalid();
void bn_new_wrapper(bn_t a);
ctx_t* relic_init_BLS12_381();
prec_st* init_precomputed_data_BLS12_381();
void precomputed_data_set(const prec_st* p);
void seed_relic(byte*, int);
int ep_read_bin_compact(ep_t, const byte *, const int);
void ep_write_bin_compact(byte *, const ep_t, const int);
int ep2_read_bin_compact(ep2_t, const byte *, const int);
void ep2_write_bin_compact(byte *, const ep2_t, const int);
int bn_read_Zr_bin(bn_t, const uint8_t *, int );
void ep_mult_gen_bench(ep_t, const bn_t);
void ep_mult_generic_bench(ep_t, const bn_t);
void ep_mult(ep_t, const ep_t, const bn_t);
void ep2_mult_gen(ep2_t, const bn_t);
void bn_randZr(bn_t);
void bn_randZr_star(bn_t);
int bn_map_to_Zr(bn_t, const uint8_t*, int);
void bn_map_to_Zr_star(bn_t, const uint8_t*, int);
void bn_sum_vector(bn_t, const bn_st*, const int);
void ep_sum_vector(ep_t, ep_st*, const int);
void ep2_sum_vector(ep2_t, ep2_st*, const int);
int ep_sum_vector_byte(byte*, const byte*, const int);
void ep2_subtract_vector(ep2_t res, ep2_t x, ep2_st* y, const int len);
// membership checks
int check_membership_G1(const ep_t);
int check_membership_G2(const ep2_t);
int check_membership_Zr_star(const bn_t);
int simple_subgroup_check_G1(const ep_t);
int simple_subgroup_check_G2(const ep2_t);
void ep_rand_G1(ep_t);
void ep_rand_G1complement( ep_t);
void ep2_rand_G2(ep2_t);
void ep2_rand_G2complement( ep2_t);
#if (MEMBERSHIP_CHECK_G1 == BOWE)
int bowe_subgroup_check_G1(const ep_t);
#endif
// utility testing function
void xmd_sha256(uint8_t *, int, uint8_t *, int, uint8_t *, int);
// Debugging related functions
void bytes_print_(char*, byte*, int);
void fp_print_(char*, fp_t);
void bn_print_(char*, bn_st*);
void ep_print_(char*, ep_st*);
void ep2_print_(char*, ep2_st*);
#endif