Git-Mirrors/xmr-btc-swap
1
0
Fork 0
mirror of https://github.com/comit-network/xmr-btc-swap.git synced 2025-01-10 15:09:44 -05:00
Code Issues Packages Projects Releases Wiki Activity

Move Signature::verify to clsag::verify

Browse Source
This commit is contained in:
Thomas Eizinger 2021-05-11 12:32:47 +10:00
parent 874179685a
commit 1bd8eb83d1
No known key found for this signature in database
GPG Key ID: 651AC83A6C6C8B96
2 changed files with 38 additions and 34 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
monero-adaptor/src/clsag.rs
View File

@ -7,7 +7,10 @@ use tiny_keccak::{Hasher, Keccak};
pub const RING_SIZE: usize = 11;
const INV_EIGHT: Scalar = Scalar::from_bits([121, 47, 220, 226, 41, 229, 6, 97, 208, 218, 28, 125, 179, 157, 211, 7, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6]);
const INV_EIGHT: Scalar = Scalar::from_bits([
121, 47, 220, 226, 41, 229, 6, 97, 208, 218, 28, 125, 179, 157, 211, 7, 0, 0, 0, 0, 0, 0, 0, 0,
0, 0, 0, 0, 0, 0, 0, 6,
]);
pub fn sign(
msg: &[u8],
@ -40,7 +43,11 @@ pub fn sign(
pseudo_output_commitment,
msg,
);
let h_0 = hash_to_scalar(&[&prefix, L_0.compress().as_bytes(), R_0.compress().as_bytes()]);
let h_0 = hash_to_scalar(&[
&prefix,
L_0.compress().as_bytes(),
R_0.compress().as_bytes(),
]);
let h_last = fake_responses
.iter()
@ -81,6 +88,34 @@ pub fn sign(
}
}
#[must_use]
pub fn verify(sig: &Signature, ring: [EdwardsPoint; RING_SIZE], msg: &[u8; 32]) -> bool {
let ring_concat = ring
.iter()
.flat_map(|pk| pk.compress().as_bytes().to_vec())
.collect::<Vec<u8>>();
let mut h = sig.h_0;
let mus = todo!();
let adjusted_commitment_i = todo!();
for (i, s_i) in sig.responses.iter().enumerate() {
let pk_i = ring[(i + 1) % RING_SIZE];
let prefix = clsag_round_hash_prefix(&ring_concat, todo!(), todo!(), msg);
let L_i = compute_L(h, mus, *s_i, pk_i, adjusted_commitment_i);
let R_i = compute_R(h, mus, pk_i, *s_i, sig.I, sig.D);
h = hash_to_scalar(&[
&prefix,
L_i.compress().as_bytes().as_ref(),
R_i.compress().as_bytes().as_ref(),
])
}
h == sig.h_0
}
pub struct Signature {
pub responses: [Scalar; RING_SIZE],
pub h_0: Scalar,
@ -89,37 +124,6 @@ pub struct Signature {
pub D: EdwardsPoint,
}
impl Signature {
#[cfg(test)]
#[must_use]
pub fn verify(&self, ring: [EdwardsPoint; RING_SIZE], msg: &[u8; 32]) -> bool {
let ring_concat = ring
.iter()
.flat_map(|pk| pk.compress().as_bytes().to_vec())
.collect::<Vec<u8>>();
let mut h = self.h_0;
let mus = todo!();
let adjusted_commitment_i = todo!();
for (i, s_i) in self.responses.iter().enumerate() {
let pk_i = ring[(i + 1) % RING_SIZE];
let prefix = clsag_round_hash_prefix(&ring_concat, todo!(), todo!(), msg);
let L_i = compute_L(h, mus, *s_i, pk_i, adjusted_commitment_i);
let R_i = compute_R(h, mus, pk_i, *s_i, self.I, self.D);
h = hash_to_scalar(&[
&prefix,
L_i.compress().as_bytes().as_ref(),
R_i.compress().as_bytes().as_ref(),
])
}
h == self.h_0
}
}
/// Compute the prefix for the hash common to every iteration of the ring
/// signature algorithm.
///

2
monero-adaptor/src/lib.rs
View File

@ -631,6 +631,6 @@ mod tests {
let sig = alice.adaptor_sig.adapt(r_a);
assert!(sig.verify(ring, msg_to_sign));
assert!(clsag::verify(&sig, ring, msg_to_sign));
}
}