Git-Mirrors/xmr-btc-swap
1
0
Fork 0
mirror of https://github.com/comit-network/xmr-btc-swap.git synced 2025-02-01 10:04:57 -05:00
Code Issues Packages Projects Releases Wiki Activity

Final challenge fixes

Browse Source
This commit is contained in:
Lucas Soriano del Pino 2021-04-15 17:08:48 +10:00
parent 085d95d07b
commit 5c7f4c8c42
No known key found for this signature in database
GPG Key ID: EE611E973A1530E7
1 changed files with 22 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
monero-adaptor/src/lib.rs
View File

@ -15,19 +15,19 @@ const RING_SIZE: usize = 11;
fn final_challenge( fn final_challenge(
i: usize, i: usize,
fake_responses: [Scalar; RING_SIZE - 1], fake_responses: [Scalar; RING_SIZE - 1],
ring: [RistrettoPoint; RING_SIZE], ring: &[RistrettoPoint],
h_prev: Scalar, h_prev: Scalar,
I_a: RistrettoPoint, I: RistrettoPoint,
I_b: RistrettoPoint,
msg: [u8; 32], msg: [u8; 32],
) -> Scalar { ) -> Scalar {
let L = fake_responses[i] * RISTRETTO_BASEPOINT_POINT + h_prev * ring[i]; let s_i = fake_responses[i];
let pk_i = ring[i];
let H_pk_i: RistrettoPoint = let L_i = s_i * RISTRETTO_BASEPOINT_POINT + h_prev * pk_i;
RistrettoPoint::hash_from_bytes::<Sha512>(ring[i].compress().as_bytes());
let I = I_a + I_b; let H_p_pk_i: RistrettoPoint =
let R = fake_responses[i] * H_pk_i + I; RistrettoPoint::hash_from_bytes::<Sha512>(pk_i.compress().as_bytes());
let R_i = s_i * H_p_pk_i + h_prev * I;
let tag = "CLSAG_0".to_string(); let tag = "CLSAG_0".to_string();
let mut ring_concat = ring let mut ring_concat = ring
@ -40,8 +40,8 @@ fn final_challenge(
bytes.append(&mut tag.as_bytes().to_vec()); bytes.append(&mut tag.as_bytes().to_vec());
bytes.append(&mut ring_concat); bytes.append(&mut ring_concat);
bytes.append(&mut msg.to_vec()); bytes.append(&mut msg.to_vec());
bytes.append(&mut L.compress().as_bytes().to_vec()); bytes.append(&mut L_i.compress().as_bytes().to_vec());
bytes.append(&mut R.compress().as_bytes().to_vec()); bytes.append(&mut R_i.compress().as_bytes().to_vec());
let hasher = Sha512::new().chain(bytes); let hasher = Sha512::new().chain(bytes);
let h = Scalar::from_hash(hasher); let h = Scalar::from_hash(hasher);
@ -49,7 +49,7 @@ fn final_challenge(
if i >= RING_SIZE - 2 { if i >= RING_SIZE - 2 {
h h
} else { } else {
final_challenge(i + 1, fake_responses, ring, h, I_a, I_b, msg) final_challenge(i + 1, fake_responses, ring, h, I, msg)
} }
} }
@ -196,12 +196,11 @@ impl Alice0 {
}; };
let h_last = final_challenge( let h_last = final_challenge(
1, 0,
self.fake_responses, self.fake_responses,
self.ring, &self.ring[1..],
h_0, h_0,
self.I_a, self.I_a + msg.I_b,
msg.I_b,
self.msg, self.msg,
); );
@ -380,7 +379,14 @@ impl Bob1 {
Scalar::from_hash(h_0) Scalar::from_hash(h_0)
}; };
let h_last = final_challenge(1, fake_responses, self.ring, h_0, I_a, self.I_b, self.msg); let h_last = final_challenge(
0,
fake_responses,
&self.ring[1..],
h_0,
I_a + self.I_b,
self.msg,
);
let s_0_b = self.alpha_b - h_last * self.s_b; let s_0_b = self.alpha_b - h_last * self.s_b;