Re-order arguments of clsag::sign

This commit is contained in:
Thomas Eizinger 2021-05-11 12:00:51 +10:00
parent c68fe77211
commit be7cdb23c3
No known key found for this signature in database
GPG Key ID: 651AC83A6C6C8B96
2 changed files with 15 additions and 15 deletions

View File

@ -8,18 +8,18 @@ use tiny_keccak::{Hasher, Keccak};
pub const RING_SIZE: usize = 11; pub const RING_SIZE: usize = 11;
pub fn sign( pub fn sign(
fake_responses: [Scalar; RING_SIZE - 1], msg: &[u8],
signing_key: Scalar,
H_p_pk: EdwardsPoint,
alpha: Scalar,
ring: Ring, ring: Ring,
commitment_ring: Ring, commitment_ring: Ring,
fake_responses: [Scalar; RING_SIZE - 1],
z: Scalar, z: Scalar,
H_p_pk: EdwardsPoint,
pseudo_output_commitment: EdwardsPoint, pseudo_output_commitment: EdwardsPoint,
L: EdwardsPoint, L: EdwardsPoint,
R: EdwardsPoint, R: EdwardsPoint,
I: EdwardsPoint, I: EdwardsPoint,
msg: &[u8],
signing_key: Scalar,
alpha: Scalar,
) -> Signature { ) -> Signature {
let D = z * H_p_pk; let D = z * H_p_pk;
let D_inv_8 = D * Scalar::from(8u8).invert(); let D_inv_8 = D * Scalar::from(8u8).invert();

View File

@ -166,18 +166,18 @@ impl Alice0 {
.verify(ED25519_BASEPOINT_POINT, msg.T_b, self.H_p_pk, msg.I_hat_b)?; .verify(ED25519_BASEPOINT_POINT, msg.T_b, self.H_p_pk, msg.I_hat_b)?;
let sig = clsag::sign( let sig = clsag::sign(
self.fake_responses, &self.msg,
self.s_prime_a,
self.H_p_pk,
self.alpha_a,
self.ring, self.ring,
self.commitment_ring, self.commitment_ring,
self.fake_responses,
z, z,
self.H_p_pk,
self.pseudo_output_commitment, self.pseudo_output_commitment,
self.T_a + msg.T_b + self.R_a, self.T_a + msg.T_b + self.R_a,
self.I_hat_a + msg.I_hat_b + self.R_prime_a, self.I_hat_a + msg.I_hat_b + self.R_prime_a,
self.I_a + msg.I_b, self.I_a + msg.I_b,
&self.msg,
self.s_prime_a,
self.alpha_a,
); );
let sig = HalfAdaptorSignature { let sig = HalfAdaptorSignature {
@ -342,18 +342,18 @@ impl Bob1 {
let I = I_a + self.I_b; let I = I_a + self.I_b;
let sig = clsag::sign( let sig = clsag::sign(
fake_responses, &self.msg,
self.s_b,
self.H_p_pk,
self.alpha_b,
self.ring, self.ring,
self.commitment_ring, self.commitment_ring,
fake_responses,
z, z,
self.H_p_pk,
self.pseudo_output_commitment, self.pseudo_output_commitment,
T_a + self.T_b + self.R_a, T_a + self.T_b + self.R_a,
I_hat_a + self.I_hat_b + self.R_prime_a, I_hat_a + self.I_hat_b + self.R_prime_a,
I, I,
&self.msg,
self.s_b,
self.alpha_b,
); );
let s_0_b = sig.responses[10]; let s_0_b = sig.responses[10];