pubscalars_or_vec.rs 1.8 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152
  1. #![allow(non_snake_case)]
  2. use curve25519_dalek::ristretto::RistrettoPoint as G;
  3. use group::ff::PrimeField;
  4. use group::Group;
  5. use sha2::Sha512;
  6. use sigma_compiler::*;
  7. fn pubscalars_or_vec_test_vecsize_val(
  8. vecsize: usize,
  9. b_val: u128,
  10. ) -> Result<(), sigma_rs::errors::Error> {
  11. sigma_compiler! { proof,
  12. (vec x, pub vec a, pub vec b, rand vec r),
  13. (vec C, const cind A, const cind B),
  14. C = x*A + r*B,
  15. OR (
  16. b = 2*a,
  17. b = 2*a - 3,
  18. )
  19. }
  20. type Scalar = <G as Group>::Scalar;
  21. let mut rng = rand::thread_rng();
  22. let A = G::hash_from_bytes::<Sha512>(b"Generator A");
  23. let B = G::generator();
  24. let r: Vec<Scalar> = (0..vecsize).map(|_| Scalar::random(&mut rng)).collect();
  25. let x: Vec<Scalar> = (0..vecsize).map(|i| Scalar::from_u128(i as u128)).collect();
  26. let a: Vec<Scalar> = (0..vecsize)
  27. .map(|i| Scalar::from_u128((i + 12) as u128))
  28. .collect();
  29. let b: Vec<Scalar> = (0..vecsize)
  30. .map(|i| a[i] + a[i] - Scalar::from_u128(b_val))
  31. .collect();
  32. let C: Vec<G> = (0..vecsize).map(|i| x[i] * A + r[i] * B).collect();
  33. let instance = proof::Instance { C, A, B, a, b };
  34. let witness = proof::Witness { x, r };
  35. let proof = proof::prove(&instance, &witness, b"pubscalars_vec_test", &mut rng)?;
  36. proof::verify(&instance, &proof, b"pubscalars_vec_test")
  37. }
  38. #[test]
  39. fn pubscalars_or_vec_test() {
  40. for vecsize in [0, 1, 2, 20] {
  41. pubscalars_or_vec_test_vecsize_val(vecsize, 3).unwrap();
  42. pubscalars_or_vec_test_vecsize_val(vecsize, 1).unwrap_err();
  43. pubscalars_or_vec_test_vecsize_val(vecsize, 2).unwrap_err();
  44. pubscalars_or_vec_test_vecsize_val(vecsize, 3).unwrap();
  45. pubscalars_or_vec_test_vecsize_val(vecsize, 4).unwrap_err();
  46. }
  47. }