disj_vec.rs 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. #![allow(non_snake_case)]
  2. use curve25519_dalek::ristretto::RistrettoPoint as G;
  3. use group::ff::PrimeField;
  4. use group::Group;
  5. use sha2::Sha512;
  6. use sigma_compiler::*;
  7. fn disj_vec_test_vecsize(vecsize: usize) -> sigma_proofs::errors::Result<()> {
  8. sigma_compiler! { proof,
  9. (vec x, vec y, pub vec a, rand vec r, rand vec s),
  10. (vec C, vec D, const cind A, const cind B),
  11. C = (3*x+1)*A + r*B,
  12. D = (2*y+a)*A + s*B,
  13. OR (
  14. y = 2*x,
  15. y = 2*x + 1,
  16. )
  17. }
  18. type Scalar = <G as Group>::Scalar;
  19. let mut rng = rand::thread_rng();
  20. let A = G::hash_from_bytes::<Sha512>(b"Generator A");
  21. let B = G::generator();
  22. let r: Vec<Scalar> = (0..vecsize).map(|_| Scalar::random(&mut rng)).collect();
  23. let s: Vec<Scalar> = (0..vecsize).map(|_| Scalar::random(&mut rng)).collect();
  24. let x: Vec<Scalar> = (0..vecsize).map(|i| Scalar::from_u128(i as u128)).collect();
  25. let a: Vec<Scalar> = (0..vecsize)
  26. .map(|i| Scalar::from_u128((3 * i + 12) as u128))
  27. .collect();
  28. let y: Vec<Scalar> = (0..vecsize).map(|i| x[i] + x[i]).collect();
  29. let C: Vec<G> = (0..vecsize)
  30. .map(|i| (Scalar::from_u128(3) * x[i] + Scalar::ONE) * A + r[i] * B)
  31. .collect();
  32. let D: Vec<G> = (0..vecsize)
  33. .map(|i| (y[i] + y[i] + a[i]) * A + s[i] * B)
  34. .collect();
  35. let instance = proof::Instance { C, D, A, B, a };
  36. let witness = proof::Witness { x, y, r, s };
  37. let proof = proof::prove(&instance, &witness, b"disj_vec_test", &mut rng)?;
  38. proof::verify(&instance, &proof, b"disj_vec_test")
  39. }
  40. #[test]
  41. fn disj_vec_test() {
  42. disj_vec_test_vecsize(0).unwrap();
  43. disj_vec_test_vecsize(1).unwrap();
  44. disj_vec_test_vecsize(2).unwrap();
  45. disj_vec_test_vecsize(20).unwrap();
  46. }