lox/src/cred.rs

/*! The various credentials used by the system.

In each case, (P,Q) forms the MAC on the credential.  This MAC is
verifiable only by the issuing party, or if the issuing party issues a
zero-knowledge proof of its correctness (as it does at issuing time). */

use curve25519_dalek::ristretto::RistrettoPoint;
use curve25519_dalek::scalar::Scalar;

/// A migration credential.  This credential authorizes the holder of
/// the Lox credential with the given id to switch from bucket
/// from_bucket to bucket to_bucket.
#[derive(Debug)]
pub struct Migration {
    pub P: RistrettoPoint,
    pub Q: RistrettoPoint,
    pub lox_id: Scalar,
    pub from_bucket: Scalar,
    pub to_bucket: Scalar,
}

/// The main user credential in the Lox system.  Its id is jointly
/// generated by the user and the BA (bridge authority), but known only
/// to the user.  The level_since date is the Julian date of when this
/// user was changed to the current trust level. (P_noopmigration,
/// Q_noopmigration) are the MAC on the implicit no-op migration
/// credential formed by the attributes (id, bucket, bucket), which
/// authorizes the user to switch from its current bucket to the same
/// bucket (i.e., a no-op).  This can be useful for hiding from the BA
/// whether or not the user is performing a bucket migration.
#[derive(Debug)]
pub struct Lox {
    pub P: RistrettoPoint,
    pub Q: RistrettoPoint,
    pub id: Scalar,
    pub bucket: Scalar,
    pub trust_level: Scalar,
    pub level_since: Scalar,
    pub invites_remaining: Scalar,
    pub invites_issued: Scalar,
    pub P_noopmigration: RistrettoPoint,
    pub Q_noopmigration: RistrettoPoint,
}