#include #include #include #include "ecgadget.hpp" #include "scalarmul.hpp" using namespace libsnark; using namespace std; int main() { // Initialize the curve parameters default_r1cs_gg_ppzksnark_pp::init_public_params(); init_curveparams(); typedef libff::Fr FieldT; // Create protoboard libff::start_profiling(); cout << "Keypair" << endl; protoboard pb; pb_variable outx, outy; pb_variable s; // The constant base point P const FieldT Px = FieldT(0); const FieldT Py = FieldT("11977228949870389393715360594190192321220966033310912010610740966317727761886"); // Allocate variables outx.allocate(pb, "outx"); outy.allocate(pb, "outy"); s.allocate(pb, "s"); // This sets up the protoboard variables so that the first n of them // represent the public input and the rest is private input pb.set_input_sizes(2); // Initialize the gadget ec_constant_scalarmul_gadget sm(pb, outx, outy, s, Px, Py); sm.generate_r1cs_constraints(); const r1cs_constraint_system constraint_system = pb.get_constraint_system(); const r1cs_gg_ppzksnark_keypair keypair = r1cs_gg_ppzksnark_generator(constraint_system); // Add witness values cout << "Prover" << endl; pb.val(s) = FieldT::random_element(); cout << "Computing " << pb.val(s) << "*G" << endl; sm.generate_r1cs_witness(); const r1cs_gg_ppzksnark_proof proof = r1cs_gg_ppzksnark_prover(keypair.pk, pb.primary_input(), pb.auxiliary_input()); cout << "Verifier" << endl; bool verified = r1cs_gg_ppzksnark_verifier_strong_IC(keypair.vk, pb.primary_input(), proof); cout << "Number of R1CS constraints: " << constraint_system.num_constraints() << endl; cout << "Primary (public) input: " << pb.primary_input() << endl; cout << "Auxiliary (private) input length: " << pb.auxiliary_input().size() << endl; // cout << "Auxiliary (private) input: " << pb.auxiliary_input() << endl; cout << "Verification status: " << verified << endl; ofstream pkfile("pk_scalarmul"); pkfile << keypair.pk; pkfile.close(); ofstream vkfile("vk_scalarmul"); vkfile << keypair.vk; vkfile.close(); ofstream pffile("proof_scalarmul"); pffile << proof; pffile.close(); cout << pb.val(s) << "*G" << " = (" << pb.val(outx) << ", " << pb.val(outy) << ")" << endl; return 0; }