server.hpp 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553
  1. #ifndef __PRSONA_SERVER_HPP
  2. #define __PRSONA_SERVER_HPP
  3. #include <vector>
  4. #include <mutex>
  5. #include "BGN.hpp"
  6. #include "Curvepoint.hpp"
  7. #include "Bipoint.hpp"
  8. #include "base.hpp"
  9. #include "EGCiphertext.hpp"
  10. #include "proof.hpp"
  11. class PrsonaServer : public PrsonaBase {
  12. public:
  13. // CONSTRUCTORS
  14. PrsonaServer(
  15. size_t numServers);
  16. PrsonaServer(
  17. size_t numServers,
  18. const BGN& other_bgn);
  19. PrsonaServer(
  20. const PrsonaServer& other);
  21. PrsonaServer(
  22. PrsonaServer&& other);
  23. PrsonaServer &operator=(
  24. const PrsonaServer& other);
  25. PrsonaServer &operator=(
  26. PrsonaServer&& other);
  27. ~PrsonaServer();
  28. // BASIC PUBLIC SYSTEM INFO GETTERS
  29. BGNPublicKey get_bgn_public_key() const;
  30. size_t get_num_clients() const;
  31. size_t get_num_servers() const;
  32. Twistpoint get_fresh_generator(
  33. std::vector<Proof>& pi
  34. ) const;
  35. // FRESH GENERATOR CALCULATION
  36. Twistpoint add_curr_seed_to_generator(
  37. std::vector<Proof>& pi,
  38. const Twistpoint& currGenerator
  39. ) const;
  40. Twistpoint add_next_seed_to_generator(
  41. std::vector<Proof>& pi,
  42. const Twistpoint& currGenerator
  43. ) const;
  44. Twistpoint add_rand_seed_to_generator(
  45. std::vector<Proof>& pi,
  46. const Twistpoint& currGenerator
  47. ) const;
  48. // ENCRYPTED DATA GETTERS
  49. std::vector<TwistBipoint> get_current_votes_by(
  50. Proof& pi,
  51. const Twistpoint& shortTermPublicKey
  52. ) const;
  53. std::vector<std::vector<TwistBipoint>> get_all_current_votes(
  54. Proof& pi
  55. ) const;
  56. EGCiphertext get_current_user_encrypted_tally(
  57. Proof& pi,
  58. const Twistpoint& shortTermPublicKey
  59. ) const;
  60. CurveBipoint get_current_server_encrypted_tally(
  61. Proof& pi,
  62. const Twistpoint& shortTermPublicKey
  63. ) const;
  64. std::vector<Twistpoint> get_current_pseudonyms(
  65. Proof& pi
  66. ) const;
  67. std::vector<Twistpoint> get_current_pseudonyms() const;
  68. // PROOF COMMITMENT GETTERS
  69. Proof get_vote_row_commitment(
  70. const Twistpoint& request
  71. ) const;
  72. Proof get_vote_matrix_commitment() const;
  73. Proof get_user_tally_commitment(
  74. const Twistpoint& request
  75. ) const;
  76. Proof get_server_tally_commitment(
  77. const Twistpoint& request
  78. ) const;
  79. Proof get_pseudonyms_commitment() const;
  80. void print_current_commitments() const;
  81. // CLIENT INTERACTIONS
  82. void add_new_client(
  83. std::vector<Proof>& proofOfValidAddition,
  84. const Proof& proofOfValidKey,
  85. const Twistpoint& shortTermPublicKey);
  86. bool receive_vote(
  87. const std::vector<Proof>& pi,
  88. const std::vector<TwistBipoint>& newVotes,
  89. const Twistpoint& shortTermPublicKey);
  90. void print_scores(
  91. const std::vector<CurveBipoint>& scores);
  92. // CONSTRUCTOR HELPERS
  93. const BGN& get_bgn_details() const;
  94. bool initialize_fresh_generator(
  95. const std::vector<Proof>& pi,
  96. const Twistpoint& firstGenerator);
  97. bool set_EG_blind_generator(
  98. const std::vector<Proof>& pi,
  99. const Twistpoint& currGenerator);
  100. // EPOCH ROUNDS
  101. void build_up_midway_pseudonyms(
  102. std::vector<std::vector<std::vector<Proof>>>& pi,
  103. std::vector<std::vector<std::vector<Twistpoint>>>& permutationCommits,
  104. std::vector<std::vector<std::vector<Twistpoint>>>& freshPseudonymCommits,
  105. std::vector<std::vector<std::vector<Twistpoint>>>& freshPseudonymSeedCommits,
  106. std::vector<std::vector<std::vector<CurveBipoint>>>& serverTallyCommits,
  107. std::vector<std::vector<std::vector<std::vector<TwistBipoint>>>>& partwayVoteMatrixCommits,
  108. std::vector<std::vector<std::vector<std::vector<TwistBipoint>>>>& finalVoteMatrixCommits,
  109. Twistpoint& nextGenerator);
  110. void break_down_midway_pseudonyms(
  111. const std::vector<Proof>& generatorProof,
  112. std::vector<std::vector<std::vector<Proof>>>& pi,
  113. std::vector<std::vector<std::vector<Twistpoint>>>& permutationCommits,
  114. std::vector<std::vector<std::vector<Twistpoint>>>& freshPseudonymCommits,
  115. std::vector<std::vector<std::vector<Twistpoint>>>& freshPseudonymSeedCommits,
  116. std::vector<std::vector<std::vector<CurveBipoint>>>& serverTallyCommits,
  117. std::vector<std::vector<std::vector<std::vector<TwistBipoint>>>>& partwayVoteMatrixCommits,
  118. std::vector<std::vector<std::vector<std::vector<TwistBipoint>>>>& finalVoteMatrixCommits,
  119. std::vector<std::vector<std::vector<Twistpoint>>>& userTallyMaskCommits,
  120. std::vector<std::vector<std::vector<Twistpoint>>>& userTallyMessageCommits,
  121. std::vector<std::vector<std::vector<Twistpoint>>>& userTallySeedCommits,
  122. const Twistpoint& nextGenerator);
  123. bool accept_epoch_updates(
  124. const std::vector<std::vector<Proof>>& pi,
  125. const std::vector<std::vector<Twistpoint>>& permutationCommits,
  126. const std::vector<std::vector<Twistpoint>>& freshPseudonymCommits,
  127. const std::vector<std::vector<Twistpoint>>& freshPseudonymSeedCommits,
  128. const std::vector<std::vector<CurveBipoint>>& serverTallyCommits,
  129. const std::vector<std::vector<std::vector<TwistBipoint>>>& partwayVoteMatrixCommits,
  130. const std::vector<std::vector<std::vector<TwistBipoint>>>& finalVoteMatrixCommits,
  131. const std::vector<std::vector<Twistpoint>>& userTallyMaskCommits,
  132. const std::vector<std::vector<Twistpoint>>& userTallyMessageCommits,
  133. const std::vector<std::vector<Twistpoint>>& userTallySeedCommits,
  134. const Twistpoint& nextGenerator,
  135. bool doUserTallies);
  136. // DATA MAINTENANCE
  137. void export_new_user_update(
  138. std::vector<CurveBipoint>& otherPreviousVoteTallies,
  139. std::vector<Twistpoint>& otherCurrentPseudonyms,
  140. std::vector<EGCiphertext>& otherCurrentUserEncryptedTallies,
  141. std::vector<std::vector<TwistBipoint>>& otherVoteMatrix
  142. ) const;
  143. bool import_new_user_update(
  144. const std::vector<Proof>& pi,
  145. const std::vector<CurveBipoint>& otherPreviousVoteTallies,
  146. const std::vector<Twistpoint>& otherCurrentPseudonyms,
  147. const std::vector<EGCiphertext>& otherCurrentUserEncryptedTallies,
  148. const std::vector<std::vector<TwistBipoint>>& otherVoteMatrix);
  149. // SCORE TALLYING
  150. std::vector<Scalar> tally_scores();
  151. Scalar get_max_possible_score();
  152. void receive_tallied_scores(
  153. const std::vector<EGCiphertext>& userTallyScores,
  154. const std::vector<CurveBipoint>& serverTallyScores);
  155. void encrypt(
  156. CurveBipoint& element,
  157. const Scalar& value);
  158. // MULTI-THREADING
  159. friend void generate_permutation_commitment_r(
  160. const void *a,
  161. void *b,
  162. const void *c,
  163. void *d);
  164. friend void generate_pseudonym_commitment_r(
  165. const void *a,
  166. void *b,
  167. const void *c,
  168. const void *d,
  169. void *e,
  170. void *f);
  171. friend void generate_server_tally_commitment_r(
  172. const void *a,
  173. void *b,
  174. const void *c,
  175. void *d);
  176. friend void generate_matrix_commitment_r(
  177. const void *a,
  178. void *b,
  179. void *c,
  180. void *d,
  181. const void *e,
  182. const void *f,
  183. void *g,
  184. void *h);
  185. friend void generate_user_tally_commitment_r(
  186. const void *a,
  187. const void *b,
  188. const void *c,
  189. const void *d,
  190. const void *e,
  191. void *f,
  192. void *g,
  193. void *h,
  194. void *i,
  195. void *j,
  196. void *k);
  197. friend void generate_permutation_proof_r(
  198. const void *a,
  199. void *b,
  200. const void *c,
  201. const void *d,
  202. const void *e);
  203. friend void generate_pseudonym_proof_r(
  204. const void *a,
  205. void *b,
  206. const void *c,
  207. const void *d,
  208. const void *e,
  209. const void *f,
  210. const void *g,
  211. const void *h,
  212. const void *i,
  213. const void *j);
  214. friend void generate_server_tally_proof_r(
  215. const void *a,
  216. void *b,
  217. const void *c,
  218. const void *d,
  219. const void *e,
  220. const void *f,
  221. const void *g,
  222. const void *h,
  223. const void *i,
  224. const void *j);
  225. friend void generate_first_half_matrix_proof_r(
  226. const void *a,
  227. void *b,
  228. const void *c,
  229. const void *d,
  230. const void *e,
  231. const void *f,
  232. const void *g,
  233. const void *h);
  234. friend void generate_second_half_matrix_proof_r(
  235. const void *a,
  236. void *b,
  237. const void *c,
  238. const void *d,
  239. const void *e,
  240. const void *f,
  241. const void *g,
  242. const void *h);
  243. friend void generate_user_tally_proof_r(
  244. const void *a,
  245. void *b,
  246. const void *c,
  247. const void *d,
  248. const void *e,
  249. const void *f,
  250. const void *g,
  251. const void *h,
  252. const void *i,
  253. const void *j,
  254. const void *k,
  255. const void *l,
  256. const void *m,
  257. const void *n);
  258. friend void generate_tensor_r(
  259. const void *a,
  260. void *b,
  261. const void *c,
  262. const void *d,
  263. const void *e,
  264. const void *f,
  265. const void *g,
  266. const void *h,
  267. const void *i,
  268. const void *j);
  269. friend void verify_permutation_r(
  270. const void *a,
  271. void *b,
  272. const void *c,
  273. const void *d);
  274. friend void verify_pseudonym_r(
  275. const void *a,
  276. void *b,
  277. const void *c,
  278. const void *d,
  279. const void *e,
  280. const void *f,
  281. const void *g);
  282. friend void verify_server_tally_r(
  283. const void *a,
  284. void *b,
  285. const void *c,
  286. const void *d,
  287. const void *e,
  288. const void *f,
  289. const void *g,
  290. const void *h);
  291. friend void verify_first_half_matrix_r(
  292. const void *a,
  293. void *b,
  294. const void *c,
  295. const void *d,
  296. const void *e,
  297. const void *f,
  298. const void *g);
  299. friend void verify_second_half_matrix_r(
  300. const void *a,
  301. void *b,
  302. const void *c,
  303. const void *d,
  304. const void *e,
  305. const void *f,
  306. const void *g);
  307. friend void verify_user_tally_r(
  308. const void *a,
  309. void *b,
  310. const void *c,
  311. const void *d,
  312. const void *e,
  313. const void *f,
  314. const void *g,
  315. const void *h,
  316. const void *i,
  317. const void *j);
  318. friend void verify_tensor_r(
  319. const void *a,
  320. void *b,
  321. const void *c,
  322. const void *d,
  323. const void *e,
  324. const void *f,
  325. const void *g,
  326. const void *h);
  327. private:
  328. // constants for servers
  329. size_t numServers;
  330. // Identical between all servers (but collaboratively constructed)
  331. std::mutex *decryptMtx;
  332. BGN bgnSystem;
  333. // Private; different for each server
  334. Scalar currentSeed;
  335. Scalar nextSeed;
  336. // The actual data, which is collaboratively updated by all servers
  337. std::vector<Proof> currentGeneratorProof;
  338. Twistpoint currentFreshGenerator;
  339. std::vector<CurveBipoint> previousVoteTallies;
  340. std::vector<Twistpoint> currentPseudonyms;
  341. std::vector<EGCiphertext> currentUserEncryptedTallies;
  342. std::vector<std::vector<TwistBipoint>> voteMatrix;
  343. void remove();
  344. void copy(const PrsonaServer& other);
  345. /**
  346. * NOTE: voteMatrix structure:
  347. * Each element represents a vote by <rowID> applied to <colID>.
  348. * The outer vector is a vector of rows and the inner vector is
  349. * a vector of encrypted votes.
  350. */
  351. // An imaginary class; it's just used right now to coordinate servers
  352. // in memory instead of via network action.
  353. friend class PrsonaServerEntity;
  354. // EPOCH HELPERS
  355. std::vector<std::vector<Proof>> epoch_calculations(
  356. std::vector<std::vector<Twistpoint>>& permutationCommits,
  357. std::vector<std::vector<Twistpoint>>& freshPseudonymCommits,
  358. std::vector<std::vector<Twistpoint>>& freshPseudonymSeedCommits,
  359. std::vector<std::vector<CurveBipoint>>& serverTallyCommits,
  360. std::vector<std::vector<std::vector<TwistBipoint>>>& partwayVoteMatrixCommits,
  361. std::vector<std::vector<std::vector<TwistBipoint>>>& finalVoteMatrixCommits,
  362. std::vector<std::vector<Twistpoint>>& userTallyMaskCommits,
  363. std::vector<std::vector<Twistpoint>>& userTallyMessageCommits,
  364. std::vector<std::vector<Twistpoint>>& userTallySeedCommits,
  365. const Scalar& power,
  366. const Twistpoint& nextGenerator,
  367. bool doUserTallies);
  368. std::vector<std::vector<Scalar>> generate_permutation_matrix(
  369. const Scalar& reorderSeed
  370. ) const;
  371. std::vector<std::vector<Twistpoint>> generate_commitment_matrix(
  372. const std::vector<std::vector<Scalar>>& permutations,
  373. std::vector<std::vector<Scalar>>& seeds
  374. ) const;
  375. std::vector<std::vector<Twistpoint>> generate_pseudonym_matrix(
  376. const std::vector<std::vector<Scalar>>& permutations,
  377. const Scalar& power,
  378. std::vector<std::vector<Scalar>>& seeds,
  379. std::vector<std::vector<Twistpoint>>& seedCommits
  380. ) const;
  381. std::vector<std::vector<CurveBipoint>> generate_server_tally_matrix(
  382. const std::vector<std::vector<Scalar>>& permutations,
  383. std::vector<std::vector<Scalar>>& seeds
  384. ) const;
  385. std::vector<std::vector<std::vector<TwistBipoint>>> generate_vote_tensor(
  386. const std::vector<std::vector<Scalar>>& permutations,
  387. const std::vector<std::vector<TwistBipoint>>& currVoteMatrix,
  388. std::vector<std::vector<std::vector<Scalar>>>& seeds,
  389. bool inverted
  390. ) const;
  391. std::vector<std::vector<TwistBipoint>> calculate_next_vote_matrix(
  392. const std::vector<std::vector<std::vector<TwistBipoint>>>& voteTensor
  393. ) const;
  394. void generate_vote_tensor_proofs(
  395. std::vector<std::vector<Proof>>& pi,
  396. const std::vector<std::vector<Scalar>>& permutations,
  397. const std::vector<std::vector<Scalar>>& permutationSeeds,
  398. const std::vector<std::vector<std::vector<Scalar>>>& matrixSeeds,
  399. const std::vector<std::vector<TwistBipoint>>& currMatrix,
  400. const std::vector<std::vector<Twistpoint>>& permutationCommits,
  401. const std::vector<std::vector<std::vector<TwistBipoint>>>& matrixCommits,
  402. bool inverted
  403. ) const;
  404. bool verify_vote_tensor_proofs(
  405. const std::vector<std::vector<Proof>>& pi,
  406. size_t start_offset,
  407. const std::vector<std::vector<TwistBipoint>>& currMatrix,
  408. const std::vector<std::vector<Twistpoint>>& permutationCommits,
  409. const std::vector<std::vector<std::vector<TwistBipoint>>>& matrixCommits,
  410. bool inverted
  411. ) const;
  412. void generate_user_tally_matrix(
  413. const std::vector<std::vector<Scalar>>& permutations,
  414. const Scalar& power,
  415. const Twistpoint& nextGenerator,
  416. const std::vector<Twistpoint>& currPseudonyms,
  417. std::vector<Twistpoint>& masks,
  418. std::vector<std::vector<Twistpoint>>& maskCommits,
  419. std::vector<Twistpoint>& messages,
  420. std::vector<std::vector<Twistpoint>>& messageCommits,
  421. std::vector<std::vector<Scalar>>& userTallySeeds,
  422. std::vector<std::vector<Twistpoint>>& userTallySeedCommits
  423. ) const;
  424. template <typename T>
  425. std::vector<std::vector<T>> generate_reordered_plus_power_matrix(
  426. const std::vector<std::vector<Scalar>>& permutations,
  427. const Scalar& power,
  428. const std::vector<T>& oldValues,
  429. std::vector<std::vector<Scalar>>& seeds,
  430. std::vector<std::vector<Twistpoint>>& seedCommits,
  431. const T& h
  432. ) const;
  433. template <typename T>
  434. std::vector<std::vector<T>> generate_reordered_matrix(
  435. const std::vector<std::vector<Scalar>>& permutations,
  436. const std::vector<T>& oldValues,
  437. std::vector<std::vector<Scalar>>& seeds,
  438. const T& h,
  439. bool cancelOut
  440. ) const;
  441. template <typename T>
  442. std::vector<std::vector<T>> transpose_matrix(
  443. const std::vector<std::vector<T>>& input
  444. ) const;
  445. std::vector<size_t> sort_data(
  446. const std::vector<Twistpoint>& inputs
  447. ) const;
  448. // A helper class for "ordering" data and for binary search
  449. struct SortingType {
  450. Twistpoint pseudonym;
  451. size_t index;
  452. bool operator<( const SortingType& rhs ) const
  453. { return pseudonym < rhs.pseudonym; }
  454. };
  455. template <typename T>
  456. T encrypt(
  457. const T& g,
  458. const T& h,
  459. const Scalar& plaintext,
  460. const Scalar& lambda
  461. ) const;
  462. bool update_data(
  463. const std::vector<std::vector<Twistpoint>>& freshPseudonymCommits,
  464. const std::vector<std::vector<CurveBipoint>>& serverTallyCommits,
  465. const std::vector<std::vector<std::vector<TwistBipoint>>>& voteMatrixCommits,
  466. const std::vector<std::vector<Twistpoint>>& userTallyMaskCommits,
  467. const std::vector<std::vector<Twistpoint>>& userTallyMessageCommits);
  468. bool pseudonyms_sorted(
  469. const std::vector<Twistpoint> newPseudonyms
  470. ) const;
  471. // DATA SAFEKEEPING
  472. std::vector<size_t> order_data();
  473. // BINARY SEARCH
  474. size_t binary_search(
  475. const Twistpoint& index
  476. ) const;
  477. // VALID VOTE PROOFS
  478. bool verify_vote_proof(
  479. const std::vector<Proof>& pi,
  480. const std::vector<TwistBipoint>& oldVotes,
  481. const std::vector<TwistBipoint>& newVotes,
  482. const Twistpoint& shortTermPublicKey
  483. ) const;
  484. };
  485. #endif