Russell O'Connor
5d87e80c69
shallue_van_de_woestijne rewrite
...
The previous implementation returns an off-curve point for the input t=0.
This rewrite addresses that issue by implicity returning the on-curve point
(d, sqrt(1 + b)), which is the point that the paper Indifferentiable Hashing
to Barreto–Naehrig Curves suggests returning in this case.
Note: At the moment it is cryptographically impossible for the input t to be 0.
2024-01-24 17:50:48 -05:00
roconnor-blockstream
c33d2241cb
Typo in shallue_van_de_woestijne description
2023-11-17 14:58:35 -05:00
Jonas Nick
7a07f3d33f
Merge commits '3bab71cf 4258c54f 566faa17 9ce9984f 04bf3f67 5be353d6 2e035af2 5b0444a3 a6f4bcf6 5ec1333d f6bef03c 1f33bb2b 1c895367 6b7e5b71 596b336f 4b84f4bf 024a4094 222ecaf6 4b0f711d 3c818388 f30c7486 1cf15ebd 24c768ae 341cc197 c63ec88e 54d34b6c 073d98a0 9eb6934f ab5a9171 fb3a8063 006ddc1f 3353d3c7 b54a0672 7d4f86d2 e8295d07 3e3d125b acf5c55a ' into temp-merge-1312
2023-07-24 20:15:07 +00:00
Tim Ruffing
e444d24bca
Fix include guards: No _ prefix/suffix but _H suffix (as in upstream)
2023-04-21 12:02:28 +02:00
Tim Ruffing
4eca406f4c
Use relative #include paths in library (as in upstream)
2023-04-21 11:50:24 +02:00
Andrew Poelstra
6162d577fe
generator: cleanups in Pedersen/generator code
...
Silence a compiler warning about an unitialized use of a scalar in case
the user tries to provide a 0-length list of commitments.
Also ensures that commitments have normalized field elements when they
are loaded into ges.
2023-02-08 03:09:11 -08:00
Andrew Poelstra
87373f5145
MOVE ONLY: move Pedersen commitment stuff to generator module from rangeproof module
...
You can verify this commit with `git diff --color-moved=zebra`
2023-01-23 10:18:21 -08:00
Andrew Poelstra
347f96d94a
fix include paths in all the -zkp modules
...
This is causing out-of-tree build failures in Elements.
2022-08-05 14:56:10 +00:00
Andrew Poelstra
068f03c35b
generator: remove CHECK abort calls exposed by public API
2020-07-24 14:59:36 +02:00
Andrew Poelstra
fca4c3b62f
generator: verify correctness of point when parsing
2020-07-24 14:50:48 +02:00
datavetaren
c87618157e
Minor bugfix. Wrong length due to NUL character.
2020-07-24 14:50:48 +02:00
Andrew Poelstra
126493ef01
generator: remove unnecessary ARG_CHECK from generate()
2020-07-24 14:49:33 +02:00
Andrew Poelstra
94425d4a67
rangeproof: several API changes
...
* add summing function for blinded generators
* drop `excess` and `gen` from `verify_tally`
* add extra_commit to rangeproof sign and verify
2020-07-24 14:49:33 +02:00
Pieter Wuille
360e218043
Constant-time generator module
2020-07-24 14:49:33 +02:00
