e581abad00
Port the experimental Iceberg module from the benchmark-iceberg tree
(github.com/furszy/benchmark-iceberg, sources/secp256k1-kmp/native/
secp256k1) into this repo.
Iceberg is a threshold scheme that lets a group of parties stand in
for a single MuSig2 (BIP 327) participant: the group produces one
ordinary MuSig2 public nonce and one ordinary MuSig2 partial
signature, so cosigners cannot tell a group is involved and need no
changes. Nonces are derived from a caller-chosen per-session label
(sid32) rather than stored, so no signer holds a secret nonce between
rounds; labels are public but must never be reused. A quorum of 2t-1
members (of whom up to t-1 may be corrupt) is needed in each round,
so the threshold is at most half the group rounded up; combined with
the scheme's other constraints the smallest usable group is 2-of-4.
See doc/iceberg.md and the module header for the full usage notes.
Module layout (src/modules/iceberg/, layered bottom-up, each layer
may only use the ones above it -- that ordering is also the
constant-time story):
- scalar_poly.{h,_impl.h}: secret-carrying polynomial arithmetic,
keeping secrets away from inversions (documented in the header).
- rss.{h,_impl.h}: replicated secret sharing evaluation.
- vpss.{h,_impl.h}: verifiable public shares; variable-time by
design, sees only participant indices and published points.
- keygen_impl.h: distributed key generation producing one share per
member.
- session_impl.h: nonce_gen/nonce_agg and partial_sign/
partial_sig_agg producing plain MuSig2 objects.
- tests_impl.h: 28 tests including the shipped vectors.h vector
suite and dealer known-answer tests.
- bench_impl.h: benchmark definitions (wired in a follow-up commit).
Public headers: include/secp256k1_iceberg.h (installed) and
include/secp256k1_iceberg_dealer.h (in-tree only: a trusted dealer is
not part of the shipped API, but tests, benchmarks and the example
need to deal shares).
Content adaptations relative to the source tree (the only changes to
the ported code): three secp256k1_musig_nonce_process call sites in
tests_impl.h gained a NULL adaptor argument, because this repo's
musig is the zkp variant whose public nonce_process takes an optional
adaptor point. All musig internals the module uses (ge_parse_ext,
ge_serialize_ext, keyaggcoef, aggnonce_load, pubnonce_save,
partial_sig_save, nonce_process_internal) are identical in both
trees, as are all core headers the module touches; nothing else
needed adaptation.
Build wiring mirrors the chilldkg module:
- configure.ac: --enable-module-iceberg (default no, experimental
gate), hard dependency on the musig module with a configure error
if musig is explicitly disabled (musig itself pulls in schnorrsig),
AM_CONDITIONAL(ENABLE_MODULE_ICEBERG), summary line.
- Makefile.am: include src/modules/iceberg/Makefile.am.include under
the conditional.
- src/secp256k1.c: guarded include of modules/iceberg/main_impl.h
after the chilldkg block (musig is included earlier, so its
internals are in scope).
- src/tests.c: module test registration via MAKE_TEST_MODULE(iceberg).
- CMakeLists.txt / src/CMakeLists.txt: SECP256K1_ENABLE_MODULE_ICEBERG
option (OFF) with a dependency check on SECP256K1_ENABLE_MODULE_MUSIG
(placed before the musig block so the force-enable takes effect),
ENABLE_MODULE_ICEBERG=1 compile definition, public header export,
summary line.
Verified: ./configure --enable-experimental --enable-module-iceberg
&& make check passes; ./tests --target=iceberg runs the full module
suite (28/28); CMake build + ctest pass; the musig dependency error
fires correctly in both build systems.
385 lines
12 KiB
Makefile
385 lines
12 KiB
Makefile
ACLOCAL_AMFLAGS = -I autotools-aux/m4
|
|
|
|
# AM_CFLAGS will be automatically prepended to CFLAGS by Automake when compiling some foo
|
|
# which does not have an explicit foo_CFLAGS variable set.
|
|
AM_CFLAGS = $(SECP_CFLAGS)
|
|
|
|
lib_LTLIBRARIES = libsecp256k1.la
|
|
include_HEADERS = include/secp256k1.h
|
|
include_HEADERS += include/secp256k1_preallocated.h
|
|
noinst_HEADERS =
|
|
noinst_HEADERS += src/scalar.h
|
|
noinst_HEADERS += src/scalar_4x64.h
|
|
noinst_HEADERS += src/scalar_8x32.h
|
|
noinst_HEADERS += src/scalar_low.h
|
|
noinst_HEADERS += src/scalar_impl.h
|
|
noinst_HEADERS += src/scalar_4x64_impl.h
|
|
noinst_HEADERS += src/scalar_8x32_impl.h
|
|
noinst_HEADERS += src/scalar_low_impl.h
|
|
noinst_HEADERS += src/group.h
|
|
noinst_HEADERS += src/group_impl.h
|
|
noinst_HEADERS += src/eccommit.h
|
|
noinst_HEADERS += src/eccommit_impl.h
|
|
noinst_HEADERS += src/ecdsa.h
|
|
noinst_HEADERS += src/ecdsa_impl.h
|
|
noinst_HEADERS += src/eckey.h
|
|
noinst_HEADERS += src/eckey_impl.h
|
|
noinst_HEADERS += src/ecmult.h
|
|
noinst_HEADERS += src/ecmult_impl.h
|
|
noinst_HEADERS += src/ecmult_compute_table.h
|
|
noinst_HEADERS += src/ecmult_compute_table_impl.h
|
|
noinst_HEADERS += src/ecmult_const.h
|
|
noinst_HEADERS += src/ecmult_const_impl.h
|
|
noinst_HEADERS += src/ecmult_gen.h
|
|
noinst_HEADERS += src/ecmult_gen_impl.h
|
|
noinst_HEADERS += src/ecmult_gen_compute_table.h
|
|
noinst_HEADERS += src/ecmult_gen_compute_table_impl.h
|
|
noinst_HEADERS += src/field_10x26.h
|
|
noinst_HEADERS += src/field_10x26_impl.h
|
|
noinst_HEADERS += src/field_5x52.h
|
|
noinst_HEADERS += src/field_5x52_impl.h
|
|
noinst_HEADERS += src/field_5x52_int128_impl.h
|
|
noinst_HEADERS += src/modinv32.h
|
|
noinst_HEADERS += src/modinv32_impl.h
|
|
noinst_HEADERS += src/modinv64.h
|
|
noinst_HEADERS += src/modinv64_impl.h
|
|
noinst_HEADERS += src/precomputed_ecmult.h
|
|
noinst_HEADERS += src/precomputed_ecmult_gen.h
|
|
noinst_HEADERS += src/assumptions.h
|
|
noinst_HEADERS += src/checkmem.h
|
|
noinst_HEADERS += src/tests_common.h
|
|
noinst_HEADERS += src/testutil.h
|
|
noinst_HEADERS += src/unit_test.h
|
|
noinst_HEADERS += src/unit_test.c
|
|
noinst_HEADERS += src/util.h
|
|
noinst_HEADERS += src/util_local_visibility.h
|
|
noinst_HEADERS += src/int128.h
|
|
noinst_HEADERS += src/int128_impl.h
|
|
noinst_HEADERS += src/int128_native.h
|
|
noinst_HEADERS += src/int128_native_impl.h
|
|
noinst_HEADERS += src/int128_struct.h
|
|
noinst_HEADERS += src/int128_struct_impl.h
|
|
noinst_HEADERS += src/scratch.h
|
|
noinst_HEADERS += src/scratch_impl.h
|
|
noinst_HEADERS += src/selftest.h
|
|
noinst_HEADERS += src/testrand.h
|
|
noinst_HEADERS += src/testrand_impl.h
|
|
noinst_HEADERS += src/hash.h
|
|
noinst_HEADERS += src/hash_impl.h
|
|
noinst_HEADERS += src/field.h
|
|
noinst_HEADERS += src/field_impl.h
|
|
noinst_HEADERS += src/bench.h
|
|
noinst_HEADERS += src/wycheproof/ecdsa_secp256k1_sha256_bitcoin_test.h
|
|
noinst_HEADERS += src/hsort.h
|
|
noinst_HEADERS += src/hsort_impl.h
|
|
noinst_HEADERS += contrib/lax_der_parsing.h
|
|
noinst_HEADERS += contrib/lax_der_parsing.c
|
|
noinst_HEADERS += contrib/lax_der_privatekey_parsing.h
|
|
noinst_HEADERS += contrib/lax_der_privatekey_parsing.c
|
|
noinst_HEADERS += examples/examples_util.h
|
|
|
|
PRECOMPUTED_LIB = libsecp256k1_precomputed.la
|
|
noinst_LTLIBRARIES = $(PRECOMPUTED_LIB)
|
|
libsecp256k1_precomputed_la_SOURCES = src/precomputed_ecmult.c src/precomputed_ecmult_gen.c
|
|
# We need `-I$(top_srcdir)/src` in VPATH builds if libsecp256k1_precomputed_la_SOURCES have been recreated in the build tree.
|
|
# This helps users and packagers who insist on recreating the precomputed files (e.g., Gentoo).
|
|
libsecp256k1_precomputed_la_CPPFLAGS = -I$(top_srcdir)/src $(SECP_CONFIG_DEFINES)
|
|
|
|
if USE_EXTERNAL_ASM
|
|
COMMON_LIB = libsecp256k1_common.la
|
|
else
|
|
COMMON_LIB =
|
|
endif
|
|
noinst_LTLIBRARIES += $(COMMON_LIB)
|
|
|
|
pkgconfigdir = $(libdir)/pkgconfig
|
|
pkgconfig_DATA = libsecp256k1.pc
|
|
|
|
if USE_EXTERNAL_ASM
|
|
if USE_ASM_ARM
|
|
libsecp256k1_common_la_SOURCES = src/asm/field_10x26_arm.s
|
|
endif
|
|
endif
|
|
|
|
libsecp256k1_la_SOURCES = src/secp256k1.c
|
|
libsecp256k1_la_CPPFLAGS = $(SECP_CONFIG_DEFINES)
|
|
libsecp256k1_la_LIBADD = $(COMMON_LIB) $(PRECOMPUTED_LIB)
|
|
libsecp256k1_la_LDFLAGS = -no-undefined -version-info $(LIB_VERSION_CURRENT):$(LIB_VERSION_REVISION):$(LIB_VERSION_AGE)
|
|
|
|
noinst_PROGRAMS =
|
|
if USE_BENCHMARK
|
|
noinst_PROGRAMS += bench bench_internal bench_ecmult
|
|
bench_SOURCES = src/bench.c
|
|
bench_LDADD = libsecp256k1.la
|
|
bench_CPPFLAGS = $(SECP_CONFIG_DEFINES)
|
|
bench_internal_SOURCES = src/bench_internal.c
|
|
bench_internal_LDADD = $(COMMON_LIB) $(PRECOMPUTED_LIB)
|
|
bench_internal_CPPFLAGS = $(SECP_CONFIG_DEFINES)
|
|
bench_ecmult_SOURCES = src/bench_ecmult.c
|
|
bench_ecmult_LDADD = $(COMMON_LIB) $(PRECOMPUTED_LIB)
|
|
bench_ecmult_CPPFLAGS = $(SECP_CONFIG_DEFINES)
|
|
endif
|
|
|
|
TESTS =
|
|
if USE_TESTS
|
|
TESTS += noverify_tests
|
|
noinst_PROGRAMS += noverify_tests
|
|
noverify_tests_SOURCES = src/tests.c
|
|
noverify_tests_CPPFLAGS = $(SECP_CONFIG_DEFINES) $(TEST_DEFINES)
|
|
noverify_tests_LDADD = $(COMMON_LIB) $(PRECOMPUTED_LIB)
|
|
noverify_tests_LDFLAGS = -static
|
|
if !ENABLE_COVERAGE
|
|
TESTS += tests
|
|
noinst_PROGRAMS += tests
|
|
tests_SOURCES = $(noverify_tests_SOURCES)
|
|
tests_CPPFLAGS = $(noverify_tests_CPPFLAGS) -DVERIFY
|
|
tests_LDADD = $(noverify_tests_LDADD)
|
|
tests_LDFLAGS = $(noverify_tests_LDFLAGS)
|
|
endif
|
|
endif
|
|
|
|
if USE_CTIME_TESTS
|
|
noinst_PROGRAMS += ctime_tests
|
|
ctime_tests_SOURCES = src/ctime_tests.c
|
|
ctime_tests_LDADD = libsecp256k1.la
|
|
ctime_tests_CPPFLAGS = $(SECP_CONFIG_DEFINES)
|
|
endif
|
|
|
|
if USE_EXHAUSTIVE_TESTS
|
|
noinst_PROGRAMS += exhaustive_tests
|
|
exhaustive_tests_SOURCES = src/tests_exhaustive.c
|
|
exhaustive_tests_CPPFLAGS = $(SECP_CONFIG_DEFINES)
|
|
if !ENABLE_COVERAGE
|
|
exhaustive_tests_CPPFLAGS += -DVERIFY
|
|
endif
|
|
# Note: do not include $(PRECOMPUTED_LIB) in exhaustive_tests (it uses runtime-generated tables).
|
|
exhaustive_tests_LDADD = $(COMMON_LIB)
|
|
exhaustive_tests_LDFLAGS = -static
|
|
TESTS += exhaustive_tests
|
|
endif
|
|
|
|
if USE_EXAMPLES
|
|
noinst_PROGRAMS += ecdsa_example
|
|
ecdsa_example_SOURCES = examples/ecdsa.c
|
|
ecdsa_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
ecdsa_example_LDADD = libsecp256k1.la
|
|
ecdsa_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
ecdsa_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += ecdsa_example
|
|
if ENABLE_MODULE_ECDH
|
|
noinst_PROGRAMS += ecdh_example
|
|
ecdh_example_SOURCES = examples/ecdh.c
|
|
ecdh_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
ecdh_example_LDADD = libsecp256k1.la
|
|
ecdh_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
ecdh_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += ecdh_example
|
|
endif
|
|
if ENABLE_MODULE_SCHNORRSIG
|
|
noinst_PROGRAMS += schnorr_example
|
|
schnorr_example_SOURCES = examples/schnorr.c
|
|
schnorr_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
schnorr_example_LDADD = libsecp256k1.la
|
|
schnorr_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
schnorr_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += schnorr_example
|
|
endif
|
|
if ENABLE_MODULE_ELLSWIFT
|
|
noinst_PROGRAMS += ellswift_example
|
|
ellswift_example_SOURCES = examples/ellswift.c
|
|
ellswift_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
ellswift_example_LDADD = libsecp256k1.la
|
|
ellswift_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
ellswift_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += ellswift_example
|
|
endif
|
|
if ENABLE_MODULE_MUSIG
|
|
noinst_PROGRAMS += musig_example
|
|
musig_example_SOURCES = examples/musig.c
|
|
musig_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
musig_example_LDADD = libsecp256k1.la
|
|
musig_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
musig_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += musig_example
|
|
endif
|
|
if ENABLE_MODULE_FROST
|
|
noinst_PROGRAMS += frost_example
|
|
frost_example_SOURCES = examples/frost.c
|
|
frost_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
frost_example_LDADD = libsecp256k1.la
|
|
frost_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
frost_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += frost_example
|
|
endif
|
|
if ENABLE_MODULE_CHILLDKG
|
|
noinst_PROGRAMS += chilldkg_example
|
|
chilldkg_example_SOURCES = examples/chilldkg.c
|
|
chilldkg_example_CPPFLAGS = -I$(top_srcdir)/include -DSECP256K1_STATIC
|
|
chilldkg_example_LDADD = libsecp256k1.la
|
|
chilldkg_example_LDFLAGS = -static
|
|
if BUILD_WINDOWS
|
|
chilldkg_example_LDFLAGS += -lbcrypt
|
|
endif
|
|
TESTS += chilldkg_example
|
|
endif
|
|
endif
|
|
|
|
### Precomputed tables
|
|
EXTRA_PROGRAMS = precompute_ecmult precompute_ecmult_gen
|
|
CLEANFILES = $(EXTRA_PROGRAMS)
|
|
|
|
precompute_ecmult_SOURCES = src/precompute_ecmult.c
|
|
precompute_ecmult_CPPFLAGS = $(SECP_CONFIG_DEFINES) -DVERIFY
|
|
precompute_ecmult_LDADD = $(COMMON_LIB)
|
|
|
|
precompute_ecmult_gen_SOURCES = src/precompute_ecmult_gen.c
|
|
precompute_ecmult_gen_CPPFLAGS = $(SECP_CONFIG_DEFINES) -DVERIFY
|
|
precompute_ecmult_gen_LDADD = $(COMMON_LIB)
|
|
|
|
# See Automake manual, Section "Errors with distclean".
|
|
# We don't list any dependencies for the prebuilt files here because
|
|
# otherwise make's decision whether to rebuild them (even in the first
|
|
# build by a normal user) depends on mtimes, and thus is very fragile.
|
|
# This means that rebuilds of the prebuilt files always need to be
|
|
# forced by deleting them.
|
|
src/precomputed_ecmult.c:
|
|
$(MAKE) $(AM_MAKEFLAGS) precompute_ecmult$(EXEEXT)
|
|
./precompute_ecmult$(EXEEXT)
|
|
src/precomputed_ecmult_gen.c:
|
|
$(MAKE) $(AM_MAKEFLAGS) precompute_ecmult_gen$(EXEEXT)
|
|
./precompute_ecmult_gen$(EXEEXT)
|
|
|
|
PRECOMP = src/precomputed_ecmult_gen.c src/precomputed_ecmult.c
|
|
precomp: $(PRECOMP)
|
|
|
|
# Ensure the prebuilt files will be build first (only if they don't exist,
|
|
# e.g., after `make maintainer-clean`).
|
|
BUILT_SOURCES = $(PRECOMP)
|
|
|
|
.PHONY: clean-precomp
|
|
clean-precomp:
|
|
rm -f $(PRECOMP)
|
|
maintainer-clean-local: clean-precomp
|
|
|
|
### Pregenerated test vectors
|
|
### (see the comments in the previous section for detailed rationale)
|
|
TESTVECTORS = src/wycheproof/ecdsa_secp256k1_sha256_bitcoin_test.h
|
|
|
|
if ENABLE_MODULE_ECDH
|
|
TESTVECTORS += src/wycheproof/ecdh_secp256k1_test.h
|
|
endif
|
|
|
|
src/wycheproof/ecdsa_secp256k1_sha256_bitcoin_test.h:
|
|
mkdir -p $(@D)
|
|
python3 $(top_srcdir)/tools/tests_wycheproof_generate_ecdsa.py $(top_srcdir)/src/wycheproof/ecdsa_secp256k1_sha256_bitcoin_test.json > $@
|
|
|
|
src/wycheproof/ecdh_secp256k1_test.h:
|
|
mkdir -p $(@D)
|
|
python3 $(top_srcdir)/tools/tests_wycheproof_generate_ecdh.py $(top_srcdir)/src/wycheproof/ecdh_secp256k1_test.json > $@
|
|
|
|
testvectors: $(TESTVECTORS)
|
|
|
|
BUILT_SOURCES += $(TESTVECTORS)
|
|
|
|
.PHONY: clean-testvectors
|
|
clean-testvectors:
|
|
rm -f $(TESTVECTORS)
|
|
maintainer-clean-local: clean-testvectors
|
|
|
|
### Additional files to distribute
|
|
EXTRA_DIST = autogen.sh CHANGELOG.md SECURITY.md
|
|
EXTRA_DIST += doc/release-process.md doc/safegcd_implementation.md
|
|
EXTRA_DIST += doc/ellswift.md doc/musig.md
|
|
EXTRA_DIST += examples/EXAMPLES_COPYING
|
|
EXTRA_DIST += sage/gen_exhaustive_groups.sage
|
|
EXTRA_DIST += sage/gen_split_lambda_constants.sage
|
|
EXTRA_DIST += sage/group_prover.sage
|
|
EXTRA_DIST += sage/prove_group_implementations.sage
|
|
EXTRA_DIST += sage/secp256k1_params.sage
|
|
EXTRA_DIST += sage/weierstrass_prover.sage
|
|
EXTRA_DIST += src/wycheproof/WYCHEPROOF_COPYING
|
|
EXTRA_DIST += src/wycheproof/ecdsa_secp256k1_sha256_bitcoin_test.json
|
|
EXTRA_DIST += src/wycheproof/ecdh_secp256k1_test.json
|
|
EXTRA_DIST += tools/tests_wycheproof_generate_ecdsa.py
|
|
EXTRA_DIST += tools/tests_wycheproof_generate_ecdh.py
|
|
|
|
if ENABLE_MODULE_SCHNORRSIG_HALFAGG
|
|
include src/modules/schnorrsig_halfagg/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_BPPP
|
|
include src/modules/bppp/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_ECDH
|
|
include src/modules/ecdh/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_RECOVERY
|
|
include src/modules/recovery/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_GENERATOR
|
|
include src/modules/generator/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_RANGEPROOF
|
|
include src/modules/rangeproof/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_WHITELIST
|
|
include src/modules/whitelist/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_SURJECTIONPROOF
|
|
include src/modules/surjection/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_EXTRAKEYS
|
|
include src/modules/extrakeys/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_SCHNORRSIG
|
|
include src/modules/schnorrsig/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_MUSIG
|
|
include src/modules/musig/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_ELLSWIFT
|
|
include src/modules/ellswift/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_ECDSA_S2C
|
|
include src/modules/ecdsa_s2c/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_ECDSA_ADAPTOR
|
|
include src/modules/ecdsa_adaptor/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_FROST
|
|
include src/modules/frost/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_CHILLDKG
|
|
include src/modules/chilldkg/Makefile.am.include
|
|
endif
|
|
|
|
if ENABLE_MODULE_ICEBERG
|
|
include src/modules/iceberg/Makefile.am.include
|
|
endif
|