longfellow 0.1.0

data/vendor/longfellow-zk/lib/circuits/mdoc/mdoc_attribute_ids.h

@@ -0,0 +1,311 @@
+// Copyright 2026 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#ifndef PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_ATTRIBUTE_IDS_H_
+#define PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_ATTRIBUTE_IDS_H_
+
+#include <string_view>
+
+namespace proofs {
+
+struct MdocAttribute {
+  std::string_view identifier;
+  std::string_view documentspec;
+};
+
+constexpr const char* kMDLNamespace = "org.iso.18013.5.1";
+constexpr const char* kAAMVANamespace = "org.iso.18013.5.1.aamva";
+constexpr const char* kEUAVNamespace = "eu.europa.ec.av.1";
+constexpr const char* kEUDIPIDNamespace = "eu.europa.ec.eudi.pid.1";
+constexpr const char* kISO23220Namespace = "org.iso.23220.1";
+constexpr const char* kISO23220PhotoIDNamespace = "org.iso.23220.photoID.1";
+constexpr const char* kISO23220DTCNamespace = "org.iso.23220.dtc.1";
+constexpr const char* kAadhaarNamespace = "in.gov.uidai.aadhaar.1";
+
+constexpr const char* kSupportedNamespaces[] = {
+    kMDLNamespace,         kAAMVANamespace,    kEUAVNamespace,
+    kEUDIPIDNamespace,     kISO23220Namespace, kISO23220PhotoIDNamespace,
+    kISO23220DTCNamespace, kAadhaarNamespace};
+
+constexpr const char* kIDPassDocType = "com.google.wallet.idcard.1";
+constexpr const char* kMDLDocType = "org.iso.18013.5.1.mDL";
+constexpr const char* kEUAVDocType = "eu.europa.ec.av.1";
+constexpr const char* kEUDIPIDDocType = "eu.europa.ec.eudi.pid.1";
+constexpr const char* kISO23220PhotoIDDocType = "org.iso.23220.photoID.1";
+constexpr const char* kAadhaarDocType = "in.gov.uidai.aadhaar.1";
+
+// Extracted from
+// https://github.com/ISOWG10/ISO-18013/blob/main/Working%20Documents/Working%20Draft%20WG%2010_N2549_ISO-IEC%2018013-5-%20Personal%20identification%20%E2%80%94%20ISO-compliant%20driving%20licence%20%E2%80%94%20Part%205-%20Mobile%20driving%20lic.pdf
+// https://www.aamva.org/getmedia/bb4fee66-592d-4d39-813a-8fdfd910268a/MobileDLGuidelines1-5.pdf
+constexpr MdocAttribute kMdocAttributes[] = {
+    {"family_name", kMDLNamespace},
+    {"given_name", kMDLNamespace},
+    {"birth_date", kMDLNamespace},
+    {"issue_date", kMDLNamespace},
+    {"expiry_date", kMDLNamespace},
+    {"issuing_country", kMDLNamespace},
+    {"issuing_authority", kMDLNamespace},
+    {"document_number", kMDLNamespace},
+    {"portrait", kMDLNamespace},
+    {"driving_privileges", kMDLNamespace},
+    {"un_distinguishing_sign", kMDLNamespace},
+    {"administrative_number", kMDLNamespace},
+    {"sex", kMDLNamespace},
+    {"height", kMDLNamespace},
+    {"weight", kMDLNamespace},
+    {"eye_colour", kMDLNamespace},
+    {"hair_colour", kMDLNamespace},
+    {"birth_place", kMDLNamespace},
+    {"resident_address", kMDLNamespace},
+    {"portrait_capture_date", kMDLNamespace},
+    {"age_in_years", kMDLNamespace},
+    {"age_birth_year", kMDLNamespace},
+    {"age_over_10", kMDLNamespace},
+    {"age_over_11", kMDLNamespace},
+    {"age_over_12", kMDLNamespace},
+    {"age_over_13", kMDLNamespace},
+    {"age_over_14", kMDLNamespace},
+    {"age_over_15", kMDLNamespace},
+    {"age_over_16", kMDLNamespace},
+    {"age_over_17", kMDLNamespace},
+    {"age_over_18", kMDLNamespace},
+    {"age_over_19", kMDLNamespace},
+    {"age_over_20", kMDLNamespace},
+    {"age_over_21", kMDLNamespace},
+    {"age_over_23", kMDLNamespace},
+    {"age_over_25", kMDLNamespace},
+    {"age_over_50", kMDLNamespace},
+    {"age_over_55", kMDLNamespace},
+    {"age_over_60", kMDLNamespace},
+    {"age_over_65", kMDLNamespace},
+    {"age_over_70", kMDLNamespace},
+    {"age_over_75", kMDLNamespace},
+    {"issuing_jurisdiction", kMDLNamespace},
+    {"nationality", kMDLNamespace},
+    {"resident_city", kMDLNamespace},
+    {"resident_state", kMDLNamespace},
+    {"resident_postal_code", kMDLNamespace},
+    {"resident_country", kMDLNamespace},
+    {"biometric_template_face", kMDLNamespace},
+    {"biometric_template_voice", kMDLNamespace},
+    {"biometric_template_finger", kMDLNamespace},
+    {"biometric_template_iris", kMDLNamespace},
+    {"biometric_template_retina", kMDLNamespace},
+    {"biometric_template_hand_geometry", kMDLNamespace},
+    {"biometric_template_keystroke", kMDLNamespace},
+    {"biometric_template_signature_sign", kMDLNamespace},
+    {"biometric_template_lip_movement", kMDLNamespace},
+    {"biometric_template_thermal_face", kMDLNamespace},
+    {"biometric_template_thermal_hand", kMDLNamespace},
+    {"biometric_template_gait", kMDLNamespace},
+    {"biometric_template_body_odor", kMDLNamespace},
+    {"biometric_template_dna", kMDLNamespace},
+    {"biometric_template_ear", kMDLNamespace},
+    {"biometric_template_finger_geometry", kMDLNamespace},
+    {"biometric_template_palm_geometry", kMDLNamespace},
+    {"biometric_template_vein_pattern", kMDLNamespace},
+    {"biometric_template_foot_print", kMDLNamespace},
+    {"family_name_national_character", kMDLNamespace},
+    {"given_name_national_character", kMDLNamespace},
+    {"signature_usual_mark", kMDLNamespace},
+
+    {"name_suffix", kAAMVANamespace},
+    {"organ_donor", kAAMVANamespace},
+    {"veteran", kAAMVANamespace},
+    {"family_name_truncation", kAAMVANamespace},
+    {"given_name_truncation", kAAMVANamespace},
+    {"aka_family_name.v2", kAAMVANamespace},
+    {"aka_given_name.v2", kAAMVANamespace},
+    {"aka_suffix", kAAMVANamespace},
+    {"weight_range", kAAMVANamespace},
+    {"race_ethnicity", kAAMVANamespace},
+    {"sex", kAAMVANamespace},
+    {"first_name", kAAMVANamespace},
+    {"middle_names", kAAMVANamespace},
+    {"first_name_truncation", kAAMVANamespace},
+    {"middle_names_truncation", kAAMVANamespace},
+    {"EDL_credential", kAAMVANamespace},
+    {"EDL_credential.v2", kAAMVANamespace},
+    {"DHS_compliance", kAAMVANamespace},
+    {"resident_county", kAAMVANamespace},
+    {"resident_county.v2", kAAMVANamespace},
+    {"hazmat_endorsement_expiration_date", kAAMVANamespace},
+    {"CDL_indicator", kAAMVANamespace},
+    {"CDL_non_domiciled", kAAMVANamespace},
+    {"CDL_non_domiciled.v2", kAAMVANamespace},
+    {"DHS_compliance_text", kAAMVANamespace},
+    {"DHS_temporary_lawful_status", kAAMVANamespace},
+
+    {"family_name", kEUDIPIDNamespace},
+    {"given_name", kEUDIPIDNamespace},
+    {"birth_date", kEUDIPIDNamespace},
+    {"age_in_years", kEUDIPIDNamespace},
+    {"age_birth_year", kEUDIPIDNamespace},
+    {"age_equal_or_over", kEUDIPIDNamespace},
+    {"age_over_18", kEUDIPIDNamespace},
+    {"age_over_21", kEUDIPIDNamespace},
+    {"family_name_birth", kEUDIPIDNamespace},
+    {"given_name_birth", kEUDIPIDNamespace},
+    {"birth_place", kEUDIPIDNamespace},
+    {"place_of_birth", kEUDIPIDNamespace},
+    {"birth_country", kEUDIPIDNamespace},
+    {"birth_state", kEUDIPIDNamespace},
+    {"birth_city", kEUDIPIDNamespace},
+    {"address", kEUDIPIDNamespace},
+    {"resident_address", kEUDIPIDNamespace},
+    {"resident_country", kEUDIPIDNamespace},
+    {"resident_state", kEUDIPIDNamespace},
+    {"resident_city", kEUDIPIDNamespace},
+    {"resident_postal_code", kEUDIPIDNamespace},
+    {"resident_street", kEUDIPIDNamespace},
+    {"resident_house_number", kEUDIPIDNamespace},
+    {"sex", kEUDIPIDNamespace},
+    {"nationality", kEUDIPIDNamespace},
+    {"issuance_date", kEUDIPIDNamespace},
+    {"expiry_date", kEUDIPIDNamespace},
+    {"issuing_authority", kEUDIPIDNamespace},
+    {"document_number", kEUDIPIDNamespace},
+    {"personal_administrative_number", kEUDIPIDNamespace},
+    {"issuing_jurisdiction", kEUDIPIDNamespace},
+    {"issuing_country", kEUDIPIDNamespace},
+    {"portrait", kEUDIPIDNamespace},
+    {"email_address", kEUDIPIDNamespace},
+    {"mobile_phone_number", kEUDIPIDNamespace},
+
+    {"family_name_unicode", kISO23220Namespace},
+    {"given_name_unicode", kISO23220Namespace},
+    {"birth_date", kISO23220Namespace},
+    {"portrait", kISO23220Namespace},
+    {"issue_date", kISO23220Namespace},
+    {"expiry_date", kISO23220Namespace},
+    {"issuing_authority_unicode", kISO23220Namespace},
+    {"issuing_country", kISO23220Namespace},
+    {"age_in_years", kISO23220Namespace},
+    {"age_over_13", kISO23220Namespace},
+    {"age_over_16", kISO23220Namespace},
+    {"age_over_18", kISO23220Namespace},
+    {"age_over_21", kISO23220Namespace},
+    {"age_over_25", kISO23220Namespace},
+    {"age_over_60", kISO23220Namespace},
+    {"age_over_62", kISO23220Namespace},
+    {"age_over_65", kISO23220Namespace},
+    {"age_over_68", kISO23220Namespace},
+    {"age_birth_year", kISO23220Namespace},
+    {"portrait_capture_date", kISO23220Namespace},
+    {"birthplace", kISO23220Namespace},
+    {"name_at_birth", kISO23220Namespace},
+    {"resident_address_unicode", kISO23220Namespace},
+    {"resident_city_unicode", kISO23220Namespace},
+    {"resident_postal_code", kISO23220Namespace},
+    {"resident_country", kISO23220Namespace},
+    {"resident_city_latin1", kISO23220Namespace},
+    {"sex", kISO23220Namespace},
+    {"nationality", kISO23220Namespace},
+    {"document_number", kISO23220Namespace},
+    {"issuing_subdivision", kISO23220Namespace},
+    {"family_name_latin1", kISO23220Namespace},
+    {"given_name_latin1", kISO23220Namespace},
+
+    {"person_id", kISO23220PhotoIDNamespace},
+    {"birth_country", kISO23220PhotoIDNamespace},
+    {"birth_state", kISO23220PhotoIDNamespace},
+    {"birth_city", kISO23220PhotoIDNamespace},
+    {"administrative_number", kISO23220PhotoIDNamespace},
+    {"resident_street", kISO23220PhotoIDNamespace},
+    {"resident_house_number", kISO23220PhotoIDNamespace},
+    {"travel_document_number", kISO23220PhotoIDNamespace},
+    {"resident_state", kISO23220PhotoIDNamespace},
+
+    {"dtc_version", kISO23220DTCNamespace},
+    {"dtc_sod", kISO23220DTCNamespace},
+    {"dtc_dg1", kISO23220DTCNamespace},
+    {"dtc_dg2", kISO23220DTCNamespace},
+    {"dtc_dg3", kISO23220DTCNamespace},
+    {"dtc_dg4", kISO23220DTCNamespace},
+    {"dtc_dg5", kISO23220DTCNamespace},
+    {"dtc_dg6", kISO23220DTCNamespace},
+    {"dtc_dg7", kISO23220DTCNamespace},
+    {"dtc_dg8", kISO23220DTCNamespace},
+    {"dtc_dg9", kISO23220DTCNamespace},
+    {"dtc_dg10", kISO23220DTCNamespace},
+    {"dtc_dg11", kISO23220DTCNamespace},
+    {"dtc_dg12", kISO23220DTCNamespace},
+    {"dtc_dg13", kISO23220DTCNamespace},
+    {"dtc_dg14", kISO23220DTCNamespace},
+    {"dtc_dg15", kISO23220DTCNamespace},
+    {"dtc_dg16", kISO23220DTCNamespace},
+    {"dg_content_info", kISO23220DTCNamespace},
+
+    // https://ageverification.dev/av-doc-technical-specification/docs/architecture-and-technical-specifications/#411-attribute-set
+    {"age_over_18", kEUAVNamespace},
+    {"age_over_13", kEUAVNamespace}, /* The rest of these are optional. */
+    {"age_over_15", kEUAVNamespace},
+    {"age_over_16", kEUAVNamespace},
+    {"age_over_21", kEUAVNamespace},
+    {"age_over_23", kEUAVNamespace},
+    {"age_over_25", kEUAVNamespace},
+    {"age_over_27", kEUAVNamespace},
+    {"age_over_28", kEUAVNamespace},
+    {"age_over_40", kEUAVNamespace},
+    {"age_over_60", kEUAVNamespace},
+    {"age_over_65", kEUAVNamespace},
+    {"age_over_67", kEUAVNamespace},
+    {"portrait", kEUAVNamespace},
+
+    // Aadhaar attributes
+    {"credential_issuing_date", kAadhaarNamespace},
+    {"enrolment_date", kAadhaarNamespace},
+    {"enrolment_number", kAadhaarNamespace},
+    {"is_nri", kAadhaarNamespace},
+    {"resident_image", kAadhaarNamespace},
+    {"resident_name", kAadhaarNamespace},
+    {"local_resident_name", kAadhaarNamespace},
+    {"age_above18", kAadhaarNamespace},
+    {"age_above60", kAadhaarNamespace},
+    {"age_above75", kAadhaarNamespace},
+    {"dob", kAadhaarNamespace},
+    {"gender", kAadhaarNamespace},
+    {"building", kAadhaarNamespace},
+    {"local_building", kAadhaarNamespace},
+    {"locality", kAadhaarNamespace},
+    {"local_locality", kAadhaarNamespace},
+    {"street", kAadhaarNamespace},
+    {"local_street", kAadhaarNamespace},
+    {"landmark", kAadhaarNamespace},
+    {"local_landmark", kAadhaarNamespace},
+    {"vtc", kAadhaarNamespace},
+    {"local_vtc", kAadhaarNamespace},
+    {"sub_district", kAadhaarNamespace},
+    {"local_sub_district", kAadhaarNamespace},
+    {"district", kAadhaarNamespace},
+    {"local_district", kAadhaarNamespace},
+    {"state", kAadhaarNamespace},
+    {"local_state", kAadhaarNamespace},
+    {"po_name", kAadhaarNamespace},
+    {"local_po_name", kAadhaarNamespace},
+    {"pincode", kAadhaarNamespace},
+    {"address", kAadhaarNamespace},
+    {"local_address", kAadhaarNamespace},
+    {"mobile", kAadhaarNamespace},
+    {"masked_mobile", kAadhaarNamespace},
+    {"email", kAadhaarNamespace},
+    {"masked_email", kAadhaarNamespace},
+    {"masked_uid", kAadhaarNamespace},
+    {"aadhaar_type", kAadhaarNamespace},
+    {"expires_on", kAadhaarNamespace},
+};
+
+}  // namespace proofs
+
+#endif  // PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_ATTRIBUTE_IDS_H_

data/vendor/longfellow-zk/lib/circuits/mdoc/mdoc_attribute_test.cc

@@ -0,0 +1,64 @@
+// Copyright 2026 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include <cstddef>
+#include <cstdint>
+#include <string>
+#include <vector>
+
+#include "circuits/mdoc/mdoc_attribute_ids.h"
+#include "circuits/mdoc/mdoc_witness.h"
+#include "util/log.h"
+#include "gtest/gtest.h"
+
+namespace proofs {
+namespace {
+
+// This test validates that the cbor encoding of an attribute is NOT a suffix
+// of any other valid attribute id.  Therefore, finding the location of the
+// cbor-encoded value of the attribute name is sufficient. We can be sure that
+// the Prover is not able to forge an attribute by pointing to the suffix of
+// another attribute id.
+TEST(MdocAttributeTest, MdocAttributeIdsAreSuffixFree) {
+  for (const auto& attr : kMdocAttributes) {
+    // Form the cbor encoding of attr.
+    size_t len = attr.identifier.size();
+    std::vector<uint8_t> attr_enc;
+    append_text_len(attr_enc, len);
+    attr_enc.insert(attr_enc.end(), attr.identifier.begin(),
+                    attr.identifier.end());
+    std::string attr_enc_str(attr_enc.begin(), attr_enc.end());
+    for (const auto& aj : kMdocAttributes) {
+      if (aj.identifier.ends_with(attr_enc_str) &&
+          aj.identifier != attr.identifier) {
+        log(INFO, "identifier %s is a suffix of %s\n", aj.identifier.data(),
+            attr.identifier.data());
+      }
+      EXPECT_TRUE(!aj.identifier.ends_with(attr_enc_str) ||
+                  aj.identifier == attr.identifier);
+    }
+  }
+}
+
+TEST(MdocAttributeTest, DelimiterIsPresent) {
+  // Verify that the delimiter "ier" never occurs in an attribute id.
+  // Verify that elementValue never appears in any attribute id.
+  for (const auto& attr : kMdocAttributes) {
+    EXPECT_TRUE(attr.identifier.find("ier") == std::string::npos);
+    EXPECT_TRUE(attr.identifier.find("elementValue") == std::string::npos);
+  }
+}
+
+}  // namespace
+}  // namespace proofs

data/vendor/longfellow-zk/lib/circuits/mdoc/mdoc_circuit_id.cc

@@ -0,0 +1,85 @@
+// Copyright 2026 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include <stdint.h>
+#include <sys/types.h>
+
+#include <cstddef>
+#include <cstdlib>
+#include <cstring>
+#include <memory>
+#include <vector>
+
+#include "circuits/mdoc/mdoc_decompress.h"
+#include "circuits/mdoc/mdoc_zk.h"
+#include "ec/p256.h"
+#include "gf2k/gf2_128.h"
+#include "proto/circuit.h"
+#include "sumcheck/circuit_id.h"
+#include "util/crypto.h"
+#include "util/log.h"
+#include "util/readbuffer.h"
+#include "zstd.h"
+
+namespace proofs {
+
+using f_128 = GF2_128<>;
+
+extern "C" {
+
+int circuit_id(uint8_t id[/*kSHA256DigestSize*/], const uint8_t* bcp,
+               size_t bcsz, const ZkSpecStruct* zk_spec) {
+  if (id == nullptr || bcp == nullptr || zk_spec == nullptr) {
+    return 0;
+  }
+  SHA256 sha;
+  uint8_t cid[kSHA256DigestSize];
+
+  size_t len = kCircuitSizeMax;
+  std::vector<uint8_t> bytes(len);
+  size_t full_size = decompress(bytes, bcp, bcsz);
+
+  ReadBuffer rb_circuit(bytes.data(), full_size);
+  CircuitRep<Fp256Base> cr_s(p256_base, P256_ID);
+  auto c_sig = cr_s.from_bytes(rb_circuit, /*enforce_circuit_id=*/true);
+  if (c_sig == nullptr) {
+    log(ERROR, "signature circuit could not be parsed");
+    return 0;
+  }
+  circuit_id(cid, *c_sig, p256_base);
+  sha.Update(cid, kSHA256DigestSize);
+
+  const f_128 Fs;
+  CircuitRep<f_128> cr_h(Fs, GF2_128_ID);
+  auto c_hash = cr_h.from_bytes(rb_circuit, /*enforce_circuit_id=*/true);
+  if (c_hash == nullptr) {
+    log(ERROR, "circuit could not be parsed");
+    return 0;
+  }
+
+  size_t remaining = rb_circuit.remaining();
+  if (remaining != 0) {
+    log(ERROR, "circuit bytes contains extra data: %zu bytes", remaining);
+    return 0;
+  }
+
+  circuit_id(cid, *c_hash, Fs);
+  sha.Update(cid, kSHA256DigestSize);
+
+  sha.DigestData(id);
+  return 1;
+}
+
+} /* extern "C" */
+}  // namespace proofs

data/vendor/longfellow-zk/lib/circuits/mdoc/mdoc_constants.h

@@ -0,0 +1,85 @@
+// Copyright 2026 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#ifndef PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_CONSTANTS_H_
+#define PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_CONSTANTS_H_
+
+#include <stddef.h>
+#include <stdint.h>
+
+namespace proofs {
+
+/* Max number of SHA blocks to process. */
+// v7 circuits use 40, earlier ones use 35.
+constexpr static const size_t kMaxSHABlocks = 40;
+
+/* Number of bits in CBOR index. Must be large enough to index into MDOC.*/
+constexpr static const size_t kCborIndexBits = 12;
+
+// This is the prefix added to the D8... mdoc encoding to produce
+// a COSE1 encoding that is ready to be hashed.
+static constexpr uint8_t kCose1Prefix[18] = {
+    0x84, 0x6A, 0x53, 0x69, 0x67, 0x6E, 0x61, 0x74, 0x75,
+    0x72, 0x65, 0x31, 0x43, 0xA1, 0x01, 0x26, 0x40, 0x59,
+};
+static constexpr size_t kCose1PrefixLen = 18;
+
+/* Max size of an MSO that hashes using < MAX SHA blocks. */
+constexpr static const size_t kMaxMsoLen =
+    kMaxSHABlocks * 64 - 9 - kCose1PrefixLen;
+
+static constexpr size_t kValidityInfoLen = 12;
+static constexpr size_t kValidFromLen = 9;
+static constexpr size_t kDeviceKeyLen = 9;
+static constexpr size_t kDeviceKeyInfoLen = 13;
+static constexpr size_t kValidUntilLen = 10;
+static constexpr size_t kValueDigestsLen = 12;
+static constexpr size_t kOrgLen = 17;
+
+static constexpr uint8_t kTag32[] = {0x58, 0x20};
+static constexpr size_t kIdLen = 32;
+static constexpr size_t kValueLen = 64;
+static constexpr size_t kDigestLen = 8 + 1;
+static constexpr size_t kRandomLen = 6 + 1;
+
+static constexpr uint8_t kValidityInfoID[kValidityInfoLen] = {
+    'v', 'a', 'l', 'i', 'd', 'i', 't', 'y', 'I', 'n', 'f', 'o'};
+
+static constexpr uint8_t kValidFromID[kValidFromLen] = {'v', 'a', 'l', 'i', 'd',
+                                                        'F', 'r', 'o', 'm'};
+
+static constexpr uint8_t kValidUntilID[kValidUntilLen] = {
+    'v', 'a', 'l', 'i', 'd', 'U', 'n', 't', 'i', 'l'};
+
+static constexpr uint8_t kDeviceKeyID[kDeviceKeyLen] = {'d', 'e', 'v', 'i', 'c',
+                                                        'e', 'K', 'e', 'y'};
+
+static constexpr uint8_t kDeviceKeyInfoID[kDeviceKeyInfoLen] = {
+    'd', 'e', 'v', 'i', 'c', 'e', 'K', 'e', 'y', 'I', 'n', 'f', 'o'};
+
+static constexpr uint8_t kValueDigestsID[kValueDigestsLen] = {
+    'v', 'a', 'l', 'u', 'e', 'D', 'i', 'g', 'e', 's', 't', 's'};
+
+static constexpr uint8_t kOrgID[kOrgLen] = {'o', 'r', 'g', '.', 'i', 's',
+                                            'o', '.', '1', '8', '0', '1',
+                                            '3', '.', '5', '.', '1'};
+
+static constexpr uint8_t kDigestID[kDigestLen] = {0x68, 'd', 'i', 'g', 'e',
+                                                  's',  't', 'I', 'D'};
+
+static constexpr uint8_t kRandomID[kRandomLen] = {0x66, 'r', 'a', 'n',
+                                                  'd',  'o', 'm'};
+}  // namespace proofs
+
+#endif  // PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_CONSTANTS_H_

data/vendor/longfellow-zk/lib/circuits/mdoc/mdoc_decompress.cc

@@ -0,0 +1,41 @@
+// Copyright 2026 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "circuits/mdoc/mdoc_decompress.h"
+
+#include <cstddef>
+#include <cstdint>
+#include <vector>
+
+#include "util/log.h"
+#include "zstd.h"
+
+namespace proofs {
+
+// Decompress a circuit representation into a vector that has been reserved
+// with size len.  The value len needs to be a good upper-bound estimate on
+// the size of the uncompressed string.
+size_t decompress(std::vector<uint8_t>& bytes, const uint8_t* compressed,
+                  size_t compressed_len) {
+  size_t res =
+      ZSTD_decompress(bytes.data(), bytes.size(), compressed, compressed_len);
+
+  if (ZSTD_isError(res)) {
+    log(ERROR, "zlib.UncompressAtMost failed: %s", ZSTD_getErrorName(res));
+    return 0;
+  }
+  return res;
+}
+
+}  // namespace proofs

data/vendor/longfellow-zk/lib/circuits/mdoc/mdoc_decompress.h

@@ -0,0 +1,27 @@
+// Copyright 2026 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#ifndef PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_DECOMPRESS_H_
+#define PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_DECOMPRESS_H_
+
+#include <cstddef>
+#include <cstdint>
+#include <vector>
+
+namespace proofs {
+extern size_t decompress(std::vector<uint8_t>& bytes, const uint8_t* compressed,
+                         size_t compressed_len);
+}  // namespace proofs
+
+#endif  // PRIVACY_PROOFS_ZK_LIB_CIRCUITS_MDOC_MDOC_DECOMPRESS_H_