@arcanetech/stellar-privacy-pool-zk-sdk 0.11.4 → 1.0.0-rc.0

package/dist/cli.js

@@ -1395,11 +1395,11 @@ async function fetchArtifact(url) {
 }
 
 const ZK_ARTIFACT_GITHUB_REPO = "Polynom-Labs/stellar-pool-zk-sdk";
-const ZK_SDK_PACKAGE_VERSION = "0.11.4";
+const ZK_SDK_PACKAGE_VERSION = "1.0.0-rc.0";
 const ZK_ARTIFACT_CDN_ORIGIN = "https://static.pl.arcane.finance";
 const ZK_DEFAULT_ARTIFACT_BASE_URL = "https://static.pl.arcane.finance/stellar/0.10.0";
 /** Injected at publish time: stem -> { version, kind, fingerprint? }. */
-const ZK_CIRCUITS_MANIFEST_JSON = "{\"main\":{\"version\":\"0.10.0\",\"kind\":\"direct\"},\"main_10x1\":{\"version\":\"0.11.2\",\"kind\":\"direct\"},\"main_10x1_delegated\":{\"version\":\"0.11.2\",\"kind\":\"delegated\"},\"main_6x6\":{\"version\":\"0.10.0\",\"kind\":\"direct\"},\"main_6x6_delegated\":{\"version\":\"0.10.0\",\"kind\":\"delegated\"},\"main_delegated\":{\"version\":\"0.10.0\",\"kind\":\"delegated\"}}";
+const ZK_CIRCUITS_MANIFEST_JSON = "{\"main\":{\"version\":\"0.10.0\",\"kind\":\"direct\"},\"main_10x1\":{\"version\":\"1.0.0-rc.0\",\"kind\":\"direct\"},\"main_10x1_delegated\":{\"version\":\"1.0.0-rc.0\",\"kind\":\"delegated\"},\"main_6x6\":{\"version\":\"0.10.0\",\"kind\":\"direct\"},\"main_6x6_delegated\":{\"version\":\"0.10.0\",\"kind\":\"delegated\"},\"main_delegated\":{\"version\":\"0.10.0\",\"kind\":\"delegated\"}}";
 function parsedCircuitsManifest() {
     if (ZK_CIRCUITS_MANIFEST_JSON.length === 0 ||
         ZK_CIRCUITS_MANIFEST_JSON.startsWith("__ZK_")) {
@@ -1960,6 +1960,13 @@ function recipientPublicKeysDecimalFromStealthAddress(stealthAddress) {
 }
 /** First withdraw leg: Merkle witness + owner public key (hex) and matching scalar. */
 function withdrawObjectFromMerkleWitness(witness, ownerPubHex, applicationId, privKeyScalar) {
+    return buildWithdrawObject(witness, ownerPubHex, applicationId, {
+        privKeyScalar,
+        escrowNonce: '0',
+        recipientStellar: ['0', '0'],
+    });
+}
+function buildWithdrawObject(witness, ownerPubHex, applicationId, spend) {
     return {
         value: witness.value,
         nullifier: witness.nullifier,
@@ -1967,10 +1974,10 @@ function withdrawObjectFromMerkleWitness(witness, ownerPubHex, applicationId, pr
         asset: witness.withdrawnAsset,
         applicationId,
         ownerPub: [coordHexToDecimal(ownerPubHex.x), coordHexToDecimal(ownerPubHex.y)],
-        privKeyScalar,
+        privKeyScalar: spend.privKeyScalar,
         paddingRandom: randomFrDecimal(),
-        escrowNonce: '0',
-        recipientStellar: ['0', '0'],
+        escrowNonce: spend.escrowNonce,
+        recipientStellar: spend.recipientStellar,
         stateSiblings: witness.stateSiblings,
         stateIndex: witness.stateIndex,
     };
@@ -2101,19 +2108,48 @@ function outputNoteTag(parameters) {
         message: parameters.plaintext,
     });
 }
+function keystreamForOutputNoteField(parameters) {
+    return poseidonHash(parameters.poseidon, [
+        parameters.nonce,
+        STREAM_DOMAIN,
+        BigInt(parameters.fieldIndex),
+    ]);
+}
+function keystreamForAuditSlotField(parameters) {
+    return poseidonHash(parameters.poseidon, [
+        parameters.nonce,
+        STREAM_DOMAIN,
+        parameters.slotIndex,
+        BigInt(parameters.fieldIndex),
+    ]);
+}
 function encryptFields(parameters) {
     return parameters.plaintext.map((field, index) => {
-        const seed = poseidonHash(parameters.poseidon, [
-            parameters.nonce,
-            STREAM_DOMAIN,
-            BigInt(index),
-        ]);
-        const stream = mimcHash({
+        const keystream = mimcHash({
             mimc7: parameters.mimc7,
-            message: seed,
+            message: keystreamForOutputNoteField({
+                poseidon: parameters.poseidon,
+                nonce: parameters.nonce,
+                fieldIndex: index,
+            }),
             key: parameters.key,
         });
-        return moduleFr(field + stream);
+        return moduleFr(field + keystream);
+    });
+}
+function encryptAuditSlotFields(parameters) {
+    return parameters.plaintext.map((field, index) => {
+        const keystream = mimcHash({
+            mimc7: parameters.mimc7,
+            message: keystreamForAuditSlotField({
+                poseidon: parameters.poseidon,
+                nonce: parameters.nonce,
+                slotIndex: parameters.slotIndex,
+                fieldIndex: index,
+            }),
+            key: parameters.key,
+        });
+        return moduleFr(field + keystream);
     });
 }
 function plaintextBigints(plaintext) {
@@ -2175,21 +2211,42 @@ function precommitmentFromOpening(parameters) {
         ownerKeyHash,
     ]);
 }
+function deriveSharedAuditKey(parameters) {
+    const [sharedX, sharedY] = sharedKeyFromDepositor({
+        babyJub: parameters.babyJub,
+        ecdhShared: parameters.ecdhShared,
+        ephemeralKeyScalarDecimal: parameters.auditEphemeralScalar,
+        recipientPublicKey: parameters.auditPublicKey,
+    });
+    return {
+        key: deriveEncCipherKey(parameters.poseidon, sharedX),
+        nonce: sharedY,
+    };
+}
 async function encryptNoteAuditSlot(parameters) {
     if (parameters.plaintext.length !== NOTE_AUDIT_LEN) {
         throw new Error(`encryptNoteAuditSlot: expected ${String(NOTE_AUDIT_LEN)} limbs`);
     }
+    if (!Number.isInteger(parameters.slotIndex) || parameters.slotIndex < 0) {
+        throw new Error('encryptNoteAuditSlot: slotIndex must be a non-negative integer');
+    }
     const { babyJub, mimc7, poseidon } = await primitives();
-    const [sharedX, sharedY] = sharedKeyFromDepositor({
+    const { key, nonce } = deriveSharedAuditKey({
         babyJub,
+        poseidon,
+        auditPublicKey: parameters.auditPublicKey,
+        auditEphemeralScalar: parameters.auditEphemeralScalar,
         ecdhShared: parameters.ecdhShared,
-        ephemeralKeyScalarDecimal: parameters.auditEphemeralScalar,
-        recipientPublicKey: parameters.auditPublicKey,
     });
-    const key = deriveEncCipherKey(poseidon, sharedX);
-    const nonce = sharedY;
     const message = parameters.plaintext.map((field) => bigintFromDecimal(field));
-    const ciphertext = encryptFields({ mimc7, poseidon, key, nonce, plaintext: message });
+    const ciphertext = encryptAuditSlotFields({
+        mimc7,
+        poseidon,
+        key,
+        nonce,
+        plaintext: message,
+        slotIndex: BigInt(parameters.slotIndex),
+    });
     const tag = poseidonMacTag({
         poseidon,
         domain: DOM_AUDIT_TAG,
@@ -2284,6 +2341,7 @@ async function encryptTransactionCiphertextBlob(parameters) {
             auditPublicKey: parameters.witness.noteAuditPublicKey,
             auditEphemeralScalar: parameters.witness.auditEphemeralScalar,
             plaintext,
+            slotIndex: slot,
             ecdhShared: parameters.ecdhShared,
         });
         auditCiphertexts.push(encrypted.ciphertext);