@lfdecentralizedtrust/zeto-contracts 0.2.1 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/README.md +70 -162
  2. package/contracts/factory.sol +30 -34
  3. package/contracts/factory_upgradeable.sol +160 -0
  4. package/contracts/lib/common/util.sol +40 -0
  5. package/contracts/lib/interfaces/ILockableCapability.sol +318 -0
  6. package/contracts/lib/interfaces/{izeto.sol → IZeto.sol} +13 -1
  7. package/contracts/lib/interfaces/{izeto_initializable.sol → IZetoInitializable.sol} +14 -12
  8. package/contracts/lib/interfaces/{izeto_kyc.sol → IZetoKyc.sol} +3 -3
  9. package/contracts/lib/interfaces/IZetoLockableCapability.sol +237 -0
  10. package/contracts/lib/interfaces/IZetoStorage.sol +106 -0
  11. package/contracts/lib/interfaces/{izeto_lockable.sol → IZetoVerifier.sol} +8 -21
  12. package/contracts/lib/registry.sol +77 -27
  13. package/contracts/lib/storage/base.sol +210 -0
  14. package/contracts/lib/storage/nullifier.sol +166 -0
  15. package/contracts/lib/zeto_common.sol +277 -28
  16. package/contracts/lib/zeto_fungible.sol +451 -33
  17. package/contracts/lib/zeto_fungible_base.sol +69 -0
  18. package/contracts/lib/zeto_fungible_burn.sol +83 -53
  19. package/contracts/lib/zeto_fungible_burn_nullifier.sol +115 -72
  20. package/contracts/lib/zeto_fungible_nullifier.sol +167 -0
  21. package/contracts/lib/zeto_lockable.sol +613 -0
  22. package/contracts/lib/zeto_non_fungible.sol +236 -0
  23. package/contracts/lib/zeto_non_fungible_base.sol +61 -0
  24. package/contracts/lib/zeto_non_fungible_nullifier.sol +61 -0
  25. package/contracts/test/escrow1.sol +90 -34
  26. package/contracts/test/escrow2.sol +64 -29
  27. package/contracts/test/qurrency.sol +10 -2
  28. package/contracts/test/smt.sol +8 -3
  29. package/contracts/test/tendecimals.sol +14 -12
  30. package/contracts/verifiers/impl/anon.sol +189 -0
  31. package/contracts/verifiers/impl/anon_batch.sol +301 -0
  32. package/contracts/verifiers/impl/anon_enc.sol +266 -0
  33. package/contracts/verifiers/impl/anon_enc_batch.sol +602 -0
  34. package/contracts/verifiers/impl/anon_enc_nullifier.sol +287 -0
  35. package/contracts/verifiers/impl/anon_enc_nullifier_batch.sol +679 -0
  36. package/contracts/verifiers/impl/anon_enc_nullifier_kyc.sol +294 -0
  37. package/contracts/verifiers/impl/anon_enc_nullifier_kyc_batch.sol +686 -0
  38. package/contracts/verifiers/impl/anon_enc_nullifier_non_repudiation.sol +413 -0
  39. package/contracts/verifiers/impl/anon_enc_nullifier_non_repudiation_batch.sol +1141 -0
  40. package/contracts/verifiers/impl/anon_nullifier_kyc_transfer.sol +217 -0
  41. package/contracts/verifiers/impl/anon_nullifier_kyc_transferLocked.sol +196 -0
  42. package/contracts/verifiers/impl/anon_nullifier_kyc_transferLocked_batch.sol +308 -0
  43. package/contracts/verifiers/impl/anon_nullifier_kyc_transfer_batch.sol +385 -0
  44. package/contracts/verifiers/impl/anon_nullifier_qurrency_transfer.sol +497 -0
  45. package/contracts/verifiers/impl/anon_nullifier_qurrency_transfer_batch.sol +1001 -0
  46. package/contracts/verifiers/{verifier_anon_nullifier_transferLocked.sol → impl/anon_nullifier_transfer.sol} +12 -19
  47. package/contracts/verifiers/{verifier_anon_nullifier_transferLocked_batch.sol → impl/anon_nullifier_transfer_batch.sol} +44 -51
  48. package/contracts/verifiers/impl/burn.sol +182 -0
  49. package/contracts/verifiers/impl/burn_batch.sol +238 -0
  50. package/contracts/verifiers/impl/burn_nullifier.sol +203 -0
  51. package/contracts/verifiers/impl/burn_nullifier_batch.sol +315 -0
  52. package/contracts/verifiers/impl/deposit.sol +182 -0
  53. package/contracts/verifiers/impl/deposit_kyc.sol +189 -0
  54. package/contracts/verifiers/impl/nf_anon.sol +175 -0
  55. package/contracts/verifiers/{verifier_nf_anon_nullifier_transferLocked.sol → impl/nf_anon_nullifier_transfer.sol} +6 -13
  56. package/contracts/verifiers/impl/withdraw.sol +189 -0
  57. package/contracts/verifiers/impl/withdraw_batch.sol +245 -0
  58. package/contracts/verifiers/impl/withdraw_nullifier.sol +210 -0
  59. package/contracts/verifiers/impl/withdraw_nullifier_batch.sol +322 -0
  60. package/contracts/verifiers/verifier_anon.sol +31 -186
  61. package/contracts/verifiers/verifier_anon_batch.sol +31 -298
  62. package/contracts/verifiers/verifier_anon_enc.sol +31 -263
  63. package/contracts/verifiers/verifier_anon_enc_batch.sol +31 -599
  64. package/contracts/verifiers/verifier_anon_enc_nullifier.sol +31 -284
  65. package/contracts/verifiers/verifier_anon_enc_nullifier_batch.sol +33 -676
  66. package/contracts/verifiers/verifier_anon_enc_nullifier_kyc.sol +31 -291
  67. package/contracts/verifiers/verifier_anon_enc_nullifier_kyc_batch.sol +33 -683
  68. package/contracts/verifiers/verifier_anon_enc_nullifier_non_repudiation.sol +33 -410
  69. package/contracts/verifiers/verifier_anon_enc_nullifier_non_repudiation_batch.sol +33 -1138
  70. package/contracts/verifiers/verifier_anon_nullifier_kyc_transfer.sol +33 -214
  71. package/contracts/verifiers/verifier_anon_nullifier_kyc_transferLocked.sol +33 -221
  72. package/contracts/verifiers/verifier_anon_nullifier_kyc_transferLocked_batch.sol +33 -389
  73. package/contracts/verifiers/verifier_anon_nullifier_kyc_transfer_batch.sol +33 -382
  74. package/contracts/verifiers/verifier_anon_nullifier_qurrency_transfer.sol +33 -221
  75. package/contracts/verifiers/verifier_anon_nullifier_qurrency_transfer_batch.sol +33 -389
  76. package/contracts/verifiers/verifier_anon_nullifier_transfer.sol +33 -207
  77. package/contracts/verifiers/verifier_anon_nullifier_transfer_batch.sol +33 -375
  78. package/contracts/verifiers/verifier_burn.sol +31 -179
  79. package/contracts/verifiers/verifier_burn_batch.sol +31 -235
  80. package/contracts/verifiers/verifier_burn_nullifier.sol +31 -200
  81. package/contracts/verifiers/verifier_burn_nullifier_batch.sol +31 -312
  82. package/contracts/verifiers/verifier_deposit.sol +31 -179
  83. package/contracts/verifiers/verifier_deposit_kyc.sol +34 -0
  84. package/contracts/verifiers/verifier_nf_anon.sol +31 -172
  85. package/contracts/verifiers/verifier_nf_anon_nullifier_transfer.sol +33 -179
  86. package/contracts/verifiers/verifier_withdraw.sol +31 -186
  87. package/contracts/verifiers/verifier_withdraw_batch.sol +31 -242
  88. package/contracts/verifiers/verifier_withdraw_nullifier.sol +31 -207
  89. package/contracts/verifiers/verifier_withdraw_nullifier_batch.sol +33 -319
  90. package/contracts/zeto_anon.sol +77 -231
  91. package/contracts/zeto_anon_burnable.sol +56 -12
  92. package/contracts/zeto_anon_enc.sol +93 -190
  93. package/contracts/zeto_anon_enc_nullifier.sol +249 -195
  94. package/contracts/zeto_anon_enc_nullifier_kyc.sol +51 -232
  95. package/contracts/zeto_anon_enc_nullifier_non_repudiation.sol +231 -238
  96. package/contracts/zeto_anon_nullifier.sol +164 -298
  97. package/contracts/zeto_anon_nullifier_burnable.sol +68 -18
  98. package/contracts/zeto_anon_nullifier_kyc.sol +40 -345
  99. package/contracts/zeto_anon_nullifier_qurrency.sol +218 -360
  100. package/contracts/zeto_nf_anon.sol +55 -130
  101. package/contracts/zeto_nf_anon_nullifier.sol +90 -152
  102. package/hardhat.config.ts +9 -3
  103. package/ignition/modules/lib/deps.ts +9 -6
  104. package/ignition/modules/zeto_anon_burnable.ts +8 -7
  105. package/ignition/modules/zeto_anon_enc_nullifier.ts +33 -1
  106. package/ignition/modules/zeto_anon_enc_nullifier_kyc.ts +2 -2
  107. package/ignition/modules/zeto_anon_enc_nullifier_non_repudiation.ts +2 -1
  108. package/ignition/modules/zeto_anon_nullifier.ts +30 -5
  109. package/ignition/modules/zeto_anon_nullifier_burnable.ts +52 -17
  110. package/ignition/modules/zeto_anon_nullifier_kyc.ts +27 -12
  111. package/ignition/modules/zeto_anon_nullifier_qurrency.ts +2 -1
  112. package/ignition/modules/zeto_nf_anon_nullifier.ts +16 -12
  113. package/package.json +4 -2
  114. package/scripts/deploy_cloneable.ts +19 -10
  115. package/scripts/deploy_upgradeable.ts +9 -5
  116. package/scripts/tokens/Zeto_Anon.ts +3 -3
  117. package/scripts/tokens/Zeto_AnonBurnable.ts +1 -1
  118. package/scripts/tokens/Zeto_AnonEnc.ts +12 -3
  119. package/scripts/tokens/Zeto_AnonEncNullifier.ts +7 -3
  120. package/scripts/tokens/Zeto_AnonEncNullifierKyc.ts +1 -1
  121. package/scripts/tokens/Zeto_AnonEncNullifierNonRepudiation.ts +3 -1
  122. package/scripts/tokens/Zeto_AnonNullifier.ts +3 -1
  123. package/scripts/tokens/Zeto_AnonNullifierBurnable.ts +3 -1
  124. package/scripts/tokens/Zeto_AnonNullifierKyc.ts +1 -1
  125. package/scripts/tokens/Zeto_AnonNullifierQurrency.ts +3 -1
  126. package/scripts/tokens/Zeto_NfAnon.ts +2 -2
  127. package/scripts/tokens/Zeto_NfAnonNullifier.ts +3 -2
  128. package/test/factory.ts +46 -73
  129. package/test/factory_upgradeable.ts +311 -0
  130. package/test/lib/anon_nullifier_helpers.ts +89 -0
  131. package/test/lib/anon_zeto_helpers.ts +76 -0
  132. package/test/lib/deploy.ts +3 -2
  133. package/test/lib/utils.ts +74 -35
  134. package/test/test/escrow1.ts +185 -58
  135. package/test/test/escrow2.ts +200 -107
  136. package/test/test/qurrency.ts +13 -33
  137. package/test/usdc-shielding.ts +39 -26
  138. package/test/utils.ts +144 -21
  139. package/test/zeto_anon.ts +956 -465
  140. package/test/zeto_anon_enc.ts +881 -142
  141. package/test/zeto_anon_enc_nullifier.ts +847 -38
  142. package/test/zeto_anon_enc_nullifier_kyc.ts +120 -181
  143. package/test/zeto_anon_enc_nullifier_non_repudiation.ts +77 -46
  144. package/test/zeto_anon_nullifier.ts +1212 -953
  145. package/test/zeto_anon_nullifier_kyc.ts +674 -655
  146. package/test/zeto_anon_nullifier_qurrency.ts +452 -306
  147. package/test/zeto_nf_anon.ts +737 -137
  148. package/test/zeto_nf_anon_nullifier.ts +876 -246
  149. package/contracts/lib/zeto_base.sol +0 -293
  150. package/contracts/lib/zeto_fungible_withdraw.sol +0 -132
  151. package/contracts/lib/zeto_fungible_withdraw_nullifier.sol +0 -144
  152. package/contracts/lib/zeto_nullifier.sol +0 -334
  153. package/contracts/zkDvP.sol_ +0 -273
  154. package/test/zkDvP.ts_ +0 -455
  155. /package/contracts/lib/{common.sol → common/common.sol} +0 -0
@@ -1,686 +1,36 @@
1
- // SPDX-License-Identifier: GPL-3.0
2
- /*
3
- Copyright 2021 0KIMS association.
4
-
5
- This file is generated with [snarkJS](https://github.com/iden3/snarkjs).
6
-
7
- snarkJS is a free software: you can redistribute it and/or modify it
8
- under the terms of the GNU General Public License as published by
9
- the Free Software Foundation, either version 3 of the License, or
10
- (at your option) any later version.
11
-
12
- snarkJS is distributed in the hope that it will be useful, but WITHOUT
13
- ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
14
- or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public
15
- License for more details.
16
-
17
- You should have received a copy of the GNU General Public License
18
- along with snarkJS. If not, see <https://www.gnu.org/licenses/>.
19
- */
1
+ // Copyright © 2025 Kaleido, Inc.
2
+ //
3
+ // SPDX-License-Identifier: Apache-2.0
4
+ //
5
+ // Licensed under the Apache License, Version 2.0 (the "License");
6
+ // you may not use this file except in compliance with the License.
7
+ // You may obtain a copy of the License at
8
+ //
9
+ // http://www.apache.org/licenses/LICENSE-2.0
10
+ //
11
+ // Unless required by applicable law or agreed to in writing, software
12
+ // distributed under the License is distributed on an "AS IS" BASIS,
13
+ // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
+ // See the License for the specific language governing permissions and
15
+ // limitations under the License.
20
16
 
21
17
  pragma solidity >=0.7.0 <0.9.0;
22
18
 
23
- contract Groth16Verifier_AnonEncNullifierKycBatch {
24
- // Scalar field size
25
- uint256 constant r = 21888242871839275222246405745257275088548364400416034343698204186575808495617;
26
- // Base field size
27
- uint256 constant q = 21888242871839275222246405745257275088696311157297823662689037894645226208583;
28
-
29
- // Verification Key data
30
- uint256 constant alphax = 20491192805390485299153009773594534940189261866228447918068658471970481763042;
31
- uint256 constant alphay = 9383485363053290200918347156157836566562967994039712273449902621266178545958;
32
- uint256 constant betax1 = 4252822878758300859123897981450591353533073413197771768651442665752259397132;
33
- uint256 constant betax2 = 6375614351688725206403948262868962793625744043794305715222011528459656738731;
34
- uint256 constant betay1 = 21847035105528745403288232691147584728191162732299865338377159692350059136679;
35
- uint256 constant betay2 = 10505242626370262277552901082094356697409835680220590971873171140371331206856;
36
- uint256 constant gammax1 = 11559732032986387107991004021392285783925812861821192530917403151452391805634;
37
- uint256 constant gammax2 = 10857046999023057135944570762232829481370756359578518086990519993285655852781;
38
- uint256 constant gammay1 = 4082367875863433681332203403145435568316851327593401208105741076214120093531;
39
- uint256 constant gammay2 = 8495653923123431417604973247489272438418190587263600148770280649306958101930;
40
- uint256 constant deltax1 = 11559732032986387107991004021392285783925812861821192530917403151452391805634;
41
- uint256 constant deltax2 = 10857046999023057135944570762232829481370756359578518086990519993285655852781;
42
- uint256 constant deltay1 = 4082367875863433681332203403145435568316851327593401208105741076214120093531;
43
- uint256 constant deltay2 = 8495653923123431417604973247489272438418190587263600148770280649306958101930;
44
-
45
-
46
- uint256 constant IC0x = 15409791955598787751103531970071723139038657604800305665452026264417828456151;
47
- uint256 constant IC0y = 9092746402899964618601098277186453924240830820427171297477612350235594762230;
48
-
49
- uint256 constant IC1x = 7949724348808454633669361647060175530323440301732291277115673476237108891542;
50
- uint256 constant IC1y = 18134172461804827319437762824423718348343328362280144239082682827834311228862;
51
-
52
- uint256 constant IC2x = 18412235420222622708390743487048904719675255312308900197838300506333609020567;
53
- uint256 constant IC2y = 3326911880786467630680443287947724677904315474829569907236338568731588390209;
54
-
55
- uint256 constant IC3x = 3684759051689549260992004811510631865027364466132862273664631251877870397322;
56
- uint256 constant IC3y = 4624504269022852547538527532537284583151548640246363460844851768495942507731;
57
-
58
- uint256 constant IC4x = 18939213130773768990589821900718447331875388051807136612585286320585577025449;
59
- uint256 constant IC4y = 9607150346436114487478754580032358572614092508303519012359064099377312258255;
60
-
61
- uint256 constant IC5x = 4304774402263129512850253862373517584669112751896010282131604467222380872267;
62
- uint256 constant IC5y = 3197616323427858399777352139293657890603227558000123704495239864910483658297;
63
-
64
- uint256 constant IC6x = 14968034082411198037944438376279005757480632832566654441983100737431053173139;
65
- uint256 constant IC6y = 3943395786320480978370375368175087409224119161587765381583492808047972463973;
66
-
67
- uint256 constant IC7x = 11811687116823296786042593031915338220372162561933438868904387374997368136764;
68
- uint256 constant IC7y = 16239760650134049100941091682537454263160653140559325617975183512534144672822;
69
-
70
- uint256 constant IC8x = 13976804983275936440076141436419565601451187761023120366572294561283213408400;
71
- uint256 constant IC8y = 15947030171848408329288205317938767625178352961026558256004543816684158607115;
72
-
73
- uint256 constant IC9x = 20091369345386756861583326092880477235913200512207815728161185428758632919068;
74
- uint256 constant IC9y = 4547352145684000460660484940785150198225443112294592064264306957219865903496;
75
-
76
- uint256 constant IC10x = 15110595095060568315380423877310152003500215426903188901637201624902388355156;
77
- uint256 constant IC10y = 13819922440260106697305874380139646513964964406997753828774348088166480904802;
78
-
79
- uint256 constant IC11x = 5945587906512448894630134998155585893626546403257902155146913990708953643745;
80
- uint256 constant IC11y = 15243938468151966927213881029467374776231868513060511965302481403027513458541;
81
-
82
- uint256 constant IC12x = 3872520330349265371964182773844470029034123763737284856176778645247681456330;
83
- uint256 constant IC12y = 821257119994220456649764245639250914434868540664111354251447828040110852279;
84
-
85
- uint256 constant IC13x = 13122105751537953478060472734571728593109791141037909305554131918806914692475;
86
- uint256 constant IC13y = 15292979279124357935194649187820863745461853509288265240617180128044240090657;
87
-
88
- uint256 constant IC14x = 10167782413207288301190534231562988840375951058165789141499879863754187892721;
89
- uint256 constant IC14y = 20283322390639552300506332669199531127947200999364059630244031764378400613094;
90
-
91
- uint256 constant IC15x = 8984567035618531287905247576065162631631871592319024551173399497889539608341;
92
- uint256 constant IC15y = 18269620713607175964666081043873522090762213560303588395499483649329589173645;
93
-
94
- uint256 constant IC16x = 9713414910748027054379523685487364912968107627325344557010999990578831777939;
95
- uint256 constant IC16y = 4692870054022375589242467164635041018867663351989965151047191078828870988721;
96
-
97
- uint256 constant IC17x = 13865899469845010484763304050002561532820628163266196179086845918095257879354;
98
- uint256 constant IC17y = 17571900975199411289940070705712991259136393257801761844789481862572089446647;
99
-
100
- uint256 constant IC18x = 2390580389407902207014048814252619616309527796915074314528398709506895279818;
101
- uint256 constant IC18y = 4969424591145852638529856130953369172440336016490171996430983061963297045302;
102
-
103
- uint256 constant IC19x = 17452028189893246532174515432652809239418123697608403429055298687480509168563;
104
- uint256 constant IC19y = 86359438193245786461999099825440629336828531445604585406769258431312418859;
105
-
106
- uint256 constant IC20x = 3946933204890629618761841772149162387771330690986734346980045624238048420365;
107
- uint256 constant IC20y = 8910516678189974356495892484074176168234708637654847928438176279314172106628;
108
-
109
- uint256 constant IC21x = 12618495222023794485338669576314609771018866125678978609149003580074546090473;
110
- uint256 constant IC21y = 20713404673767852598710946227524613530652582032002420042594964125130501118070;
111
-
112
- uint256 constant IC22x = 9092985967864943030084574013420756216969037396873454583653257958607237235061;
113
- uint256 constant IC22y = 12947543457347575920852385022907826246757887156161671231203316689150929206993;
114
-
115
- uint256 constant IC23x = 20107411386531822659805863064701617738374424337778794343309984186081206222303;
116
- uint256 constant IC23y = 16249927142794589636159530030849830959169064082918858812870191460154627178934;
117
-
118
- uint256 constant IC24x = 17237469442220615704547176059588037252246557986928975333149666853967593806703;
119
- uint256 constant IC24y = 11862548748855641235854355859509416830809770455359463411943767704841426635578;
120
-
121
- uint256 constant IC25x = 15328398666112504426405755746677020754012395476456067456627069143608266206248;
122
- uint256 constant IC25y = 4973042306019503096914324808310612445122399990158197046949308675346206327903;
123
-
124
- uint256 constant IC26x = 11669087226090855047491916941871948383460756475183909348701213953069422287919;
125
- uint256 constant IC26y = 10072778794448759237030894519386617799871409706564761609005700689132351126873;
126
-
127
- uint256 constant IC27x = 14603408206506285251954682688982168849698465419310115906252936302176631179204;
128
- uint256 constant IC27y = 9663651953146076173729764004629539382726994489097774005094162595670461080833;
129
-
130
- uint256 constant IC28x = 7396822726131708880917912185088971181475941912700640604595755550181705404342;
131
- uint256 constant IC28y = 19906765510989247741313331419663190490827813255353192539428442840624422384708;
132
-
133
- uint256 constant IC29x = 14163474333398002949552666961914368741859942634784235872206313162601575155887;
134
- uint256 constant IC29y = 13278320126962277105778639538474383463435654271565434594454785445205872073869;
135
-
136
- uint256 constant IC30x = 15927627966198514422070925724321570526682874834413496821335719811211151512732;
137
- uint256 constant IC30y = 11201407363566039528014608237609820389631499809339551547185394221538216400195;
138
-
139
- uint256 constant IC31x = 16200096381203341358770097964686539707717113982020496104150094849884172569177;
140
- uint256 constant IC31y = 21830618921096823302723207866940226561621821892280063231252246715709159919013;
141
-
142
- uint256 constant IC32x = 7470149472298252128273087536580334390721221485260351840130710079039352570262;
143
- uint256 constant IC32y = 20098326608581823320564458509312651924722414093154962128208413092515572431675;
144
-
145
- uint256 constant IC33x = 4657281324300735522985711692887039515599196293024420980624063363257088426958;
146
- uint256 constant IC33y = 20698165004683514087168618103711421189395745075560565692726601427834302463987;
147
-
148
- uint256 constant IC34x = 17384864280626352073519718847230379674369351290973301793123478956211736772669;
149
- uint256 constant IC34y = 14161685348292376953526033600445592105378491809865665700581679032619653685607;
150
-
151
- uint256 constant IC35x = 19648625233247529288604453723553767623733448237182380117534106417787880949553;
152
- uint256 constant IC35y = 10732198997559158875830105155626220929144961472506439906360908802485430517221;
153
-
154
- uint256 constant IC36x = 14569594836747648808206702470667318999060844339412440817715590360100710167874;
155
- uint256 constant IC36y = 2785158627138663820768109803275492173400792888005334555258646429679093764982;
156
-
157
- uint256 constant IC37x = 12369654625067238879916162479941781487272216649676312734708459452830833084828;
158
- uint256 constant IC37y = 2335402075756457462122262450966527634339550628995757706980685258964103608954;
159
-
160
- uint256 constant IC38x = 9869298631491195377875559519817256615493164909248461367549774431486593977122;
161
- uint256 constant IC38y = 19691463834712263324794724081276569367750111792006820801853840794626761681885;
162
-
163
- uint256 constant IC39x = 10699337988344456320696022068286842551344985572683809064365683501936978925001;
164
- uint256 constant IC39y = 5244923263064265795925322643256542125093480558224658910724842108581447644388;
165
-
166
- uint256 constant IC40x = 14157283479597097703499343703076655840788787450945801894031186600329232424564;
167
- uint256 constant IC40y = 9136157388455348072769534517178868149599822418336392627069545918450800685993;
168
-
169
- uint256 constant IC41x = 11954987635462597782331250935089282843188332910441834826349217320618588817567;
170
- uint256 constant IC41y = 13078511571641253398042198733440790728718539174183747094726515940254605429662;
171
-
172
- uint256 constant IC42x = 13291094562716081445366074160384218583707243478564187772879137970415619789726;
173
- uint256 constant IC42y = 4333894547978745599412449049000090446060773373168504945159979099761126222817;
174
-
175
- uint256 constant IC43x = 986189980794696666978691262328051729848631093468195023004451756259109980695;
176
- uint256 constant IC43y = 19137828594644624838178416710637283268932719030172173994449285464369025262040;
177
-
178
- uint256 constant IC44x = 12479214535049252206345099315637070711297101874505009440945943938888442635195;
179
- uint256 constant IC44y = 4151125701241456281849247098337429354788072144727546189249770438354773750126;
180
-
181
- uint256 constant IC45x = 947498121220943509687113538789080464820267995482387705311733146657160735113;
182
- uint256 constant IC45y = 3512661131761322564206050954078983364710846888810577184790815709277603813083;
183
-
184
- uint256 constant IC46x = 5429820634507503493088406800342333994457259943675439727929733206191588921862;
185
- uint256 constant IC46y = 3819194897596833154978213150033139255940382937907231191563543313211876861965;
186
-
187
- uint256 constant IC47x = 16147796102701069265956253724423183537210918608175999723031648726712223255669;
188
- uint256 constant IC47y = 4233525102295999937588548827759041455816041662451866385337511384403765725883;
189
-
190
- uint256 constant IC48x = 1972434964759191060420272054346635718432406099540931144568015514296836596349;
191
- uint256 constant IC48y = 4239348986409898489520160620635276475436192230474182835244095969650911061787;
192
-
193
- uint256 constant IC49x = 16670174453776185093919151472277172509144695185394414409634660533095639202608;
194
- uint256 constant IC49y = 9910941691566079838347163692958962776625159902756812355493455695354469743260;
195
-
196
- uint256 constant IC50x = 21689503761383362656508468344600215021312910621597797121712447473969706030630;
197
- uint256 constant IC50y = 18931359522444001957716791013602238947909771600416871852685531416539360492854;
198
-
199
- uint256 constant IC51x = 1053045581028280468772052630524840541103324168340705880066593288761567941190;
200
- uint256 constant IC51y = 4805031957228415535175850688430699295791758349486752035599631623760776555657;
201
-
202
- uint256 constant IC52x = 3409729820682150062571883903579065843125357364488386599798768489033780715862;
203
- uint256 constant IC52y = 7528155192774758000311673259632601533795080051149331254328030188255506567942;
204
-
205
- uint256 constant IC53x = 20565773733953661710029777125928615190879182678245724439644516050009589500357;
206
- uint256 constant IC53y = 16606337771290685084159805923078730402603403480864069696855253896346667164230;
207
-
208
- uint256 constant IC54x = 20196396000632374222912477070577184161045013357636416596951452501055387840596;
209
- uint256 constant IC54y = 119130615745090258828253056925660666538765605136045033855745758502270384818;
210
-
211
- uint256 constant IC55x = 1554035333454570805454714457986814535924120870764934624459611007817531364963;
212
- uint256 constant IC55y = 19456005872250053223374668164439847844382201427353212680408488920733006534045;
213
-
214
- uint256 constant IC56x = 16197160710885016337071943702127860260495530797550037958184801247867183538274;
215
- uint256 constant IC56y = 3617909162748976592193040040772570917617131704021515333135976780936531852121;
216
-
217
- uint256 constant IC57x = 21171872089706061238775074496252912083959910399329167060392946506322625544564;
218
- uint256 constant IC57y = 15429469750853406189601635469881939298010968263097525388556812664971267343537;
219
-
220
- uint256 constant IC58x = 9378009548765211514364181606941357532358035127264086470709904426766410045080;
221
- uint256 constant IC58y = 10346651370981083204612107140589231614149737535985302319823933023217097989759;
222
-
223
- uint256 constant IC59x = 18996155430872067620946417728532425850513726810505534253787386986496269068307;
224
- uint256 constant IC59y = 1408755142594437048586710739784302474437388964337188259483940686170655603527;
225
-
226
- uint256 constant IC60x = 13385732611485159295327486851012428932670667990521799954182864750292620115242;
227
- uint256 constant IC60y = 1511001714907675470323666335145552334204226391732329014557589274687556503565;
228
-
229
- uint256 constant IC61x = 21701689113216314563246019428304978634145146333733873239995945367677257602803;
230
- uint256 constant IC61y = 44927088580570472822947081302858614394027254481505983593547679667048677233;
231
-
232
- uint256 constant IC62x = 11475196756653606109330874591270742906174057636597310055108599390793179466849;
233
- uint256 constant IC62y = 2909832247772404653045772908856874858387637958200438038358038041972945401456;
234
-
235
- uint256 constant IC63x = 10512940413078709226778492400473407305117671666272697766334756945749206494246;
236
- uint256 constant IC63y = 13571836766524294823562410147524401553135629628971567220427489730413505472995;
237
-
238
- uint256 constant IC64x = 21812205546285284114323506243231064234281789295215703128258814046995921553324;
239
- uint256 constant IC64y = 12528762275546304661989112042817641342233832724627683716110664214409153810810;
240
-
241
- uint256 constant IC65x = 21605387708261693993604529610601858636075846833246780020614367701965894251931;
242
- uint256 constant IC65y = 10859490170382255901965796969712709233327722817981617040947005043088746604100;
243
-
244
- uint256 constant IC66x = 2586114672700021905596240165706407928720663014985124379010260832689549342190;
245
- uint256 constant IC66y = 20564285136126254906143644270813621328622572679260303315021113146236875164644;
246
-
247
- uint256 constant IC67x = 557816223758475667503128858919641573123012584186819289001824761794031299761;
248
- uint256 constant IC67y = 16400820552135955374838528693350227903307748491431380200598164413878657016496;
249
-
250
- uint256 constant IC68x = 9962003302079829866365704565970577480947818029867073873182705870794924486732;
251
- uint256 constant IC68y = 716959000882388914933224762538655976188165551854183476375289643391246291447;
252
-
253
- uint256 constant IC69x = 738121844871965010340909379074836080571797595618811934782612542148159014603;
254
- uint256 constant IC69y = 6343426468949982224418464814630462387404174193078749473309178803559301781097;
255
-
256
- uint256 constant IC70x = 13167993707479779370165127426150242751710752055404662483188355303007105781663;
257
- uint256 constant IC70y = 15998477246531512448316744240263600463820021043655199717965676772522600163726;
258
-
259
- uint256 constant IC71x = 6051615335417766776481713647012549204383170149663665671339014559712920059029;
260
- uint256 constant IC71y = 18777589010538084395088017111689584008610970406370754651052702787753532440510;
261
-
262
- uint256 constant IC72x = 13518484334887151051524193663558080295036405626525739476619937083329238056227;
263
- uint256 constant IC72y = 671272787473478304462767914757283206754162090601498675181547048922838398804;
264
-
265
- uint256 constant IC73x = 11332025574825825389045297724672678673730034743303092093812878326602363199391;
266
- uint256 constant IC73y = 6971500342255842346183467065934307001962360965641526536511819154882339090486;
267
-
268
- uint256 constant IC74x = 19280068923219572359617296703509567677927783956506504727438833975290284867839;
269
- uint256 constant IC74y = 21308462790257506549638032299804907327009994232141774767975085271035248727468;
270
-
271
- uint256 constant IC75x = 17784936271398316732546359084011581973981698020278533365131649775053958857941;
272
- uint256 constant IC75y = 17450624016077512334010490921302499424593775655292728145919056170764369001630;
273
-
274
-
275
- // Memory data
276
- uint16 constant pVk = 0;
277
- uint16 constant pPairing = 128;
278
-
279
- uint16 constant pLastMem = 896;
280
-
281
- function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[75] calldata _pubSignals) public view returns (bool) {
282
- assembly {
283
- function checkField(v) {
284
- if iszero(lt(v, r)) {
285
- mstore(0, 0)
286
- return(0, 0x20)
287
- }
288
- }
289
-
290
- // G1 function to multiply a G1 value(x,y) to value in an address
291
- function g1_mulAccC(pR, x, y, s) {
292
- let success
293
- let mIn := mload(0x40)
294
- mstore(mIn, x)
295
- mstore(add(mIn, 32), y)
296
- mstore(add(mIn, 64), s)
297
-
298
- success := staticcall(sub(gas(), 2000), 7, mIn, 96, mIn, 64)
299
-
300
- if iszero(success) {
301
- mstore(0, 0)
302
- return(0, 0x20)
303
- }
304
-
305
- mstore(add(mIn, 64), mload(pR))
306
- mstore(add(mIn, 96), mload(add(pR, 32)))
307
-
308
- success := staticcall(sub(gas(), 2000), 6, mIn, 128, pR, 64)
309
-
310
- if iszero(success) {
311
- mstore(0, 0)
312
- return(0, 0x20)
313
- }
314
- }
315
-
316
- function checkPairing(pA, pB, pC, pubSignals, pMem) -> isOk {
317
- let _pPairing := add(pMem, pPairing)
318
- let _pVk := add(pMem, pVk)
319
-
320
- mstore(_pVk, IC0x)
321
- mstore(add(_pVk, 32), IC0y)
322
-
323
- // Compute the linear combination vk_x
324
-
325
- g1_mulAccC(_pVk, IC1x, IC1y, calldataload(add(pubSignals, 0)))
326
-
327
- g1_mulAccC(_pVk, IC2x, IC2y, calldataload(add(pubSignals, 32)))
328
-
329
- g1_mulAccC(_pVk, IC3x, IC3y, calldataload(add(pubSignals, 64)))
330
-
331
- g1_mulAccC(_pVk, IC4x, IC4y, calldataload(add(pubSignals, 96)))
332
-
333
- g1_mulAccC(_pVk, IC5x, IC5y, calldataload(add(pubSignals, 128)))
334
-
335
- g1_mulAccC(_pVk, IC6x, IC6y, calldataload(add(pubSignals, 160)))
336
-
337
- g1_mulAccC(_pVk, IC7x, IC7y, calldataload(add(pubSignals, 192)))
338
-
339
- g1_mulAccC(_pVk, IC8x, IC8y, calldataload(add(pubSignals, 224)))
340
-
341
- g1_mulAccC(_pVk, IC9x, IC9y, calldataload(add(pubSignals, 256)))
342
-
343
- g1_mulAccC(_pVk, IC10x, IC10y, calldataload(add(pubSignals, 288)))
344
-
345
- g1_mulAccC(_pVk, IC11x, IC11y, calldataload(add(pubSignals, 320)))
346
-
347
- g1_mulAccC(_pVk, IC12x, IC12y, calldataload(add(pubSignals, 352)))
348
-
349
- g1_mulAccC(_pVk, IC13x, IC13y, calldataload(add(pubSignals, 384)))
350
-
351
- g1_mulAccC(_pVk, IC14x, IC14y, calldataload(add(pubSignals, 416)))
352
-
353
- g1_mulAccC(_pVk, IC15x, IC15y, calldataload(add(pubSignals, 448)))
354
-
355
- g1_mulAccC(_pVk, IC16x, IC16y, calldataload(add(pubSignals, 480)))
356
-
357
- g1_mulAccC(_pVk, IC17x, IC17y, calldataload(add(pubSignals, 512)))
358
-
359
- g1_mulAccC(_pVk, IC18x, IC18y, calldataload(add(pubSignals, 544)))
360
-
361
- g1_mulAccC(_pVk, IC19x, IC19y, calldataload(add(pubSignals, 576)))
362
-
363
- g1_mulAccC(_pVk, IC20x, IC20y, calldataload(add(pubSignals, 608)))
364
-
365
- g1_mulAccC(_pVk, IC21x, IC21y, calldataload(add(pubSignals, 640)))
366
-
367
- g1_mulAccC(_pVk, IC22x, IC22y, calldataload(add(pubSignals, 672)))
368
-
369
- g1_mulAccC(_pVk, IC23x, IC23y, calldataload(add(pubSignals, 704)))
370
-
371
- g1_mulAccC(_pVk, IC24x, IC24y, calldataload(add(pubSignals, 736)))
372
-
373
- g1_mulAccC(_pVk, IC25x, IC25y, calldataload(add(pubSignals, 768)))
374
-
375
- g1_mulAccC(_pVk, IC26x, IC26y, calldataload(add(pubSignals, 800)))
376
-
377
- g1_mulAccC(_pVk, IC27x, IC27y, calldataload(add(pubSignals, 832)))
378
-
379
- g1_mulAccC(_pVk, IC28x, IC28y, calldataload(add(pubSignals, 864)))
380
-
381
- g1_mulAccC(_pVk, IC29x, IC29y, calldataload(add(pubSignals, 896)))
382
-
383
- g1_mulAccC(_pVk, IC30x, IC30y, calldataload(add(pubSignals, 928)))
384
-
385
- g1_mulAccC(_pVk, IC31x, IC31y, calldataload(add(pubSignals, 960)))
386
-
387
- g1_mulAccC(_pVk, IC32x, IC32y, calldataload(add(pubSignals, 992)))
388
-
389
- g1_mulAccC(_pVk, IC33x, IC33y, calldataload(add(pubSignals, 1024)))
390
-
391
- g1_mulAccC(_pVk, IC34x, IC34y, calldataload(add(pubSignals, 1056)))
392
-
393
- g1_mulAccC(_pVk, IC35x, IC35y, calldataload(add(pubSignals, 1088)))
394
-
395
- g1_mulAccC(_pVk, IC36x, IC36y, calldataload(add(pubSignals, 1120)))
396
-
397
- g1_mulAccC(_pVk, IC37x, IC37y, calldataload(add(pubSignals, 1152)))
398
-
399
- g1_mulAccC(_pVk, IC38x, IC38y, calldataload(add(pubSignals, 1184)))
400
-
401
- g1_mulAccC(_pVk, IC39x, IC39y, calldataload(add(pubSignals, 1216)))
402
-
403
- g1_mulAccC(_pVk, IC40x, IC40y, calldataload(add(pubSignals, 1248)))
404
-
405
- g1_mulAccC(_pVk, IC41x, IC41y, calldataload(add(pubSignals, 1280)))
406
-
407
- g1_mulAccC(_pVk, IC42x, IC42y, calldataload(add(pubSignals, 1312)))
408
-
409
- g1_mulAccC(_pVk, IC43x, IC43y, calldataload(add(pubSignals, 1344)))
410
-
411
- g1_mulAccC(_pVk, IC44x, IC44y, calldataload(add(pubSignals, 1376)))
412
-
413
- g1_mulAccC(_pVk, IC45x, IC45y, calldataload(add(pubSignals, 1408)))
414
-
415
- g1_mulAccC(_pVk, IC46x, IC46y, calldataload(add(pubSignals, 1440)))
416
-
417
- g1_mulAccC(_pVk, IC47x, IC47y, calldataload(add(pubSignals, 1472)))
418
-
419
- g1_mulAccC(_pVk, IC48x, IC48y, calldataload(add(pubSignals, 1504)))
420
-
421
- g1_mulAccC(_pVk, IC49x, IC49y, calldataload(add(pubSignals, 1536)))
422
-
423
- g1_mulAccC(_pVk, IC50x, IC50y, calldataload(add(pubSignals, 1568)))
424
-
425
- g1_mulAccC(_pVk, IC51x, IC51y, calldataload(add(pubSignals, 1600)))
426
-
427
- g1_mulAccC(_pVk, IC52x, IC52y, calldataload(add(pubSignals, 1632)))
428
-
429
- g1_mulAccC(_pVk, IC53x, IC53y, calldataload(add(pubSignals, 1664)))
430
-
431
- g1_mulAccC(_pVk, IC54x, IC54y, calldataload(add(pubSignals, 1696)))
432
-
433
- g1_mulAccC(_pVk, IC55x, IC55y, calldataload(add(pubSignals, 1728)))
434
-
435
- g1_mulAccC(_pVk, IC56x, IC56y, calldataload(add(pubSignals, 1760)))
436
-
437
- g1_mulAccC(_pVk, IC57x, IC57y, calldataload(add(pubSignals, 1792)))
438
-
439
- g1_mulAccC(_pVk, IC58x, IC58y, calldataload(add(pubSignals, 1824)))
440
-
441
- g1_mulAccC(_pVk, IC59x, IC59y, calldataload(add(pubSignals, 1856)))
442
-
443
- g1_mulAccC(_pVk, IC60x, IC60y, calldataload(add(pubSignals, 1888)))
444
-
445
- g1_mulAccC(_pVk, IC61x, IC61y, calldataload(add(pubSignals, 1920)))
446
-
447
- g1_mulAccC(_pVk, IC62x, IC62y, calldataload(add(pubSignals, 1952)))
448
-
449
- g1_mulAccC(_pVk, IC63x, IC63y, calldataload(add(pubSignals, 1984)))
450
-
451
- g1_mulAccC(_pVk, IC64x, IC64y, calldataload(add(pubSignals, 2016)))
452
-
453
- g1_mulAccC(_pVk, IC65x, IC65y, calldataload(add(pubSignals, 2048)))
454
-
455
- g1_mulAccC(_pVk, IC66x, IC66y, calldataload(add(pubSignals, 2080)))
456
-
457
- g1_mulAccC(_pVk, IC67x, IC67y, calldataload(add(pubSignals, 2112)))
458
-
459
- g1_mulAccC(_pVk, IC68x, IC68y, calldataload(add(pubSignals, 2144)))
460
-
461
- g1_mulAccC(_pVk, IC69x, IC69y, calldataload(add(pubSignals, 2176)))
462
-
463
- g1_mulAccC(_pVk, IC70x, IC70y, calldataload(add(pubSignals, 2208)))
464
-
465
- g1_mulAccC(_pVk, IC71x, IC71y, calldataload(add(pubSignals, 2240)))
466
-
467
- g1_mulAccC(_pVk, IC72x, IC72y, calldataload(add(pubSignals, 2272)))
468
-
469
- g1_mulAccC(_pVk, IC73x, IC73y, calldataload(add(pubSignals, 2304)))
470
-
471
- g1_mulAccC(_pVk, IC74x, IC74y, calldataload(add(pubSignals, 2336)))
472
-
473
- g1_mulAccC(_pVk, IC75x, IC75y, calldataload(add(pubSignals, 2368)))
474
-
475
-
476
- // -A
477
- mstore(_pPairing, calldataload(pA))
478
- mstore(add(_pPairing, 32), mod(sub(q, calldataload(add(pA, 32))), q))
479
-
480
- // B
481
- mstore(add(_pPairing, 64), calldataload(pB))
482
- mstore(add(_pPairing, 96), calldataload(add(pB, 32)))
483
- mstore(add(_pPairing, 128), calldataload(add(pB, 64)))
484
- mstore(add(_pPairing, 160), calldataload(add(pB, 96)))
485
-
486
- // alpha1
487
- mstore(add(_pPairing, 192), alphax)
488
- mstore(add(_pPairing, 224), alphay)
489
-
490
- // beta2
491
- mstore(add(_pPairing, 256), betax1)
492
- mstore(add(_pPairing, 288), betax2)
493
- mstore(add(_pPairing, 320), betay1)
494
- mstore(add(_pPairing, 352), betay2)
495
-
496
- // vk_x
497
- mstore(add(_pPairing, 384), mload(add(pMem, pVk)))
498
- mstore(add(_pPairing, 416), mload(add(pMem, add(pVk, 32))))
499
-
500
-
501
- // gamma2
502
- mstore(add(_pPairing, 448), gammax1)
503
- mstore(add(_pPairing, 480), gammax2)
504
- mstore(add(_pPairing, 512), gammay1)
505
- mstore(add(_pPairing, 544), gammay2)
506
-
507
- // C
508
- mstore(add(_pPairing, 576), calldataload(pC))
509
- mstore(add(_pPairing, 608), calldataload(add(pC, 32)))
510
-
511
- // delta2
512
- mstore(add(_pPairing, 640), deltax1)
513
- mstore(add(_pPairing, 672), deltax2)
514
- mstore(add(_pPairing, 704), deltay1)
515
- mstore(add(_pPairing, 736), deltay2)
516
-
517
-
518
- let success := staticcall(sub(gas(), 2000), 8, _pPairing, 768, _pPairing, 0x20)
519
-
520
- isOk := and(success, mload(_pPairing))
521
- }
522
-
523
- let pMem := mload(0x40)
524
- mstore(0x40, add(pMem, pLastMem))
525
-
526
- // Validate that all evaluations ∈ F
527
-
528
- checkField(calldataload(add(_pubSignals, 0)))
529
-
530
- checkField(calldataload(add(_pubSignals, 32)))
531
-
532
- checkField(calldataload(add(_pubSignals, 64)))
533
-
534
- checkField(calldataload(add(_pubSignals, 96)))
535
-
536
- checkField(calldataload(add(_pubSignals, 128)))
537
-
538
- checkField(calldataload(add(_pubSignals, 160)))
539
-
540
- checkField(calldataload(add(_pubSignals, 192)))
541
-
542
- checkField(calldataload(add(_pubSignals, 224)))
543
-
544
- checkField(calldataload(add(_pubSignals, 256)))
545
-
546
- checkField(calldataload(add(_pubSignals, 288)))
547
-
548
- checkField(calldataload(add(_pubSignals, 320)))
549
-
550
- checkField(calldataload(add(_pubSignals, 352)))
551
-
552
- checkField(calldataload(add(_pubSignals, 384)))
553
-
554
- checkField(calldataload(add(_pubSignals, 416)))
555
-
556
- checkField(calldataload(add(_pubSignals, 448)))
557
-
558
- checkField(calldataload(add(_pubSignals, 480)))
559
-
560
- checkField(calldataload(add(_pubSignals, 512)))
561
-
562
- checkField(calldataload(add(_pubSignals, 544)))
563
-
564
- checkField(calldataload(add(_pubSignals, 576)))
565
-
566
- checkField(calldataload(add(_pubSignals, 608)))
567
-
568
- checkField(calldataload(add(_pubSignals, 640)))
569
-
570
- checkField(calldataload(add(_pubSignals, 672)))
571
-
572
- checkField(calldataload(add(_pubSignals, 704)))
573
-
574
- checkField(calldataload(add(_pubSignals, 736)))
575
-
576
- checkField(calldataload(add(_pubSignals, 768)))
577
-
578
- checkField(calldataload(add(_pubSignals, 800)))
579
-
580
- checkField(calldataload(add(_pubSignals, 832)))
581
-
582
- checkField(calldataload(add(_pubSignals, 864)))
583
-
584
- checkField(calldataload(add(_pubSignals, 896)))
585
-
586
- checkField(calldataload(add(_pubSignals, 928)))
587
-
588
- checkField(calldataload(add(_pubSignals, 960)))
589
-
590
- checkField(calldataload(add(_pubSignals, 992)))
591
-
592
- checkField(calldataload(add(_pubSignals, 1024)))
593
-
594
- checkField(calldataload(add(_pubSignals, 1056)))
595
-
596
- checkField(calldataload(add(_pubSignals, 1088)))
597
-
598
- checkField(calldataload(add(_pubSignals, 1120)))
599
-
600
- checkField(calldataload(add(_pubSignals, 1152)))
601
-
602
- checkField(calldataload(add(_pubSignals, 1184)))
603
-
604
- checkField(calldataload(add(_pubSignals, 1216)))
605
-
606
- checkField(calldataload(add(_pubSignals, 1248)))
607
-
608
- checkField(calldataload(add(_pubSignals, 1280)))
609
-
610
- checkField(calldataload(add(_pubSignals, 1312)))
611
-
612
- checkField(calldataload(add(_pubSignals, 1344)))
613
-
614
- checkField(calldataload(add(_pubSignals, 1376)))
615
-
616
- checkField(calldataload(add(_pubSignals, 1408)))
617
-
618
- checkField(calldataload(add(_pubSignals, 1440)))
619
-
620
- checkField(calldataload(add(_pubSignals, 1472)))
621
-
622
- checkField(calldataload(add(_pubSignals, 1504)))
623
-
624
- checkField(calldataload(add(_pubSignals, 1536)))
625
-
626
- checkField(calldataload(add(_pubSignals, 1568)))
627
-
628
- checkField(calldataload(add(_pubSignals, 1600)))
629
-
630
- checkField(calldataload(add(_pubSignals, 1632)))
631
-
632
- checkField(calldataload(add(_pubSignals, 1664)))
633
-
634
- checkField(calldataload(add(_pubSignals, 1696)))
635
-
636
- checkField(calldataload(add(_pubSignals, 1728)))
637
-
638
- checkField(calldataload(add(_pubSignals, 1760)))
639
-
640
- checkField(calldataload(add(_pubSignals, 1792)))
641
-
642
- checkField(calldataload(add(_pubSignals, 1824)))
643
-
644
- checkField(calldataload(add(_pubSignals, 1856)))
645
-
646
- checkField(calldataload(add(_pubSignals, 1888)))
647
-
648
- checkField(calldataload(add(_pubSignals, 1920)))
649
-
650
- checkField(calldataload(add(_pubSignals, 1952)))
651
-
652
- checkField(calldataload(add(_pubSignals, 1984)))
653
-
654
- checkField(calldataload(add(_pubSignals, 2016)))
655
-
656
- checkField(calldataload(add(_pubSignals, 2048)))
657
-
658
- checkField(calldataload(add(_pubSignals, 2080)))
659
-
660
- checkField(calldataload(add(_pubSignals, 2112)))
661
-
662
- checkField(calldataload(add(_pubSignals, 2144)))
663
-
664
- checkField(calldataload(add(_pubSignals, 2176)))
665
-
666
- checkField(calldataload(add(_pubSignals, 2208)))
667
-
668
- checkField(calldataload(add(_pubSignals, 2240)))
669
-
670
- checkField(calldataload(add(_pubSignals, 2272)))
671
-
672
- checkField(calldataload(add(_pubSignals, 2304)))
673
-
674
- checkField(calldataload(add(_pubSignals, 2336)))
675
-
676
- checkField(calldataload(add(_pubSignals, 2368)))
677
-
678
-
679
- // Validate all evaluations
680
- let isValid := checkPairing(_pA, _pB, _pC, _pubSignals, pMem)
681
-
682
- mstore(0, isValid)
683
- return(0, 0x20)
684
- }
685
- }
686
- }
19
+ import {Verifier_AnonEncNullifierKycBatch} from "./impl/anon_enc_nullifier_kyc_batch.sol";
20
+
21
+ contract Groth16Verifier_AnonEncNullifierKycBatch is
22
+ Verifier_AnonEncNullifierKycBatch
23
+ {
24
+ function verify(
25
+ uint[2] calldata _pA,
26
+ uint[2][2] calldata _pB,
27
+ uint[2] calldata _pC,
28
+ uint[] calldata _pubSignals
29
+ ) public view returns (bool) {
30
+ uint256[75] memory fixedSizeInputs;
31
+ for (uint256 i = 0; i < fixedSizeInputs.length; i++) {
32
+ fixedSizeInputs[i] = _pubSignals[i];
33
+ }
34
+ return this.verifyProof(_pA, _pB, _pC, fixedSizeInputs);
35
+ }
36
+ }