@maci-protocol/website 0.0.0-ci.e3476db → 0.0.0-ci.eb89f0b
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +1 -2
- package/blog/2024-02-28-maci-v1.2.0.md +1 -1
- package/blog/2024-08-10-maci-v2.md +1 -1
- package/package.json +4 -4
- package/src/pages/roadmap.md +39 -80
- package/static/img/circuits/MACI-Circuits.excalidraw +79 -79
- package/static/img/circuits/ecdh.svg +1 -1
- package/static/img/circuits/messageToCommand.svg +1 -1
- package/static/img/circuits/messageValidator.svg +1 -1
- package/static/img/circuits/privToPubkey.svg +1 -1
- package/static/img/circuits/processMessages.svg +1 -1
- package/static/img/circuits/processMessagesInputHasher.svg +1 -1
- package/static/img/circuits/processMessages_2_0.svg +1 -1
- package/static/img/circuits/processOne.svg +1 -1
- package/static/img/circuits/processTopup.svg +1 -1
- package/static/img/circuits/quinBatchLeavesExists.svg +1 -1
- package/static/img/circuits/quinCheckRoot.svg +1 -1
- package/static/img/circuits/quinGeneratePathIndices.svg +1 -1
- package/static/img/circuits/quinSelector.svg +1 -1
- package/static/img/circuits/resultsCommitmentVerifier.svg +1 -1
- package/static/img/circuits/splicer.svg +1 -1
- package/static/img/circuits/tallyInputHasher.svg +1 -1
- package/static/img/circuits/tallyVotes.svg +1 -1
- package/static/img/circuits/verifySignature.svg +1 -1
- package/versioned_docs/version-v3.x/core-concepts/key-change.md +28 -28
- package/versioned_docs/version-v3.x/core-concepts/maci-keys.md +1 -1
- package/versioned_docs/version-v3.x/core-concepts/poll-types.md +2 -2
- package/versioned_docs/version-v3.x/core-concepts/polls.md +3 -3
- package/versioned_docs/version-v3.x/core-concepts/spec.md +35 -101
- package/versioned_docs/version-v3.x/core-concepts/state-leaf.md +2 -2
- package/versioned_docs/version-v3.x/guides/compile-circuits.md +7 -7
- package/versioned_docs/version-v3.x/guides/integrating.md +8 -8
- package/versioned_docs/version-v3.x/guides/testing/testing-in-detail.md +1 -1
- package/versioned_docs/version-v3.x/guides/troubleshooting.md +11 -11
- package/versioned_docs/version-v3.x/quick-start.md +6 -6
- package/versioned_docs/version-v3.x/security/audit.md +2 -2
- package/versioned_docs/version-v3.x/supported-networks/deployed-contracts.md +2 -2
- package/versioned_docs/version-v3.x/technical-references/smart-contracts/MACI.md +5 -5
- package/versioned_docs/version-v3.x/technical-references/smart-contracts/Poll.md +7 -7
- package/versioned_docs/version-v3.x/technical-references/smart-contracts/Tally.md +2 -2
- package/versioned_docs/version-v3.x/technical-references/smart-contracts/VkRegistry.md +5 -5
- package/versioned_docs/version-v3.x/technical-references/zk-snark-circuits/joinPoll.md +3 -4
- package/versioned_docs/version-v3.x/technical-references/zk-snark-circuits/processMessages.md +12 -12
- package/versioned_docs/version-v3.x/technical-references/zk-snark-circuits/tallyVotes.md +2 -2
- package/versioned_docs/version-v3.x/technical-references/zk-snark-circuits/utilities.md +7 -7
|
@@ -17,12 +17,12 @@ As an example, a [contract](https://github.com/ctrlc03/minimalQF/blob/main/contr
|
|
|
17
17
|
|
|
18
18
|
```javascript
|
|
19
19
|
/// @inheritdoc IMACI
|
|
20
|
-
function signUp(
|
|
20
|
+
function signUp(PublicKey memory _publicKey, bytes memory _signUpPolicyData) public virtual {
|
|
21
21
|
// ensure we do not have more signups than what the circuits support
|
|
22
22
|
if (leanIMTData.size >= maxSignups) revert TooManySignups();
|
|
23
23
|
|
|
24
24
|
// ensure that the public key is on the baby jubjub curve
|
|
25
|
-
if (!CurveBabyJubJub.isOnCurve(
|
|
25
|
+
if (!CurveBabyJubJub.isOnCurve(_publicKey.x, _publicKey.y)) {
|
|
26
26
|
revert InvalidPubKey();
|
|
27
27
|
}
|
|
28
28
|
|
|
@@ -31,13 +31,13 @@ function signUp(PubKey memory _pubKey, bytes memory _signUpPolicyData) public vi
|
|
|
31
31
|
signUpPolicy.enforce(msg.sender, _signUpPolicyData);
|
|
32
32
|
|
|
33
33
|
// Hash the public key and insert it into the tree.
|
|
34
|
-
uint256 pubKeyHash = hashLeftRight(
|
|
34
|
+
uint256 pubKeyHash = hashLeftRight(_publicKey.x, _publicKey.y);
|
|
35
35
|
uint256 stateRoot = InternalLeanIMT._insert(leanIMTData, pubKeyHash);
|
|
36
36
|
|
|
37
37
|
// Store the current state tree root in the array
|
|
38
38
|
stateRootsOnSignUp.push(stateRoot);
|
|
39
39
|
|
|
40
|
-
emit SignUp(leanIMTData.size - 1, block.timestamp,
|
|
40
|
+
emit SignUp(leanIMTData.size - 1, block.timestamp, _publicKey.x, _publicKey.y);
|
|
41
41
|
}
|
|
42
42
|
```
|
|
43
43
|
|
|
@@ -71,7 +71,7 @@ On the other hand, the Poll contract can be inherited to expand functionality su
|
|
|
71
71
|
```javascript
|
|
72
72
|
function joinPoll(
|
|
73
73
|
uint256 _nullifier,
|
|
74
|
-
|
|
74
|
+
PublicKey calldata _publicKey,
|
|
75
75
|
uint256 _stateRootIndex,
|
|
76
76
|
uint256[8] calldata _proof,
|
|
77
77
|
bytes memory _signUpPolicyData,
|
|
@@ -86,7 +86,7 @@ function joinPoll(
|
|
|
86
86
|
pollNullifiers[_nullifier] = true;
|
|
87
87
|
|
|
88
88
|
// Verify user's proof
|
|
89
|
-
if (!verifyJoiningPollProof(_nullifier, _stateRootIndex,
|
|
89
|
+
if (!verifyJoiningPollProof(_nullifier, _stateRootIndex, _publicKey, _proof)) {
|
|
90
90
|
revert InvalidPollProof();
|
|
91
91
|
}
|
|
92
92
|
|
|
@@ -100,7 +100,7 @@ function joinPoll(
|
|
|
100
100
|
);
|
|
101
101
|
|
|
102
102
|
// Store user in the pollStateTree
|
|
103
|
-
uint256 stateLeaf = hashStateLeaf(StateLeaf(
|
|
103
|
+
uint256 stateLeaf = hashStateLeaf(StateLeaf(_publicKey, voiceCreditBalance, block.timestamp));
|
|
104
104
|
|
|
105
105
|
uint256 stateRoot = InternalLazyIMT._insert(pollStateTree, stateLeaf);
|
|
106
106
|
|
|
@@ -108,7 +108,7 @@ function joinPoll(
|
|
|
108
108
|
pollStateRootsOnJoin.push(stateRoot);
|
|
109
109
|
|
|
110
110
|
uint256 pollStateIndex = pollStateTree.numberOfLeaves - 1;
|
|
111
|
-
emit PollJoined(
|
|
111
|
+
emit PollJoined(_publicKey.x, _publicKey.y, voiceCreditBalance, block.timestamp, _nullifier, pollStateIndex);
|
|
112
112
|
}
|
|
113
113
|
```
|
|
114
114
|
|
|
@@ -176,7 +176,7 @@ This script contains a number of actions which touch all of the parts of MACI, a
|
|
|
176
176
|
|
|
177
177
|
Looking at this in more details we do the following:
|
|
178
178
|
|
|
179
|
-
1. Deploy a `
|
|
179
|
+
1. Deploy a `VerifyingKeysRegistry` contract
|
|
180
180
|
2. Set the verification keys on this smart contract
|
|
181
181
|
3. Deploy a `MACI` contract (and associated utility contracts)
|
|
182
182
|
4. Deploy a Poll from the MACI contract.
|
|
@@ -7,14 +7,14 @@ sidebar_position: 5
|
|
|
7
7
|
|
|
8
8
|
# Troubleshooting
|
|
9
9
|
|
|
10
|
-
## cli: `
|
|
10
|
+
## cli: `generateProofs` command failure
|
|
11
11
|
|
|
12
12
|
### Case: missing `.dat` files
|
|
13
13
|
|
|
14
14
|
If your logs look like the following, then make sure you have `ProcessMessages_10-2-1-2_test.dat` and `TallyVotes_10-1-2_test.dat` files in the same directory as your zkeys:
|
|
15
15
|
|
|
16
16
|
```
|
|
17
|
-
node build/ts/index.js
|
|
17
|
+
node build/ts/index.js generateProofs -x 0xf204a4Ef082f5c04bB89F7D5E6568B796096735a \
|
|
18
18
|
> -sk macisk.49953af3585856f539d194b46c82f4ed54ec508fb9b882940cbe68bbc57e59e \
|
|
19
19
|
> -o 0 \
|
|
20
20
|
> -r ~/rapidsnark/build/prover \
|
|
@@ -38,10 +38,10 @@ Aborted (core dumped)
|
|
|
38
38
|
Error: could not generate proof.
|
|
39
39
|
Error: Error executing ./zkeys/ProcessMessages_10-2-1-2_test /tmp/tmp-9904-zG0k8YPTATWB/input.json /tmp/tmp-9904-zG0k8YPTATWB/output.wtns
|
|
40
40
|
at genProof (/home/ubuntu/maci/circuits/ts/index.ts:44:15)
|
|
41
|
-
at /home/ubuntu/maci/cli/ts/
|
|
42
|
-
at step (/home/ubuntu/maci/cli/build/
|
|
43
|
-
at Object.next (/home/ubuntu/maci/cli/build/
|
|
44
|
-
at fulfilled (/home/ubuntu/maci/cli/build/
|
|
41
|
+
at /home/ubuntu/maci/cli/ts/generateProofs.ts:339:25
|
|
42
|
+
at step (/home/ubuntu/maci/cli/build/generateProofs.js:33:23)
|
|
43
|
+
at Object.next (/home/ubuntu/maci/cli/build/generateProofs.js:14:53)
|
|
44
|
+
at fulfilled (/home/ubuntu/maci/cli/build/generateProofs.js:5:58)
|
|
45
45
|
```
|
|
46
46
|
|
|
47
47
|
You can generate the missing `.dat` files using the following command:
|
|
@@ -54,7 +54,7 @@ pnpm build:circuits-c -- --outPath ../cli/zkeys
|
|
|
54
54
|
|
|
55
55
|
### Case `Commitment mismatch`
|
|
56
56
|
|
|
57
|
-
If your log looks like the following, that's because you have already run the `prove` command. You can access the `cli` and attempt again by executing the `
|
|
57
|
+
If your log looks like the following, that's because you have already run the `prove` command. You can access the `cli` and attempt again by executing the `generateProofs` command.
|
|
58
58
|
|
|
59
59
|
```
|
|
60
60
|
Error: commitment mismatch
|
|
@@ -69,7 +69,7 @@ Error: commitment mismatch
|
|
|
69
69
|
ELIFECYCLE Command failed with exit code 1.
|
|
70
70
|
```
|
|
71
71
|
|
|
72
|
-
This is because commitments are generated using random salts, thus will differ at each `
|
|
72
|
+
This is because commitments are generated using random salts, thus will differ at each `generateProofs` run.
|
|
73
73
|
|
|
74
74
|
In [core/Poll.ts](https://github.com/privacy-scaling-explorations/maci/blob/dev/packages/core/ts/Poll.ts):
|
|
75
75
|
|
|
@@ -84,7 +84,7 @@ while (this.sbSalts[this.currentMessageBatchIndex!] === newSbSalt) {
|
|
|
84
84
|
|
|
85
85
|
### Case `AssertionError`
|
|
86
86
|
|
|
87
|
-
This could happen when you run `prove` in the `contracts` package, or run `
|
|
87
|
+
This could happen when you run `prove` in the `contracts` package, or run `generateProofs` in the `cli` package. If your log looks like the following, there are two possible reasons:
|
|
88
88
|
|
|
89
89
|
1. If your MACI keypair for the coordinator was generated based on a previous version, it may have been generated incorrectly due to a breaking change in a third-party package (`zk-kit/eddsa-poseidon`). Please generate a new pair and run the whole process again.
|
|
90
90
|
2. The provided private key is unmatched to the public key which deployed the poll, you will need to input the correct private key.
|
|
@@ -130,7 +130,7 @@ TypeError: cannot filter non-indexed parameters; must be null (argument="contrac
|
|
|
130
130
|
}
|
|
131
131
|
```
|
|
132
132
|
|
|
133
|
-
This could happen during running `
|
|
133
|
+
This could happen during running `generateProofs` in `cli` package, or running `prove` in `contracts` package.
|
|
134
134
|
Be aware that we updated several parameters to `indexed`:
|
|
135
135
|
|
|
136
136
|
```javascript
|
|
@@ -144,7 +144,7 @@ Please remember to pull the latest MACI repo updates(`git fetch origin && git pu
|
|
|
144
144
|
|
|
145
145
|
### Verifier contract found the proof invalid
|
|
146
146
|
|
|
147
|
-
If your log looks like the following, that's because the zkey and wasm files added to the [`
|
|
147
|
+
If your log looks like the following, that's because the zkey and wasm files added to the [`VerifyingKeysRegistry` contract](/docs/technical-references/smart-contracts/VerifyingKeysRegistry) are different from what you use to run the **prove** command. Check if you're using the correct zkey and wasm files.
|
|
148
148
|
|
|
149
149
|
```
|
|
150
150
|
Error: The verifier contract found the proof invalid.
|
|
@@ -73,7 +73,7 @@ Currently, the ceremony artifacts work with MACI version up to 2.x
|
|
|
73
73
|
In order to run MACI polls, a coordinator is required to publish their MACI public key. You will need to generate a MACI keypair, and treat the private key just as your ethereum private keys. Please store them in a safe place as you won't be able to finish a round if you lose access, or if compromised a bad actor could decrypt the vote and publish them online. You can generate a new key pair using maci-cli by running the following command in the root of the project:
|
|
74
74
|
|
|
75
75
|
```bash
|
|
76
|
-
pnpm run
|
|
76
|
+
pnpm run generateMaciKeyPair
|
|
77
77
|
```
|
|
78
78
|
|
|
79
79
|
### Set the .env
|
|
@@ -131,9 +131,9 @@ For testing we suggest using the **FreeForAlPolicy** as it allows anyone to sign
|
|
|
131
131
|
| **stateTreeDepth** | Defines how many users the system supports. |
|
|
132
132
|
| **policy** | Defines which policy to use. |
|
|
133
133
|
|
|
134
|
-
####
|
|
134
|
+
#### VerifyingKeysRegistry
|
|
135
135
|
|
|
136
|
-
The
|
|
136
|
+
The VerifyingKeysRegistry hold the verifying keys used to verify the proofs, on the zkeys field we define the path to the zero knowledge artifacts we downloaded in the previous steps.
|
|
137
137
|
|
|
138
138
|
| Property | Description |
|
|
139
139
|
| ----------------------- | ------------------------------------------------------------------------------------ |
|
|
@@ -156,7 +156,7 @@ The recommended values for test keys are: **10-1-2-2-1**. For ceremony keys: **1
|
|
|
156
156
|
| --------------------------- | ----------------------------------------------------------------- |
|
|
157
157
|
| **pollStartDate** | Defines when the poll starts in seconds. |
|
|
158
158
|
| **pollEndDate** | Defines how long is going to be the poll in seconds. |
|
|
159
|
-
| **
|
|
159
|
+
| **coordinatorPublicKey** | Defines the coordinator public MACI key. |
|
|
160
160
|
| **useQuadraticVoting** | Defines if the poll uses quadratic voting or not. |
|
|
161
161
|
| **policy** | Defines the policy of the poll. |
|
|
162
162
|
| **relayers** | Defines an array of addresses that are allowed to relay messages. |
|
|
@@ -277,7 +277,7 @@ Once the proofs are generated, and results tallied, the results (Tally) are writ
|
|
|
277
277
|
"salt": "0x24f57b75c227987727c13d1e83409d70478b42bdc12a4a4df8129c72fbaf5aaf",
|
|
278
278
|
"commitment": "0xb4ebe68b0da828c0b978ddee86ba934b8e215499ac766491f236ad85fd606de"
|
|
279
279
|
},
|
|
280
|
-
"
|
|
280
|
+
"perVoteOptionSpentVoiceCredits": {
|
|
281
281
|
"tally": [
|
|
282
282
|
"81",
|
|
283
283
|
"0",
|
|
@@ -315,4 +315,4 @@ We observe an array named results, which holds the aggregated votes for each opt
|
|
|
315
315
|
|
|
316
316
|
The `totalSpentVoiceCredits` object contains the total amount of voice credits spent in the poll. This is the sum of all voice credits spent by all voters, and in quadratic voting, is the sum of the squares of all votes.
|
|
317
317
|
|
|
318
|
-
The `
|
|
318
|
+
The `perVoteOptionSpentVoiceCredits` will contain the amount of voice credits spent per vote option. In this case, the first option received 81 voice credits, and every other option received 0 voice credits. This is because there was only one valid vote casted, with a weight of 9. Given the quadratic voting formula, the total amount of voice credits spent is 81.
|
|
@@ -38,7 +38,7 @@ We would like to thank the Veridise team for their effort in keeping open source
|
|
|
38
38
|
|
|
39
39
|
**Description**
|
|
40
40
|
|
|
41
|
-
In the template `
|
|
41
|
+
In the template `QuinarySelector`, if you want to confirm the input signal index is a valid integer less than 2\*\*3, you should add Num2bits(3) to check it.
|
|
42
42
|
|
|
43
43
|
**Code Location**
|
|
44
44
|
|
|
@@ -119,7 +119,7 @@ greaterThan[i].in[1] <== index;
|
|
|
119
119
|
|
|
120
120
|
**Description**
|
|
121
121
|
|
|
122
|
-
In the template `
|
|
122
|
+
In the template `QuinaryGeneratePathIndices`, the constraints of the `signal n[levels + 1]` don't perform well for division and modulo counting.
|
|
123
123
|
|
|
124
124
|
**Code Location**
|
|
125
125
|
|
|
@@ -7,7 +7,7 @@ sidebar_position: 2
|
|
|
7
7
|
|
|
8
8
|
There are a number of MACI's smart contracts which can be re-used by different deployments. These are the following:
|
|
9
9
|
|
|
10
|
-
- [
|
|
10
|
+
- [VerifyingKeysRegistry](https://github.com/privacy-scaling-explorations/maci/blob/dev/contracts/contracts/VerifyingKeysRegistry.sol)
|
|
11
11
|
- [PoseidonHashers](https://github.com/privacy-scaling-explorations/maci/blob/dev/contracts/contracts/crypto/Hasher.sol)
|
|
12
12
|
- [PollFactory](https://github.com/privacy-scaling-explorations/maci/blob/dev/contracts/contracts/PollFactory.sol)
|
|
13
13
|
- [MessageProcessorFactory](https://github.com/privacy-scaling-explorations/maci/blob/dev/contracts/contracts/MessageProcessorFactory.sol)
|
|
@@ -29,7 +29,7 @@ cd cli && node build/ts/index.js checkVerifyingKeys -q false -vk 0x74569d524a193
|
|
|
29
29
|
```
|
|
30
30
|
|
|
31
31
|
:::info
|
|
32
|
-
You should change the -vk parameter to the
|
|
32
|
+
You should change the -vk parameter to the VerifyingKeysRegistry address for the chain you are deploying to. Also you might need to modify the parameters based on the circuit configuration. Please refer to the [circuits page](/docs/technical-references/zk-snark-circuits/setup) for more information. Also you can add `-uq false` if you want to check non quadratic voting keys.
|
|
33
33
|
:::
|
|
34
34
|
|
|
35
35
|
## Contract Addresses
|
|
@@ -62,12 +62,12 @@ This function does the following:
|
|
|
62
62
|
- hashes the public key and inserts it into the state tree.
|
|
63
63
|
|
|
64
64
|
```ts
|
|
65
|
-
function signUp(
|
|
65
|
+
function signUp(PublicKey memory _publicKey, bytes memory _signUpPolicyData) public virtual {
|
|
66
66
|
// ensure we do not have more signups than what the circuits support
|
|
67
67
|
if (leanIMTData.size >= maxSignups) revert TooManySignups();
|
|
68
68
|
|
|
69
69
|
// ensure that the public key is on the baby jubjub curve
|
|
70
|
-
if (!CurveBabyJubJub.isOnCurve(
|
|
70
|
+
if (!CurveBabyJubJub.isOnCurve(_publicKey.x, _publicKey.y)) {
|
|
71
71
|
revert InvalidPubKey();
|
|
72
72
|
}
|
|
73
73
|
|
|
@@ -76,13 +76,13 @@ function signUp(PubKey memory _pubKey, bytes memory _signUpPolicyData) public vi
|
|
|
76
76
|
signUpPolicy.register(msg.sender, _signUpPolicyData);
|
|
77
77
|
|
|
78
78
|
// Hash the public key and insert it into the tree.
|
|
79
|
-
uint256 pubKeyHash = hashLeftRight(
|
|
79
|
+
uint256 pubKeyHash = hashLeftRight(_publicKey.x, _publicKey.y);
|
|
80
80
|
uint256 stateRoot = InternalLeanIMT._insert(leanIMTData, pubKeyHash);
|
|
81
81
|
|
|
82
82
|
// Store the current state tree root in the array
|
|
83
83
|
stateRootsOnSignUp.push(stateRoot);
|
|
84
84
|
|
|
85
|
-
emit SignUp(leanIMTData.size - 1, block.timestamp,
|
|
85
|
+
emit SignUp(leanIMTData.size - 1, block.timestamp, _publicKey.x, _publicKey.y);
|
|
86
86
|
}
|
|
87
87
|
```
|
|
88
88
|
|
|
@@ -156,5 +156,5 @@ Polls require the following information:
|
|
|
156
156
|
- `voteOptions`: the number of vote options for the poll
|
|
157
157
|
|
|
158
158
|
:::info
|
|
159
|
-
Please be advised that the number of signups in the MACI contract (number of leaves in the merkle tree holding MACI's state) considers the initial zero leaf as one signup. For this reason, when accounting for the real users signed up to MACI, you should subtract one from the value returned from the `
|
|
159
|
+
Please be advised that the number of signups in the MACI contract (number of leaves in the merkle tree holding MACI's state) considers the initial zero leaf as one signup. For this reason, when accounting for the real users signed up to MACI, you should subtract one from the value returned from the `totalSignups` function.
|
|
160
160
|
:::
|
|
@@ -26,7 +26,7 @@ The `joinPoll` function looks as follows:
|
|
|
26
26
|
/// @inheritdoc IPoll
|
|
27
27
|
function joinPoll(
|
|
28
28
|
uint256 _nullifier,
|
|
29
|
-
|
|
29
|
+
PublicKey calldata _publicKey,
|
|
30
30
|
uint256 _stateRootIndex,
|
|
31
31
|
uint256[8] calldata _proof,
|
|
32
32
|
bytes memory _signUpPolicyData,
|
|
@@ -41,7 +41,7 @@ The `joinPoll` function looks as follows:
|
|
|
41
41
|
pollNullifiers[_nullifier] = true;
|
|
42
42
|
|
|
43
43
|
// Verify user's proof
|
|
44
|
-
if (!verifyJoiningPollProof(_nullifier, _stateRootIndex,
|
|
44
|
+
if (!verifyJoiningPollProof(_nullifier, _stateRootIndex, _publicKey, _proof)) {
|
|
45
45
|
revert InvalidPollProof();
|
|
46
46
|
}
|
|
47
47
|
|
|
@@ -55,7 +55,7 @@ The `joinPoll` function looks as follows:
|
|
|
55
55
|
);
|
|
56
56
|
|
|
57
57
|
// Store user in the pollStateTree
|
|
58
|
-
uint256 stateLeaf = hashStateLeaf(StateLeaf(
|
|
58
|
+
uint256 stateLeaf = hashStateLeaf(StateLeaf(_publicKey, voiceCreditBalance, block.timestamp));
|
|
59
59
|
|
|
60
60
|
uint256 stateRoot = InternalLazyIMT._insert(pollStateTree, stateLeaf);
|
|
61
61
|
|
|
@@ -63,7 +63,7 @@ The `joinPoll` function looks as follows:
|
|
|
63
63
|
pollStateRootsOnJoin.push(stateRoot);
|
|
64
64
|
|
|
65
65
|
uint256 pollStateIndex = pollStateTree.numberOfLeaves - 1;
|
|
66
|
-
emit PollJoined(
|
|
66
|
+
emit PollJoined(_publicKey.x, _publicKey.y, voiceCreditBalance, block.timestamp, _nullifier, pollStateIndex);
|
|
67
67
|
}
|
|
68
68
|
```
|
|
69
69
|
|
|
@@ -72,7 +72,7 @@ The `joinPoll` function looks as follows:
|
|
|
72
72
|
The `publishMessage` function looks as follows:
|
|
73
73
|
|
|
74
74
|
```ts
|
|
75
|
-
function publishMessage(Message calldata _message,
|
|
75
|
+
function publishMessage(Message calldata _message, PublicKey calldata _encPubKey) public virtual isOpenForVoting {
|
|
76
76
|
// check if the public key is on the curve
|
|
77
77
|
if (!CurveBabyJubJub.isOnCurve(_encPubKey.x, _encPubKey.y)) {
|
|
78
78
|
revert InvalidPubKey();
|
|
@@ -84,7 +84,7 @@ function publishMessage(Message calldata _message, PubKey calldata _encPubKey) p
|
|
|
84
84
|
}
|
|
85
85
|
|
|
86
86
|
// compute current message hash
|
|
87
|
-
uint256 messageHash =
|
|
87
|
+
uint256 messageHash = hashMessageAndPublicKey(_message, _encPubKey);
|
|
88
88
|
|
|
89
89
|
// update current message chain hash
|
|
90
90
|
updateChainHash(messageHash);
|
|
@@ -96,7 +96,7 @@ function publishMessage(Message calldata _message, PubKey calldata _encPubKey) p
|
|
|
96
96
|
The `publishMessageBatch` function looks as follows:
|
|
97
97
|
|
|
98
98
|
```ts
|
|
99
|
-
function publishMessageBatch(Message[] calldata _messages,
|
|
99
|
+
function publishMessageBatch(Message[] calldata _messages, PublicKey[] calldata _encPubKeys) public virtual {
|
|
100
100
|
if (_messages.length != _encPubKeys.length) {
|
|
101
101
|
revert InvalidBatchLength();
|
|
102
102
|
}
|
|
@@ -16,14 +16,14 @@ This contract should be deployed alongside a `Poll`, with the the constructor ac
|
|
|
16
16
|
```ts
|
|
17
17
|
constructor(
|
|
18
18
|
address _verifier,
|
|
19
|
-
address
|
|
19
|
+
address _verifyingKeysRegistry,
|
|
20
20
|
address _poll,
|
|
21
21
|
address _mp,
|
|
22
22
|
address _tallyOwner,
|
|
23
23
|
Mode _mode
|
|
24
24
|
) payable {
|
|
25
25
|
verifier = IVerifier(_verifier);
|
|
26
|
-
vkRegistry = IVkRegistry(
|
|
26
|
+
vkRegistry = IVkRegistry(_verifyingKeysRegistry);
|
|
27
27
|
poll = IPoll(_poll);
|
|
28
28
|
messageProcessor = IMessageProcessor(_mp);
|
|
29
29
|
mode = _mode;
|
|
@@ -1,15 +1,15 @@
|
|
|
1
1
|
---
|
|
2
|
-
title:
|
|
3
|
-
description:
|
|
4
|
-
sidebar_label:
|
|
2
|
+
title: VerifyingKeysRegistry Smart Contract
|
|
3
|
+
description: VerifyingKeysRegistry smart contract
|
|
4
|
+
sidebar_label: VerifyingKeysRegistry
|
|
5
5
|
sidebar_position: 8
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
:::info
|
|
9
|
-
Code location: [
|
|
9
|
+
Code location: [VerifyingKeysRegistry.sol](https://github.com/privacy-scaling-explorations/maci/blob/dev/contracts/contracts/VerifyingKeysRegistry.sol)
|
|
10
10
|
:::
|
|
11
11
|
|
|
12
|
-
The
|
|
12
|
+
The VerifyingKeysRegistry is a contract that holds the verifying keys for the zk-SNARK circuits. It holds four different sets of keys:
|
|
13
13
|
|
|
14
14
|
- `processVks` - The keys for the processMessages circuit
|
|
15
15
|
- `tallyVks` - The keys for the tallyVotes circuit
|
|
@@ -21,8 +21,8 @@ Users need to provide a valid proof to the Poll smart contract to join a poll, a
|
|
|
21
21
|
|
|
22
22
|
| Input signal | Description |
|
|
23
23
|
| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
24
|
-
| `
|
|
25
|
-
| `
|
|
24
|
+
| `privateKey` | The user's private key |
|
|
25
|
+
| `pollPublicKey` | The poll's public key |
|
|
26
26
|
| `siblings` | The siblings for the merkle tree inclusion proof |
|
|
27
27
|
| `indices` | The indices for the merkle tree inclusion proof |
|
|
28
28
|
| `nullifier` | The nullifier |
|
|
@@ -44,9 +44,8 @@ Users will use this circuit to anonymously prove that they joined a poll. This c
|
|
|
44
44
|
|
|
45
45
|
| Input signal | Description |
|
|
46
46
|
| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
47
|
-
| `
|
|
47
|
+
| `privateKey` | The user's private key |
|
|
48
48
|
| `voiceCreditsBalance` | The user's initial voice credits balance |
|
|
49
|
-
| `joinTimestamp` | The timestamp of when the user joined the poll |
|
|
50
49
|
| `pathElements` | The path elements for the merkle tree inclusion proof |
|
|
51
50
|
| `pathIndices` | The path indices for the merkle tree inclusion proof |
|
|
52
51
|
| `stateRoot` | The MACI state tree root |
|
package/versioned_docs/version-v3.x/technical-references/zk-snark-circuits/processMessages.md
CHANGED
|
@@ -7,7 +7,7 @@ sidebar_position: 3
|
|
|
7
7
|
|
|
8
8
|
[**Repo link**](https://github.com/privacy-scaling-explorations/maci/blob/dev/circuits/circom/core)
|
|
9
9
|
|
|
10
|
-
This circuit allows the coordinator to prove that they have correctly processed each message in reverse order, in a consecutive batch of 5 ^
|
|
10
|
+
This circuit allows the coordinator to prove that they have correctly processed each message in reverse order, in a consecutive batch of 5 ^ messageBatchDepth messages to the respective state leaf within the state tree. Coordinators would use this circuit to prove correct execution at the end of each Poll.
|
|
11
11
|
|
|
12
12
|
The [`processMessages`](https://github.com/privacy-scaling-explorations/maci/blob/dev/circuits/circom/core/qv/processMessages.circom) circuit will try to decrypt the messages, and based on the content of the message, update within itself the trees, to generate a proof that the coordinator's off-chain processing was done correctly. In other words, the circuit takes a final state, an initial state, and the leaves (messages and user signups) - it processes these messages via the different state transitions to finally check that the expected state is correct.
|
|
13
13
|
The pre-requisites for this circuit are:
|
|
@@ -36,17 +36,17 @@ A version working with non quadratic voting (non-qv) is also [available](https:/
|
|
|
36
36
|
|
|
37
37
|
| Input signal | Description |
|
|
38
38
|
| -------------------------------- | --------------------------------------------------------------------------------------- |
|
|
39
|
-
| `
|
|
39
|
+
| `totalSignups` | Number of users that have completed the sign up |
|
|
40
40
|
| `index` | The batch index of current message batch |
|
|
41
41
|
| `pollEndTimestamp` | The Unix timestamp at which the poll ends |
|
|
42
|
-
| `
|
|
43
|
-
| `
|
|
44
|
-
| `
|
|
42
|
+
| `messageRoot` | The root of the message tree |
|
|
43
|
+
| `messages` | The batch of messages as an array of arrays |
|
|
44
|
+
| `messageSubrootPathElements` | As described below |
|
|
45
45
|
| `coordinatorPublicKeyHash` | $\mathsf{poseidon_2}([cPk_x, cPk_y])$ |
|
|
46
46
|
| `newSbCommitment` | As described below |
|
|
47
|
-
| `
|
|
47
|
+
| `coordinatorPrivateKey` | The coordinator's private key |
|
|
48
48
|
| `batchEndIndex` | The last batch index |
|
|
49
|
-
| `
|
|
49
|
+
| `encryptionPublicKeys` | The public keys used to generate shared ECDH encryption keys to encrypt the messages |
|
|
50
50
|
| `currentStateRoot` | The state root before the commands are applied |
|
|
51
51
|
| `currentStateLeaves` | The state leaves upon which messages are applied |
|
|
52
52
|
| `currentStateLeavesPathElements` | The Merkle path to each incremental state root |
|
|
@@ -74,9 +74,9 @@ The salt used to produce `currentSbCommitment` (see above).
|
|
|
74
74
|
|
|
75
75
|
The salt used to produce `newSbCommitment` (see above).
|
|
76
76
|
|
|
77
|
-
##### `
|
|
77
|
+
##### `messageSubrootPathElements`
|
|
78
78
|
|
|
79
|
-
The index of each message in `
|
|
79
|
+
The index of each message in `messages` is consecutive. As such, in order to prove that each message in `messages` is indeed a leaf of the message tree, we compute the subtree root of `messages`, and then verify that the subtree root is indeed a subroot of `messageRoot`.
|
|
80
80
|
|
|
81
81
|
A simplified example using a tree of arity 2:
|
|
82
82
|
|
|
@@ -100,7 +100,7 @@ This method requires fewer circuit constraints than if we verified a Merkle proo
|
|
|
100
100
|
|
|
101
101
|
1. That the prover knows the preimage to `currentSbCommitment` (that is, the state root, ballot root, and `currentSbSalt`)
|
|
102
102
|
2. That `maxVoteOptions <= (5 ^ voteOptionTreeDepth)`
|
|
103
|
-
3. That `
|
|
104
|
-
4. That `coordinatorPublicKeyHash` is a hash of public key that is correctly derived from `
|
|
105
|
-
5. That each message in `
|
|
103
|
+
3. That `totalSignups <= (2 ^ stateTreeDepth)`
|
|
104
|
+
4. That `coordinatorPublicKeyHash` is a hash of public key that is correctly derived from `coordinatorPrivateKey`
|
|
105
|
+
5. That each message in `messages` exists in the message tree
|
|
106
106
|
6. That after decrypting and applying each message, in reverse order, to the corresponding state and ballot leaves, the new state root, new ballot root, and `newSbSalt` are the preimage to `newSbCommitment`
|
|
@@ -25,7 +25,7 @@ A version working with non quadratic voting (non-qv) is also [available](https:/
|
|
|
25
25
|
|
|
26
26
|
| Input signal | Description |
|
|
27
27
|
| --------------------------------------- | ---------------------------------------------------------------- |
|
|
28
|
-
| `
|
|
28
|
+
| `totalSignups` | The number of users that signup |
|
|
29
29
|
| `index` | Start index of given batch |
|
|
30
30
|
| `sbCommitment` | Described below |
|
|
31
31
|
| `currentTallyCommitment` | Described below |
|
|
@@ -72,7 +72,7 @@ $poseidon_3([tc_r, tc_t, tc_p])$
|
|
|
72
72
|
#### Statements that the circuit proves
|
|
73
73
|
|
|
74
74
|
1. That the coordinator knows the preimage of `sbCommitment`
|
|
75
|
-
2. That `index` is less than or equal to `
|
|
75
|
+
2. That `index` is less than or equal to `totalSignups`
|
|
76
76
|
3. That each ballot in `ballots` is in a member of the ballot tree with the Merkle root `ballotRoot` at indices `batchStartIndex` to `batchStartIndex + (5 ** intStateTreeDepth)`
|
|
77
77
|
4. That each set of votes (`votes[i]`) has the Merkle root $blt_r$ whose value equals `ballots[i][1]`
|
|
78
78
|
5. That the tally is valid, which is:
|
|
@@ -15,7 +15,7 @@ It outputs one field element, which is the SHA256 hash of the following inputs:
|
|
|
15
15
|
|
|
16
16
|
1. `packedVals`
|
|
17
17
|
2. `pollEndTimestamp`
|
|
18
|
-
3. `
|
|
18
|
+
3. `messageRoot`
|
|
19
19
|
4. `coordinatorPubKeyHash`
|
|
20
20
|
5. `newSbCommitment`
|
|
21
21
|
6. `currentSbCommitment`
|
|
@@ -39,11 +39,11 @@ A utility circuit used by the main `tallyVotes` circuit to verify that the resul
|
|
|
39
39
|
|
|
40
40
|

|
|
41
41
|
|
|
42
|
-
####
|
|
42
|
+
#### QuinaryCheckRoot
|
|
43
43
|
|
|
44
44
|
Utility circuit that given a quin Merkle root and a list of leaves, check if the root is the correct result of inserting all the leaves into the tree in the given order.
|
|
45
45
|
|
|
46
|
-

|
|
47
47
|
|
|
48
48
|
#### CalculateTotal
|
|
49
49
|
|
|
@@ -100,11 +100,11 @@ Utility circuit used to unpack an input element.
|
|
|
100
100
|
|
|
101
101
|

|
|
102
102
|
|
|
103
|
-
####
|
|
103
|
+
#### QuinarySelector
|
|
104
104
|
|
|
105
105
|
Utility circuit used to select one element from an array of n elements at a given index.
|
|
106
106
|
|
|
107
|
-

|
|
108
108
|
|
|
109
109
|
#### Splicer
|
|
110
110
|
|
|
@@ -118,11 +118,11 @@ Utility circuit used to check if a batch of leaves exists in a quinary tree.
|
|
|
118
118
|
|
|
119
119
|

|
|
120
120
|
|
|
121
|
-
####
|
|
121
|
+
#### QuinaryGeneratePathIndices
|
|
122
122
|
|
|
123
123
|
Utility circuit used to generate the indices needed to traverse the tree until we find the leaf we are looking for.
|
|
124
124
|
|
|
125
|
-

|
|
126
126
|
|
|
127
127
|
#### ProcessOne
|
|
128
128
|
|