@midnight-ntwrk/credential-compact 0.1.0-rc2

package/src/holder-binding/same-holder/composable.compact

@@ -0,0 +1,179 @@
+// This file is part of midnightntwrk/midnight-did.
+// Copyright (C) 2026 Midnight Foundation
+// SPDX-License-Identifier: Apache-2.0
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Composition-safe entry point for Layer 3 contracts. The importing contract
+// must include `credentials/bindings` or
+// `credentials/composable` before including this file.
+
+
+// Capability package: prove that multiple holder bindings are satisfied by the
+// same hidden holder secret witness under one verifier session challenge.
+
+export pure circuit assertSameSecretHolderBindingWitnesses(
+  firstBinding: SecretHolderBinding,
+  secondBinding: SecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  secondOpening: Bytes<32>
+): [] {
+  assert(
+    firstBinding.holderSecretCommitment != secondBinding.holderSecretCommitment,
+    "Same-holder proof requires two distinct credential bindings"
+  );
+  assertSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening
+  );
+  assertSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening
+  );
+}
+
+// Three-credential same-holder composition for plain secret bindings.
+// This keeps the reusable capability explicit and bounded instead of
+// prematurely introducing a generic "bundle" abstraction.
+export pure circuit assertSameSecretHolderBindingWitnesses3(
+  firstBinding: SecretHolderBinding,
+  secondBinding: SecretHolderBinding,
+  thirdBinding: SecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  secondOpening: Bytes<32>,
+  thirdOpening: Bytes<32>
+): [] {
+  assert(
+    firstBinding.holderSecretCommitment != secondBinding.holderSecretCommitment,
+    "Same-holder proof requires distinct first and second credential bindings"
+  );
+  assert(
+    firstBinding.holderSecretCommitment != thirdBinding.holderSecretCommitment,
+    "Same-holder proof requires distinct first and third credential bindings"
+  );
+  assert(
+    secondBinding.holderSecretCommitment != thirdBinding.holderSecretCommitment,
+    "Same-holder proof requires distinct second and third credential bindings"
+  );
+
+  assertSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening
+  );
+  assertSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening
+  );
+  assertSecretHolderBindingWitness(
+    thirdBinding,
+    verifierChallengeHash,
+    holderSecret,
+    thirdOpening
+  );
+}
+
+// Same-holder composition for blinded bindings. The caller supplies the same
+// hidden holder witness together with the binding-specific opening and blinding
+// factor for each independently issued credential.
+export pure circuit assertSameBlindedSecretHolderBindingWitnesses(
+  firstBinding: BlindedSecretHolderBinding,
+  secondBinding: BlindedSecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  firstBlindingFactor: Bytes<32>,
+  secondOpening: Bytes<32>,
+  secondBlindingFactor: Bytes<32>
+): [] {
+  assert(
+    firstBinding.blindedHolderSecretCommitment != secondBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires two distinct credential bindings"
+  );
+  assertBlindedSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening,
+    firstBlindingFactor
+  );
+  assertBlindedSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening,
+    secondBlindingFactor
+  );
+}
+
+// Three-credential same-holder composition for blinded bindings. This is the
+// next bounded step after the two-credential primitive and is sufficient for
+// staged business flows such as travel or onboarding checks.
+export pure circuit assertSameBlindedSecretHolderBindingWitnesses3(
+  firstBinding: BlindedSecretHolderBinding,
+  secondBinding: BlindedSecretHolderBinding,
+  thirdBinding: BlindedSecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  firstBlindingFactor: Bytes<32>,
+  secondOpening: Bytes<32>,
+  secondBlindingFactor: Bytes<32>,
+  thirdOpening: Bytes<32>,
+  thirdBlindingFactor: Bytes<32>
+): [] {
+  assert(
+    firstBinding.blindedHolderSecretCommitment != secondBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires distinct first and second credential bindings"
+  );
+  assert(
+    firstBinding.blindedHolderSecretCommitment != thirdBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires distinct first and third credential bindings"
+  );
+  assert(
+    secondBinding.blindedHolderSecretCommitment != thirdBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires distinct second and third credential bindings"
+  );
+
+  assertBlindedSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening,
+    firstBlindingFactor
+  );
+  assertBlindedSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening,
+    secondBlindingFactor
+  );
+  assertBlindedSecretHolderBindingWitness(
+    thirdBinding,
+    verifierChallengeHash,
+    holderSecret,
+    thirdOpening,
+    thirdBlindingFactor
+  );
+}

package/src/holder-binding/same-holder.compact

@@ -0,0 +1,180 @@
+// This file is part of midnightntwrk/midnight-did.
+// Copyright (C) 2026 Midnight Foundation
+// SPDX-License-Identifier: Apache-2.0
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+pragma language_version >= 0.20;
+
+import CompactStandardLibrary;
+
+include "../credentials";
+
+// Capability package: prove that multiple holder bindings are satisfied by the
+// same hidden holder secret witness under one verifier session challenge.
+
+export pure circuit assertSameSecretHolderBindingWitnesses(
+  firstBinding: SecretHolderBinding,
+  secondBinding: SecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  secondOpening: Bytes<32>
+): [] {
+  assert(
+    firstBinding.holderSecretCommitment != secondBinding.holderSecretCommitment,
+    "Same-holder proof requires two distinct credential bindings"
+  );
+  assertSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening
+  );
+  assertSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening
+  );
+}
+
+// Three-credential same-holder composition for plain secret bindings.
+// This keeps the reusable capability explicit and bounded instead of
+// prematurely introducing a generic "bundle" abstraction.
+export pure circuit assertSameSecretHolderBindingWitnesses3(
+  firstBinding: SecretHolderBinding,
+  secondBinding: SecretHolderBinding,
+  thirdBinding: SecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  secondOpening: Bytes<32>,
+  thirdOpening: Bytes<32>
+): [] {
+  assert(
+    firstBinding.holderSecretCommitment != secondBinding.holderSecretCommitment,
+    "Same-holder proof requires distinct first and second credential bindings"
+  );
+  assert(
+    firstBinding.holderSecretCommitment != thirdBinding.holderSecretCommitment,
+    "Same-holder proof requires distinct first and third credential bindings"
+  );
+  assert(
+    secondBinding.holderSecretCommitment != thirdBinding.holderSecretCommitment,
+    "Same-holder proof requires distinct second and third credential bindings"
+  );
+
+  assertSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening
+  );
+  assertSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening
+  );
+  assertSecretHolderBindingWitness(
+    thirdBinding,
+    verifierChallengeHash,
+    holderSecret,
+    thirdOpening
+  );
+}
+
+// Same-holder composition for blinded bindings. The caller supplies the same
+// hidden holder witness together with the binding-specific opening and blinding
+// factor for each independently issued credential.
+export pure circuit assertSameBlindedSecretHolderBindingWitnesses(
+  firstBinding: BlindedSecretHolderBinding,
+  secondBinding: BlindedSecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  firstBlindingFactor: Bytes<32>,
+  secondOpening: Bytes<32>,
+  secondBlindingFactor: Bytes<32>
+): [] {
+  assert(
+    firstBinding.blindedHolderSecretCommitment != secondBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires two distinct credential bindings"
+  );
+  assertBlindedSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening,
+    firstBlindingFactor
+  );
+  assertBlindedSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening,
+    secondBlindingFactor
+  );
+}
+
+// Three-credential same-holder composition for blinded bindings. This is the
+// next bounded step after the two-credential primitive and is sufficient for
+// staged business flows such as travel or onboarding checks.
+export pure circuit assertSameBlindedSecretHolderBindingWitnesses3(
+  firstBinding: BlindedSecretHolderBinding,
+  secondBinding: BlindedSecretHolderBinding,
+  thirdBinding: BlindedSecretHolderBinding,
+  verifierChallengeHash: Bytes<32>,
+  holderSecret: Bytes<32>,
+  firstOpening: Bytes<32>,
+  firstBlindingFactor: Bytes<32>,
+  secondOpening: Bytes<32>,
+  secondBlindingFactor: Bytes<32>,
+  thirdOpening: Bytes<32>,
+  thirdBlindingFactor: Bytes<32>
+): [] {
+  assert(
+    firstBinding.blindedHolderSecretCommitment != secondBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires distinct first and second credential bindings"
+  );
+  assert(
+    firstBinding.blindedHolderSecretCommitment != thirdBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires distinct first and third credential bindings"
+  );
+  assert(
+    secondBinding.blindedHolderSecretCommitment != thirdBinding.blindedHolderSecretCommitment,
+    "Same-holder proof requires distinct second and third credential bindings"
+  );
+
+  assertBlindedSecretHolderBindingWitness(
+    firstBinding,
+    verifierChallengeHash,
+    holderSecret,
+    firstOpening,
+    firstBlindingFactor
+  );
+  assertBlindedSecretHolderBindingWitness(
+    secondBinding,
+    verifierChallengeHash,
+    holderSecret,
+    secondOpening,
+    secondBlindingFactor
+  );
+  assertBlindedSecretHolderBindingWitness(
+    thirdBinding,
+    verifierChallengeHash,
+    holderSecret,
+    thirdOpening,
+    thirdBlindingFactor
+  );
+}