@semaphore-protocol/proof 3.13.0 → 3.15.0

package/dist/types/groth16/prove.d.ts

@@ -1,4 +0,0 @@
-export default function groth16Prove(_input: any, wasmFile: any, zkeyFileName: any): Promise<{
-    proof: any;
-    publicSignals: any;
-}>;

package/dist/types/groth16/utils.d.ts

@@ -1 +0,0 @@
-export declare function log2(V: any): number;

package/dist/types/groth16/verify.d.ts

@@ -1 +0,0 @@
-export default function groth16Verify(_vk_verifier: any, _publicSignals: any, _proof: any): Promise<any>;

package/dist/types/groth16/wtns-calculate.d.ts

@@ -1 +0,0 @@
-export default function wtnsCalculate(_input: any, wasmFileName: any, wtnsFileName: any): Promise<void>;

package/dist/types/groth16/wtns-utils.d.ts

@@ -1,6 +0,0 @@
-export declare function writeBin(fd: any, witnessBin: any, prime: any): Promise<void>;
-export declare function readHeader(fd: any, sections: any): Promise<{
-    n8: any;
-    q: any;
-    nWitness: any;
-}>;

package/dist/types/groth16/zkey-utils.d.ts

@@ -1 +0,0 @@
-export declare function readHeader(fd: any, sections: any, toObject: any): Promise<any>;

package/src/groth16/prove.ts

@@ -1,226 +0,0 @@
-/* eslint-disable no-plusplus */
-/* eslint-disable eqeqeq */
-/* eslint-disable @typescript-eslint/naming-convention */
-/* istanbul ignore file */
-
-// @ts-ignore
-import * as binFileUtils from "@iden3/binfileutils"
-import { BigBuffer, Scalar, utils } from "ffjavascript"
-import { log2 } from "./utils"
-import * as zkeyUtils from "./zkey-utils"
-import * as wtnsUtils from "./wtns-utils"
-import wtnsCalculate from "./wtns-calculate"
-
-const { stringifyBigInts, unstringifyBigInts } = utils
-
-async function buildABC1(curve: any, zkey: any, witness: any, coeffs: any) {
-    const { n8 } = curve.Fr
-    const sCoef = 4 * 3 + zkey.n8r
-    const nCoef = (coeffs.byteLength - 4) / sCoef
-
-    const outBuffA = new BigBuffer(zkey.domainSize * n8)
-    const outBuffB = new BigBuffer(zkey.domainSize * n8)
-    const outBuffC = new BigBuffer(zkey.domainSize * n8)
-
-    const outBuf = [outBuffA, outBuffB]
-    for (let i = 0; i < nCoef; i++) {
-        const buffCoef = coeffs.slice(4 + i * sCoef, 4 + i * sCoef + sCoef)
-        const buffCoefV = new DataView(buffCoef.buffer)
-        const m = buffCoefV.getUint32(0, true)
-        const c = buffCoefV.getUint32(4, true)
-        const s = buffCoefV.getUint32(8, true)
-        const coef = buffCoef.slice(12, 12 + n8)
-        outBuf[m].set(
-            curve.Fr.add(outBuf[m].slice(c * n8, c * n8 + n8), curve.Fr.mul(coef, witness.slice(s * n8, s * n8 + n8))),
-            c * n8
-        )
-    }
-
-    for (let i = 0; i < zkey.domainSize; i++) {
-        outBuffC.set(curve.Fr.mul(outBuffA.slice(i * n8, i * n8 + n8), outBuffB.slice(i * n8, i * n8 + n8)), i * n8)
-    }
-
-    return [outBuffA, outBuffB, outBuffC]
-}
-
-async function joinABC(curve: any, _zkey: any, a: any, b: any, c: any) {
-    const MAX_CHUNK_SIZE = 1 << 22
-
-    const { n8 } = curve.Fr
-    const nElements = Math.floor(a.byteLength / curve.Fr.n8)
-
-    const promises = []
-
-    for (let i = 0; i < nElements; i += MAX_CHUNK_SIZE) {
-        const n = Math.min(nElements - i, MAX_CHUNK_SIZE)
-
-        const task = []
-
-        const aChunk = a.slice(i * n8, (i + n) * n8)
-        const bChunk = b.slice(i * n8, (i + n) * n8)
-        const cChunk = c.slice(i * n8, (i + n) * n8)
-
-        task.push({ cmd: "ALLOCSET", var: 0, buff: aChunk })
-        task.push({ cmd: "ALLOCSET", var: 1, buff: bChunk })
-        task.push({ cmd: "ALLOCSET", var: 2, buff: cChunk })
-        task.push({ cmd: "ALLOC", var: 3, len: n * n8 })
-        task.push({
-            cmd: "CALL",
-            fnName: "qap_joinABC",
-            params: [{ var: 0 }, { var: 1 }, { var: 2 }, { val: n }, { var: 3 }]
-        })
-        task.push({ cmd: "CALL", fnName: "frm_batchFromMontgomery", params: [{ var: 3 }, { val: n }, { var: 3 }] })
-        task.push({ cmd: "GET", out: 0, var: 3, len: n * n8 })
-        promises.push(curve.tm.queueAction(task))
-    }
-
-    const result = await Promise.all(promises)
-
-    let outBuff
-    if (a instanceof BigBuffer) {
-        // @ts-ignore
-        outBuff = new BigBuffer(a.byteLength)
-    } else {
-        outBuff = new Uint8Array(a.byteLength)
-    }
-
-    let p = 0
-    for (let i = 0; i < result.length; i++) {
-        outBuff.set(result[i][0], p)
-        p += result[i][0].byteLength
-    }
-
-    return outBuff
-}
-
-export default async function groth16Prove(_input: any, wasmFile: any, zkeyFileName: any) {
-    const input = unstringifyBigInts(_input)
-
-    const witnessFileName = {
-        type: "mem"
-    }
-
-    await wtnsCalculate(input, wasmFile, witnessFileName)
-
-    const { fd: fdWtns, sections: sectionsWtns } = await binFileUtils.readBinFile(
-        witnessFileName,
-        "wtns",
-        2,
-        1 << 25,
-        1 << 23
-    )
-
-    const wtns = await wtnsUtils.readHeader(fdWtns, sectionsWtns)
-
-    const { fd: fdZKey, sections: sectionsZKey } = await binFileUtils.readBinFile(
-        zkeyFileName,
-        "zkey",
-        2,
-        1 << 25,
-        1 << 23
-    )
-
-    const zkey = await zkeyUtils.readHeader(fdZKey, sectionsZKey, undefined)
-
-    if (zkey.protocol !== "groth16") {
-        throw new Error("zkey file is not groth16")
-    }
-
-    if (!Scalar.eq(zkey.r, wtns.q)) {
-        throw new Error("Curve of the witness does not match the curve of the proving key")
-    }
-
-    if (wtns.nWitness !== zkey.nVars) {
-        throw new Error(`Invalid witness length. Circuit: ${zkey.nVars}, witness: ${wtns.nWitness}`)
-    }
-
-    const { curve } = zkey
-    const { Fr } = curve
-    const { G1 } = curve
-    const { G2 } = curve
-
-    const power = log2(zkey.domainSize)
-
-    const buffWitness = await binFileUtils.readSection(fdWtns, sectionsWtns, 2)
-    const buffCoeffs = await binFileUtils.readSection(fdZKey, sectionsZKey, 4)
-
-    const [buffA_T, buffB_T, buffC_T] = await buildABC1(curve, zkey, buffWitness, buffCoeffs)
-
-    const inc = power == Fr.s ? curve.Fr.shift : curve.Fr.w[power + 1]
-
-    const buffA = await Fr.ifft(buffA_T, "", "", undefined, "IFFT_A")
-    const buffAodd = await Fr.batchApplyKey(buffA, Fr.e(1), inc)
-    const buffAodd_T = await Fr.fft(buffAodd, "", "", undefined, "FFT_A")
-
-    const buffB = await Fr.ifft(buffB_T, "", "", undefined, "IFFT_B")
-    const buffBodd = await Fr.batchApplyKey(buffB, Fr.e(1), inc)
-    const buffBodd_T = await Fr.fft(buffBodd, "", "", undefined, "FFT_B")
-
-    const buffC = await Fr.ifft(buffC_T, "", "", undefined, "IFFT_C")
-    const buffCodd = await Fr.batchApplyKey(buffC, Fr.e(1), inc)
-    const buffCodd_T = await Fr.fft(buffCodd, "", "", undefined, "FFT_C")
-
-    const buffPodd_T = await joinABC(curve, zkey, buffAodd_T, buffBodd_T, buffCodd_T)
-
-    let proof: any = {}
-
-    const buffBasesA = await binFileUtils.readSection(fdZKey, sectionsZKey, 5)
-    proof.pi_a = await curve.G1.multiExpAffine(buffBasesA, buffWitness, undefined, "multiexp A")
-
-    const buffBasesB1 = await binFileUtils.readSection(fdZKey, sectionsZKey, 6)
-    let pib1 = await curve.G1.multiExpAffine(buffBasesB1, buffWitness, undefined, "multiexp B1")
-
-    const buffBasesB2 = await binFileUtils.readSection(fdZKey, sectionsZKey, 7)
-    proof.pi_b = await curve.G2.multiExpAffine(buffBasesB2, buffWitness, undefined, "multiexp B2")
-
-    const buffBasesC = await binFileUtils.readSection(fdZKey, sectionsZKey, 8)
-    proof.pi_c = await curve.G1.multiExpAffine(
-        buffBasesC,
-        buffWitness.slice((zkey.nPublic + 1) * curve.Fr.n8),
-        undefined,
-        "multiexp C"
-    )
-
-    const buffBasesH = await binFileUtils.readSection(fdZKey, sectionsZKey, 9)
-    const resH = await curve.G1.multiExpAffine(buffBasesH, buffPodd_T, undefined, "multiexp H")
-
-    const r = curve.Fr.random()
-    const s = curve.Fr.random()
-
-    proof.pi_a = G1.add(proof.pi_a, zkey.vk_alpha_1)
-    proof.pi_a = G1.add(proof.pi_a, G1.timesFr(zkey.vk_delta_1, r))
-
-    proof.pi_b = G2.add(proof.pi_b, zkey.vk_beta_2)
-    proof.pi_b = G2.add(proof.pi_b, G2.timesFr(zkey.vk_delta_2, s))
-
-    pib1 = G1.add(pib1, zkey.vk_beta_1)
-    pib1 = G1.add(pib1, G1.timesFr(zkey.vk_delta_1, s))
-
-    proof.pi_c = G1.add(proof.pi_c, resH)
-
-    proof.pi_c = G1.add(proof.pi_c, G1.timesFr(proof.pi_a, s))
-    proof.pi_c = G1.add(proof.pi_c, G1.timesFr(pib1, r))
-    proof.pi_c = G1.add(proof.pi_c, G1.timesFr(zkey.vk_delta_1, Fr.neg(Fr.mul(r, s))))
-
-    let publicSignals = []
-
-    for (let i = 1; i <= zkey.nPublic; i++) {
-        const b = buffWitness.slice(i * Fr.n8, i * Fr.n8 + Fr.n8)
-        publicSignals.push(Scalar.fromRprLE(b, undefined, undefined))
-    }
-
-    proof.pi_a = G1.toObject(G1.toAffine(proof.pi_a))
-    proof.pi_b = G2.toObject(G2.toAffine(proof.pi_b))
-    proof.pi_c = G1.toObject(G1.toAffine(proof.pi_c))
-
-    proof.protocol = "groth16"
-    proof.curve = curve.name
-
-    await fdZKey.close()
-    await fdWtns.close()
-
-    proof = stringifyBigInts(proof)
-    publicSignals = stringifyBigInts(publicSignals)
-
-    return { proof, publicSignals }
-}

package/src/groth16/utils.ts

@@ -1,14 +0,0 @@
-/* eslint-disable import/prefer-default-export */
-/* eslint-disable no-return-assign */
-/* istanbul ignore file */
-
-export function log2(V: any) {
-    return (
-        ((V & 0xffff0000) !== 0 ? ((V &= 0xffff0000), 16) : 0) |
-        ((V & 0xff00ff00) !== 0 ? ((V &= 0xff00ff00), 8) : 0) |
-        ((V & 0xf0f0f0f0) !== 0 ? ((V &= 0xf0f0f0f0), 4) : 0) |
-        ((V & 0xcccccccc) !== 0 ? ((V &= 0xcccccccc), 2) : 0) |
-        // @ts-ignore
-        ((V & 0xaaaaaaaa) !== 0)
-    )
-}

package/src/groth16/verify.ts

@@ -1,73 +0,0 @@
-/* eslint-disable no-plusplus */
-/* eslint-disable @typescript-eslint/naming-convention */
-/* istanbul ignore file */
-
-import { Scalar, utils, buildBn128 } from "ffjavascript"
-
-const { unstringifyBigInts } = utils
-
-function isWellConstructed(curve: any, proof: any) {
-    const { G1 } = curve
-    const { G2 } = curve
-
-    return G1.isValid(proof.pi_a) && G2.isValid(proof.pi_b) && G1.isValid(proof.pi_c)
-}
-
-function publicInputsAreValid(curve: any, publicInputs: any) {
-    for (let i = 0; i < publicInputs.length; i++) {
-        if (!Scalar.lt(publicInputs[i], curve.r)) {
-            return false
-        }
-    }
-    return true
-}
-
-export default async function groth16Verify(_vk_verifier: any, _publicSignals: any, _proof: any) {
-    const vk_verifier = unstringifyBigInts(_vk_verifier)
-    const proof = unstringifyBigInts(_proof)
-    const publicSignals = unstringifyBigInts(_publicSignals)
-
-    const curve = await buildBn128(undefined, undefined)
-
-    const IC0 = curve.G1.fromObject(vk_verifier.IC[0])
-    const IC = new Uint8Array(curve.G1.F.n8 * 2 * publicSignals.length)
-    const w = new Uint8Array(curve.Fr.n8 * publicSignals.length)
-
-    if (!publicInputsAreValid(curve, publicSignals)) {
-        return false
-    }
-
-    for (let i = 0; i < publicSignals.length; i++) {
-        const buffP = curve.G1.fromObject(vk_verifier.IC[i + 1])
-        IC.set(buffP, i * curve.G1.F.n8 * 2)
-        Scalar.toRprLE(w, curve.Fr.n8 * i, publicSignals[i], curve.Fr.n8)
-    }
-
-    let cpub = await curve.G1.multiExpAffine(IC, w)
-    cpub = curve.G1.add(cpub, IC0)
-
-    const pi_a = curve.G1.fromObject(proof.pi_a)
-    const pi_b = curve.G2.fromObject(proof.pi_b)
-    const pi_c = curve.G1.fromObject(proof.pi_c)
-
-    if (!isWellConstructed(curve, { pi_a, pi_b, pi_c })) {
-        return false
-    }
-
-    const vk_gamma_2 = curve.G2.fromObject(vk_verifier.vk_gamma_2)
-    const vk_delta_2 = curve.G2.fromObject(vk_verifier.vk_delta_2)
-    const vk_alpha_1 = curve.G1.fromObject(vk_verifier.vk_alpha_1)
-    const vk_beta_2 = curve.G2.fromObject(vk_verifier.vk_beta_2)
-
-    return curve.pairingEq(
-        curve.G1.neg(pi_a),
-        pi_b,
-        cpub,
-        vk_gamma_2,
-        pi_c,
-        vk_delta_2,
-
-        vk_alpha_1,
-        vk_beta_2
-    )
-}

package/src/groth16/wtns-calculate.ts

@@ -1,39 +0,0 @@
-/* eslint-disable eqeqeq */
-/* istanbul ignore file */
-
-// @ts-ignore
-import * as binFileUtils from "@iden3/binfileutils"
-// @ts-ignore
-import { WitnessCalculatorBuilder } from "circom_runtime"
-// @ts-ignore
-import * as fastFile from "fastfile"
-import { utils } from "ffjavascript"
-import * as wtnsUtils from "./wtns-utils"
-
-const { unstringifyBigInts } = utils
-
-export default async function wtnsCalculate(_input: any, wasmFileName: any, wtnsFileName: any) {
-    const input = unstringifyBigInts(_input)
-
-    const fdWasm = await fastFile.readExisting(wasmFileName)
-    const wasm = await fdWasm.read(fdWasm.totalSize)
-    await fdWasm.close()
-
-    const wc = await WitnessCalculatorBuilder(wasm)
-
-    if (wc.circom_version() == 1) {
-        const w = await wc.calculateBinWitness(input)
-
-        const fdWtns = await binFileUtils.createBinFile(wtnsFileName, "wtns", 2, 2)
-
-        await wtnsUtils.writeBin(fdWtns, w, wc.prime)
-        await fdWtns.close()
-    } else {
-        const fdWtns = await fastFile.createOverride(wtnsFileName)
-
-        const w = await wc.calculateWTNSBin(input)
-
-        await fdWtns.write(w)
-        await fdWtns.close()
-    }
-}

package/src/groth16/wtns-utils.ts

@@ -1,32 +0,0 @@
-/* eslint-disable eqeqeq */
-/* istanbul ignore file */
-
-// @ts-ignore
-import * as binFileUtils from "@iden3/binfileutils"
-import { Scalar } from "ffjavascript"
-
-export async function writeBin(fd: any, witnessBin: any, prime: any) {
-    await binFileUtils.startWriteSection(fd, 1)
-    const n8 = (Math.floor((Scalar.bitLength(prime) - 1) / 64) + 1) * 8
-    await fd.writeULE32(n8)
-    await binFileUtils.writeBigInt(fd, prime, n8)
-    if (witnessBin.byteLength % n8 != 0) {
-        throw new Error("Invalid witness length")
-    }
-    await fd.writeULE32(witnessBin.byteLength / n8)
-    await binFileUtils.endWriteSection(fd)
-
-    await binFileUtils.startWriteSection(fd, 2)
-    await fd.write(witnessBin)
-    await binFileUtils.endWriteSection(fd)
-}
-
-export async function readHeader(fd: any, sections: any) {
-    await binFileUtils.startReadUniqueSection(fd, sections, 1)
-    const n8 = await fd.readULE32()
-    const q = await binFileUtils.readBigInt(fd, n8)
-    const nWitness = await fd.readULE32()
-    await binFileUtils.endReadSection(fd)
-
-    return { n8, q, nWitness }
-}

package/src/groth16/zkey-utils.ts

@@ -1,60 +0,0 @@
-/* eslint-disable import/prefer-default-export */
-/* istanbul ignore file */
-
-// @ts-ignore
-import * as binFileUtils from "@iden3/binfileutils"
-import { buildBn128 } from "ffjavascript"
-import { log2 } from "./utils"
-
-async function readG1(fd: any, curve: any, toObject: any) {
-    const buff = await fd.read(curve.G1.F.n8 * 2)
-    const res = curve.G1.fromRprLEM(buff, 0)
-    return toObject ? curve.G1.toObject(res) : res
-}
-
-async function readG2(fd: any, curve: any, toObject: any) {
-    const buff = await fd.read(curve.G2.F.n8 * 2)
-    const res = curve.G2.fromRprLEM(buff, 0)
-    return toObject ? curve.G2.toObject(res) : res
-}
-
-async function readHeaderGroth16(fd: any, sections: any, toObject: any) {
-    const zkey: any = {}
-
-    zkey.protocol = "groth16"
-
-    await binFileUtils.startReadUniqueSection(fd, sections, 2)
-    const n8q = await fd.readULE32()
-    zkey.n8q = n8q
-    zkey.q = await binFileUtils.readBigInt(fd, n8q)
-
-    const n8r = await fd.readULE32()
-    zkey.n8r = n8r
-    zkey.r = await binFileUtils.readBigInt(fd, n8r)
-    zkey.curve = await buildBn128(undefined, undefined)
-    zkey.nVars = await fd.readULE32()
-    zkey.nPublic = await fd.readULE32()
-    zkey.domainSize = await fd.readULE32()
-    zkey.power = log2(zkey.domainSize)
-    zkey.vk_alpha_1 = await readG1(fd, zkey.curve, toObject)
-    zkey.vk_beta_1 = await readG1(fd, zkey.curve, toObject)
-    zkey.vk_beta_2 = await readG2(fd, zkey.curve, toObject)
-    zkey.vk_gamma_2 = await readG2(fd, zkey.curve, toObject)
-    zkey.vk_delta_1 = await readG1(fd, zkey.curve, toObject)
-    zkey.vk_delta_2 = await readG2(fd, zkey.curve, toObject)
-    await binFileUtils.endReadSection(fd)
-
-    return zkey
-}
-
-export async function readHeader(fd: any, sections: any, toObject: any) {
-    await binFileUtils.startReadUniqueSection(fd, sections, 1)
-    const protocolId = await fd.readULE32()
-    await binFileUtils.endReadSection(fd)
-
-    if (protocolId === 1) {
-        return readHeaderGroth16(fd, sections, toObject)
-    }
-
-    throw new Error("Protocol not supported: ")
-}