circomlibjs-hinkal-fork 0.0.5 → 0.0.6

package/build/main.cjs

@@ -1,6 +1,7 @@
 'use strict';
 
 var ffjavascript = require('ffjavascript');
+var createBlakeHash = require('blake-hash');
 
 async function buildBabyJub() {
     const bn128 = await ffjavascript.getCurveFromName("bn128", true);
@@ -25376,6 +25377,95 @@ function buildPoseidonWasm(module) {
     module.exportFunction("poseidon");
 }
 
+async function buildEddsa() {
+    const babyJub = await buildBabyJub();
+    const poseidon = await buildPoseidon();
+    return new Eddsa(babyJub, poseidon);
+}
+
+class Eddsa {
+
+    constructor(babyJub, poseidon) {
+        this.babyJub = babyJub;
+        this.poseidon = poseidon;
+        this.F = babyJub.F;
+    }
+
+    pruneBuffer(buff) {
+        buff[0] = buff[0] & 0xF8;
+        buff[31] = buff[31] & 0x7F;
+        buff[31] = buff[31] | 0x40;
+        return buff;
+    }
+
+    signPoseidon(prv, msg) {
+        const F = this.babyJub.F;
+        const sBuff = this.pruneBuffer(createBlakeHash("blake512").update(Buffer.from(prv)).digest());
+        const s = ffjavascript.Scalar.fromRprLE(sBuff, 0, 32);
+        const A = this.babyJub.mulPointEscalar(this.babyJub.Base8, ffjavascript.Scalar.shr(s, 3));
+
+        const composeBuff = new Uint8Array(32 + msg.length);
+        composeBuff.set(sBuff.slice(32), 0);
+        F.toRprLE(composeBuff, 32, msg);
+        const rBuff = createBlakeHash("blake512").update(Buffer.from(composeBuff)).digest();
+        let r = ffjavascript.Scalar.mod(ffjavascript.Scalar.fromRprLE(rBuff, 0, 64), this.babyJub.subOrder);
+        const R8 = this.babyJub.mulPointEscalar(this.babyJub.Base8, r);
+
+        const hm = this.poseidon([R8[0], R8[1], A[0], A[1], msg]);
+        const hms = ffjavascript.Scalar.e(this.babyJub.F.toObject(hm));
+        const S = ffjavascript.Scalar.mod(
+            ffjavascript.Scalar.add(
+                r,
+                ffjavascript.Scalar.mul(hms, s)
+            ),
+            this.babyJub.subOrder
+        );
+        return {
+            R8: R8,
+            S: S
+        };
+    }
+
+    verifyPoseidon(msg, sig, A) {
+        // Check parameters
+        if (typeof sig != "object") return false;
+        if (!Array.isArray(sig.R8)) return false;
+        if (sig.R8.length!= 2) return false;
+        if (!this.babyJub.inCurve(sig.R8)) return false;
+        if (!Array.isArray(A)) return false;
+        if (A.length!= 2) return false;
+        if (!this.babyJub.inCurve(A)) return false;
+        if (sig.S>= this.babyJub.subOrder) return false;
+
+        const hm = this.poseidon([sig.R8[0], sig.R8[1], A[0], A[1], msg]);
+        const hms = ffjavascript.Scalar.e(this.babyJub.F.toObject(hm));
+
+        const Pleft = this.babyJub.mulPointEscalar(this.babyJub.Base8, sig.S);
+        let Pright = this.babyJub.mulPointEscalar(A, ffjavascript.Scalar.mul(hms, 8));
+        Pright = this.babyJub.addPoint(sig.R8, Pright);
+
+        if (!this.babyJub.F.eq(Pleft[0],Pright[0])) return false;
+        if (!this.babyJub.F.eq(Pleft[1],Pright[1])) return false;
+        return true;
+    }
+
+    packSignature(sig) {
+        const buff = new Uint8Array(64);
+        const R8p = this.babyJub.packPoint(sig.R8);
+        buff.set(R8p, 0);
+        ffjavascript.Scalar.toRprLE(buff, 32, sig.S, 32);
+        return buff;
+    }
+
+    unpackSignature(sigBuff) {
+        return {
+            R8: this.babyJub.unpackPoint(sigBuff.slice(0,32)),
+            S: ffjavascript.Scalar.fromRprLE(sigBuff, 32, 32)
+        };
+    }
+}
+
 exports.buildBabyjub = buildBabyJub;
+exports.buildEddsa = buildEddsa;
 exports.buildPoseidon = buildPoseidon;
 exports.buildPoseidonWasm = buildPoseidonWasm;

package/package.json

@@ -7,7 +7,7 @@
     "import": "./main.js",
     "require": "./build/main.cjs"
   },
-  "version": "0.0.5",
+  "version": "0.0.6",
   "description": "Javascript library to work with circomlib",
   "scripts": {
     "test": "mocha",
@@ -27,7 +27,8 @@
   "devDependencies": {
     "chai": "^4.3.4",
     "ganache": "^7.3.0",
-    "mocha": "^9.1.3"
+    "mocha": "^9.1.3",
+    "rollup": "^4.60.4"
   },
   "dependencies": {
     "ffjavascript": "^0.3.0"