circomlibjs-hinkal-fork 0.0.7 → 0.0.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/main.cjs +86 -71
- package/package.json +3 -2
package/build/main.cjs
CHANGED
|
@@ -25378,91 +25378,106 @@ function buildPoseidonWasm(module) {
|
|
|
25378
25378
|
}
|
|
25379
25379
|
|
|
25380
25380
|
async function buildEddsa() {
|
|
25381
|
-
|
|
25382
|
-
|
|
25383
|
-
|
|
25381
|
+
const babyJub = await buildBabyJub();
|
|
25382
|
+
const poseidon = await buildPoseidon();
|
|
25383
|
+
return new Eddsa(babyJub, poseidon);
|
|
25384
25384
|
}
|
|
25385
25385
|
|
|
25386
25386
|
class Eddsa {
|
|
25387
|
+
constructor(babyJub, poseidon) {
|
|
25388
|
+
this.babyJub = babyJub;
|
|
25389
|
+
this.poseidon = poseidon;
|
|
25390
|
+
this.F = babyJub.F;
|
|
25391
|
+
}
|
|
25387
25392
|
|
|
25388
|
-
|
|
25389
|
-
|
|
25390
|
-
|
|
25391
|
-
|
|
25392
|
-
|
|
25393
|
+
pruneBuffer(buff) {
|
|
25394
|
+
buff[0] = buff[0] & 0xf8;
|
|
25395
|
+
buff[31] = buff[31] & 0x7f;
|
|
25396
|
+
buff[31] = buff[31] | 0x40;
|
|
25397
|
+
return buff;
|
|
25398
|
+
}
|
|
25393
25399
|
|
|
25394
|
-
|
|
25395
|
-
|
|
25396
|
-
|
|
25397
|
-
|
|
25398
|
-
|
|
25399
|
-
|
|
25400
|
+
prv2pub(prv) {
|
|
25401
|
+
const sBuff = this.pruneBuffer(
|
|
25402
|
+
createBlakeHash("blake512").update(prv).digest().slice(0, 32),
|
|
25403
|
+
);
|
|
25404
|
+
let s = ffjavascript.utils.leBuff2int(sBuff);
|
|
25405
|
+
const A = this.babyJub.mulPointEscalar(
|
|
25406
|
+
this.babyJub.Base8,
|
|
25407
|
+
ffjavascript.Scalar.shr(s, 3),
|
|
25408
|
+
);
|
|
25409
|
+
return A;
|
|
25410
|
+
}
|
|
25400
25411
|
|
|
25401
|
-
|
|
25402
|
-
|
|
25403
|
-
|
|
25404
|
-
|
|
25405
|
-
|
|
25412
|
+
signPoseidon(prv, msg) {
|
|
25413
|
+
const F = this.babyJub.F;
|
|
25414
|
+
const sBuff = this.pruneBuffer(
|
|
25415
|
+
createBlakeHash("blake512").update(Buffer.from(prv)).digest(),
|
|
25416
|
+
);
|
|
25417
|
+
const s = ffjavascript.Scalar.fromRprLE(sBuff, 0, 32);
|
|
25418
|
+
const A = this.babyJub.mulPointEscalar(
|
|
25419
|
+
this.babyJub.Base8,
|
|
25420
|
+
ffjavascript.Scalar.shr(s, 3),
|
|
25421
|
+
);
|
|
25406
25422
|
|
|
25407
|
-
|
|
25408
|
-
|
|
25409
|
-
|
|
25410
|
-
|
|
25411
|
-
|
|
25412
|
-
|
|
25423
|
+
const composeBuff = new Uint8Array(32 + msg.length);
|
|
25424
|
+
composeBuff.set(sBuff.slice(32), 0);
|
|
25425
|
+
F.toRprLE(composeBuff, 32, msg);
|
|
25426
|
+
const rBuff = createBlakeHash("blake512")
|
|
25427
|
+
.update(Buffer.from(composeBuff))
|
|
25428
|
+
.digest();
|
|
25429
|
+
let r = ffjavascript.Scalar.mod(ffjavascript.Scalar.fromRprLE(rBuff, 0, 64), this.babyJub.subOrder);
|
|
25430
|
+
const R8 = this.babyJub.mulPointEscalar(this.babyJub.Base8, r);
|
|
25413
25431
|
|
|
25414
|
-
|
|
25415
|
-
|
|
25416
|
-
|
|
25417
|
-
|
|
25418
|
-
|
|
25419
|
-
|
|
25420
|
-
|
|
25421
|
-
|
|
25422
|
-
|
|
25423
|
-
|
|
25424
|
-
|
|
25425
|
-
S: S
|
|
25426
|
-
};
|
|
25427
|
-
}
|
|
25432
|
+
const hm = this.poseidon([R8[0], R8[1], A[0], A[1], msg]);
|
|
25433
|
+
const hms = ffjavascript.Scalar.e(this.babyJub.F.toObject(hm));
|
|
25434
|
+
const S = ffjavascript.Scalar.mod(
|
|
25435
|
+
ffjavascript.Scalar.add(r, ffjavascript.Scalar.mul(hms, s)),
|
|
25436
|
+
this.babyJub.subOrder,
|
|
25437
|
+
);
|
|
25438
|
+
return {
|
|
25439
|
+
R8: R8,
|
|
25440
|
+
S: S,
|
|
25441
|
+
};
|
|
25442
|
+
}
|
|
25428
25443
|
|
|
25429
|
-
|
|
25430
|
-
|
|
25431
|
-
|
|
25432
|
-
|
|
25433
|
-
|
|
25434
|
-
|
|
25435
|
-
|
|
25436
|
-
|
|
25437
|
-
|
|
25438
|
-
|
|
25444
|
+
verifyPoseidon(msg, sig, A) {
|
|
25445
|
+
// Check parameters
|
|
25446
|
+
if (typeof sig != "object") return false;
|
|
25447
|
+
if (!Array.isArray(sig.R8)) return false;
|
|
25448
|
+
if (sig.R8.length != 2) return false;
|
|
25449
|
+
if (!this.babyJub.inCurve(sig.R8)) return false;
|
|
25450
|
+
if (!Array.isArray(A)) return false;
|
|
25451
|
+
if (A.length != 2) return false;
|
|
25452
|
+
if (!this.babyJub.inCurve(A)) return false;
|
|
25453
|
+
if (sig.S >= this.babyJub.subOrder) return false;
|
|
25439
25454
|
|
|
25440
|
-
|
|
25441
|
-
|
|
25455
|
+
const hm = this.poseidon([sig.R8[0], sig.R8[1], A[0], A[1], msg]);
|
|
25456
|
+
const hms = ffjavascript.Scalar.e(this.babyJub.F.toObject(hm));
|
|
25442
25457
|
|
|
25443
|
-
|
|
25444
|
-
|
|
25445
|
-
|
|
25458
|
+
const Pleft = this.babyJub.mulPointEscalar(this.babyJub.Base8, sig.S);
|
|
25459
|
+
let Pright = this.babyJub.mulPointEscalar(A, ffjavascript.Scalar.mul(hms, 8));
|
|
25460
|
+
Pright = this.babyJub.addPoint(sig.R8, Pright);
|
|
25446
25461
|
|
|
25447
|
-
|
|
25448
|
-
|
|
25449
|
-
|
|
25450
|
-
|
|
25462
|
+
if (!this.babyJub.F.eq(Pleft[0], Pright[0])) return false;
|
|
25463
|
+
if (!this.babyJub.F.eq(Pleft[1], Pright[1])) return false;
|
|
25464
|
+
return true;
|
|
25465
|
+
}
|
|
25451
25466
|
|
|
25452
|
-
|
|
25453
|
-
|
|
25454
|
-
|
|
25455
|
-
|
|
25456
|
-
|
|
25457
|
-
|
|
25458
|
-
|
|
25467
|
+
packSignature(sig) {
|
|
25468
|
+
const buff = new Uint8Array(64);
|
|
25469
|
+
const R8p = this.babyJub.packPoint(sig.R8);
|
|
25470
|
+
buff.set(R8p, 0);
|
|
25471
|
+
ffjavascript.Scalar.toRprLE(buff, 32, sig.S, 32);
|
|
25472
|
+
return buff;
|
|
25473
|
+
}
|
|
25459
25474
|
|
|
25460
|
-
|
|
25461
|
-
|
|
25462
|
-
|
|
25463
|
-
|
|
25464
|
-
|
|
25465
|
-
|
|
25475
|
+
unpackSignature(sigBuff) {
|
|
25476
|
+
return {
|
|
25477
|
+
R8: this.babyJub.unpackPoint(sigBuff.slice(0, 32)),
|
|
25478
|
+
S: ffjavascript.Scalar.fromRprLE(sigBuff, 32, 32),
|
|
25479
|
+
};
|
|
25480
|
+
}
|
|
25466
25481
|
}
|
|
25467
25482
|
|
|
25468
25483
|
exports.buildBabyjub = buildBabyJub;
|
package/package.json
CHANGED
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
"import": "./main.js",
|
|
8
8
|
"require": "./build/main.cjs"
|
|
9
9
|
},
|
|
10
|
-
"version": "0.0.
|
|
10
|
+
"version": "0.0.9",
|
|
11
11
|
"description": "Javascript library to work with circomlib",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"test": "mocha",
|
|
@@ -31,6 +31,7 @@
|
|
|
31
31
|
"rollup": "^4.60.4"
|
|
32
32
|
},
|
|
33
33
|
"dependencies": {
|
|
34
|
-
"ffjavascript": "^0.3.0"
|
|
34
|
+
"ffjavascript": "^0.3.0",
|
|
35
|
+
"blake-hash": "^2.0.0"
|
|
35
36
|
}
|
|
36
37
|
}
|