zkmulstar

Documentation

Index

• type Commitment
• type Private
• type Proof
  • func Empty(group curve.Curve) *Proof
  • func NewProof(group curve.Curve, hash *hash.Hash, public Public, private Private) *Proof
  • func (p *Proof) IsValid(public Public) bool
  • func (p *Proof) Verify(group curve.Curve, hash *hash.Hash, public Public) bool
• type Public

Types

type Commitment

type Commitment struct {
	// A = (α ⊙ c) ⊕ Enc(N₀, β, r)
	A *paillier.Ciphertext
	// Bₓ = gᵃ
	Bx curve.Point
	// E = sᵃ tᵍ
	E *safenum.Nat
	// S = sˣ tᵐ
	S *safenum.Nat
}

type Private

type Private struct {
	// X ∈ ± 2ˡ
	X *safenum.Int

	// Rho = ρ = Nonce D
	Rho *safenum.Nat
}

type Proof

type Proof struct {
	*Commitment
	// Z1 = α + ex
	Z1 *safenum.Int
	// Z2 = y + em
	Z2 *safenum.Int
	// W = ρᵉ•r mod N₀
	W *safenum.Nat
	// contains filtered or unexported fields
}

func Empty

func Empty(group curve.Curve) *Proof

func NewProof

func NewProof(group curve.Curve, hash *hash.Hash, public Public, private Private) *Proof

func (*Proof) IsValid

func (p *Proof) IsValid(public Public) bool

func (*Proof) Verify

func (p *Proof) Verify(group curve.Curve, hash *hash.Hash, public Public) bool

type Public

type Public struct {
	// C = Enc₀(?;?)
	C *paillier.Ciphertext

	// D = (x ⨀ C) ⨁ Enc₀(y;ρ)
	D *paillier.Ciphertext

	// X = gˣ
	X curve.Point

	// Verifier = N₀
	Verifier *paillier.PublicKey
	Aux      *pedersen.Parameters
}