Line data    Source code

       1             : #include "../fd_zksdk_private.h"
       2             : 
       3             : /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/sigma_proofs/batched_grouped_ciphertext_validity/handles_2.rs#L163 */
       4             : static inline void
       5             : batched_grouped_ciphertext_validity_hash_context( fd_zksdk_transcript_t * transcript,
       6             :                                                   uchar const             pubkey1 [ 32 ],
       7             :                                                   uchar const             pubkey2 [ 32 ],
       8             :                                                   grp_ciph_2h_t const *   grouped_ciphertext_lo,
       9           0 :                                                   grp_ciph_2h_t const *   grouped_ciphertext_hi ) {
      10           0 :   fd_zksdk_transcript_append_pubkey ( transcript, FD_TRANSCRIPT_LITERAL("first-pubkey"),  pubkey1 );
      11           0 :   fd_zksdk_transcript_append_pubkey ( transcript, FD_TRANSCRIPT_LITERAL("second-pubkey"), pubkey2 );
      12           0 :   fd_zksdk_transcript_append_message( transcript, FD_TRANSCRIPT_LITERAL("grouped-ciphertext-lo"), (uchar *)grouped_ciphertext_lo, sizeof(grp_ciph_2h_t) );
      13           0 :   fd_zksdk_transcript_append_message( transcript, FD_TRANSCRIPT_LITERAL("grouped-ciphertext-hi"), (uchar *)grouped_ciphertext_hi, sizeof(grp_ciph_2h_t) );
      14           0 : }
      15             : 
      16             : /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/sigma_proofs/batched_grouped_ciphertext_validity/handles_2.rs#L106 */
      17             : static inline int
      18             : fd_zksdk_verify_proof_batched_grouped_ciphertext_2_handles_validity(
      19             :   fd_zksdk_grp_ciph_2h_val_proof_t const * proof,
      20             :   uchar const                              pubkey1    [ 32 ],
      21             :   uchar const                              pubkey2    [ 32 ],
      22             :   grp_ciph_2h_t const *                    grouped_ciphertext_lo,
      23             :   grp_ciph_2h_t const *                    grouped_ciphertext_hi,
      24           0 :   fd_zksdk_transcript_t *                  transcript ) {
      25             : 
      26             :   /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/sigma_proofs/batched_grouped_ciphertext_validity/handles_2.rs#L117-L122 */
      27           0 :   if( FD_UNLIKELY( fd_memeq( pubkey1,                           fd_ristretto255_compressed_zero, 32 )
      28           0 :                 || fd_memeq( grouped_ciphertext_lo->commitment, fd_ristretto255_compressed_zero, 32 )
      29           0 :                 || fd_memeq( grouped_ciphertext_hi->commitment, fd_ristretto255_compressed_zero, 32 ) ) ) {
      30           0 :     return FD_ZKSDK_VERIFY_PROOF_ERROR;
      31           0 :   }
      32             : 
      33             :   /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/sigma_proofs/batched_grouped_ciphertext_validity/handles_2.rs#L124-L131 */
      34           0 :   batched_grouped_ciphertext_validity_hash_context( transcript, pubkey1, pubkey2, grouped_ciphertext_lo, grouped_ciphertext_hi );
      35           0 :   fd_zksdk_transcript_domsep_batched_grp_ciph_val_proof( transcript, 2 );
      36             : 
      37             :   /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/sigma_proofs/batched_grouped_ciphertext_validity/handles_2.rs#L133 */
      38           0 :   uchar t[ 32 ];
      39           0 :   fd_zksdk_transcript_challenge_scalar( t, transcript, FD_TRANSCRIPT_LITERAL("t") );
      40             : 
      41             :   /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/sigma_proofs/batched_grouped_ciphertext_validity/handles_2.rs#L135-L160
      42             :      Note: in our impl, t is embedded in the final MSM. */
      43           0 :   return fd_zksdk_verify_proof_direct_grouped_ciphertext_2_handles_validity(
      44           0 :     proof,
      45           0 :     pubkey1,
      46           0 :     pubkey2,
      47           0 :     grouped_ciphertext_lo->commitment,
      48           0 :     grouped_ciphertext_lo->handles[0].handle,
      49           0 :     grouped_ciphertext_lo->handles[1].handle,
      50           0 :     grouped_ciphertext_hi->commitment,
      51           0 :     grouped_ciphertext_hi->handles[0].handle,
      52           0 :     grouped_ciphertext_hi->handles[1].handle,
      53           0 :     t,
      54           0 :     1,
      55           0 :     transcript
      56           0 :   );
      57           0 : }
      58             : 
      59             : /* https://github.com/solana-program/zk-elgamal-proof/blob/zk-sdk%40v5.0.1/zk-sdk/src/zk_elgamal_proof_program/proof_data/batched_grouped_ciphertext_validity/handles_2.rs#L126 */
      60             : int
      61           0 : fd_zksdk_instr_verify_proof_batched_grouped_ciphertext_2_handles_validity( void const * _context, void const * _proof ) {
      62           0 :   fd_zksdk_transcript_t transcript[1];
      63           0 :   fd_zksdk_transcript_init( transcript, FD_TRANSCRIPT_LITERAL("batched-grouped-ciphertext-validity-2-handles-instruction") );
      64             : 
      65           0 :   fd_zksdk_batched_grp_ciph_2h_val_context_t const * context = _context;
      66           0 :   fd_zksdk_batched_grp_ciph_2h_val_proof_t const *   proof   = _proof;
      67           0 :   return fd_zksdk_verify_proof_batched_grouped_ciphertext_2_handles_validity(
      68           0 :     proof,
      69           0 :     context->pubkey1,
      70           0 :     context->pubkey2,
      71           0 :     context->grouped_ciphertext_lo,
      72           0 :     context->grouped_ciphertext_hi,
      73           0 :     transcript
      74           0 :   );
      75           0 : }