Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(public API): expose hashing to curve for BN254 and BLS12-381 #437

Merged
merged 1 commit into from
Jul 19, 2024
Merged

feat(public API): expose hashing to curve for BN254 and BLS12-381 #437

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
46 changes: 40 additions & 6 deletions bindings/c_curve_decls.nim
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,10 +12,15 @@ import
lowlevel_bigints,
lowlevel_fields,
lowlevel_extension_fields,
lowlevel_elliptic_curves
lowlevel_elliptic_curves,
hashes
]

export algebras, lowlevel_bigints, lowlevel_fields, lowlevel_extension_fields, lowlevel_elliptic_curves
export algebras,
lowlevel_bigints,
lowlevel_fields, lowlevel_extension_fields,
lowlevel_elliptic_curves,
hashes

import constantine/math/extension_fields # generic sandwich
export extension_fields
Expand All @@ -31,10 +36,10 @@ template genBindingsBig*(Big: untyped) =
else:
{.push noconv, exportc, raises: [].} # No exceptions allowed

func `ctt _ Big _ unmarshalBE`(dst: var Big, src: openarray[byte]): bool =
func `ctt _ Big _ unmarshalBE`(dst: var Big, src: openArray[byte]): bool =
unmarshalBE(dst, src)

func `ctt _ Big _ marshalBE`(dst: var openarray[byte], src: Big): bool =
func `ctt _ Big _ marshalBE`(dst: var openArray[byte], src: Big): bool =
marshalBE(dst, src)

{.pop.}
Expand All @@ -57,10 +62,10 @@ template genBindingsField*(Big, Field: untyped) =
fromBig(dst, src)

# --------------------------------------------------------------------------------------
func `ctt _ Field _ unmarshalBE`(dst: var Field, src: openarray[byte]): bool =
func `ctt _ Field _ unmarshalBE`(dst: var Field, src: openArray[byte]): bool =
unmarshalBE(dst, src)

func `ctt _ Field _ marshalBE`(dst: var openarray[byte], src: Field): bool =
func `ctt _ Field _ marshalBE`(dst: var openArray[byte], src: Field): bool =
marshalBE(dst, src)
# --------------------------------------------------------------------------------------
func `ctt _ Field _ is_eq`(a, b: Field): SecretBool =
Expand Down Expand Up @@ -425,3 +430,32 @@ template genBindings_EC_ShortW_NonAffine*(EC, EcAff, ScalarBig, ScalarField: unt
r.multiScalarMul_vartime(coefs, points, cast[int](len))

{.pop.}

template genBindings_EC_hash_to_curve*(EC: untyped, mapping, hash: untyped, k: static int) =
when appType == "lib":
{.push noconv, dynlib, exportc, raises: [].} # No exceptions allowed
else:
{.push noconv, exportc, raises: [].} # No exceptions allowed

func `ctt _ EC _ mapping _ hash`(
r: var EC,
augmentation: openArray[byte],
message: openArray[byte],
domainSepTag: openArray[byte]) =
## Hashing to Elliptic Curve for `EC`
## with the hash function `hash`
## using the mapping `mapping`
##
## The security parameter used is k = `k`-bit
when EC is EC_ShortW_Jac:
`hashToCurve _ mapping`(hash, k, r, augmentation, message, domainSepTag)
elif EC is EC_ShortW_Prj:
var jac {.noInit, inject.}: jacobian(affine(EC)) # inject to workaround jac'gensym codegen in Nim v2.0.8 (not necessary in Nim v2.2.x) - https://github.com/nim-lang/Nim/pull/23801#issue-2393452970
`hashToCurve _ mapping`(hash, k, jac, augmentation, message, domainSepTag)
r.projectiveFromJacobian(jac)
else:
var jac {.noInit, inject.}: jacobian(EC) # inject to workaround jac'gensym codegen in Nim v2.0.8 (not necessary in Nim v2.2.x) - https://github.com/nim-lang/Nim/pull/23801#issue-2393452970
`hashToCurve _ mapping`(hash, k, jac, augmentation, message, domainSepTag)
r.affine(jac)

{.pop.}
12 changes: 12 additions & 0 deletions bindings/lib_curves.nim
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,12 @@ collectBindings(cBindings_bls12_381):
genBindings_EC_ShortW_Affine(bls12_381_g2_aff, bls12_381_fp2)
genBindings_EC_ShortW_NonAffine(bls12_381_g2_jac, bls12_381_g2_aff, big255, bls12_381_fr)
genBindings_EC_ShortW_NonAffine(bls12_381_g2_prj, bls12_381_g2_aff, big255, bls12_381_fr)
genBindings_EC_hash_to_curve(bls12_381_g1_aff, sswu, sha256, k = 128)
genBindings_EC_hash_to_curve(bls12_381_g1_jac, sswu, sha256, k = 128)
genBindings_EC_hash_to_curve(bls12_381_g1_prj, sswu, sha256, k = 128)
genBindings_EC_hash_to_curve(bls12_381_g2_aff, sswu, sha256, k = 128)
genBindings_EC_hash_to_curve(bls12_381_g2_jac, sswu, sha256, k = 128)
genBindings_EC_hash_to_curve(bls12_381_g2_prj, sswu, sha256, k = 128)

collectBindings(cBindings_bls12_381_parallel):
genParallelBindings_EC_ShortW_NonAffine(bls12_381_g1_jac, bls12_381_g1_aff, bls12_381_fr)
Expand Down Expand Up @@ -82,6 +88,12 @@ collectBindings(cBindings_bn254_snarks):
genBindings_EC_ShortW_Affine(bn254_snarks_g2_aff, bn254_snarks_fp2)
genBindings_EC_ShortW_NonAffine(bn254_snarks_g2_jac, bn254_snarks_g2_aff, big254, bn254_snarks_fr)
genBindings_EC_ShortW_NonAffine(bn254_snarks_g2_prj, bn254_snarks_g2_aff, big254, bn254_snarks_fr)
genBindings_EC_hash_to_curve(bn254_snarks_g1_aff, svdw, sha256, k = 128)
genBindings_EC_hash_to_curve(bn254_snarks_g1_jac, svdw, sha256, k = 128)
genBindings_EC_hash_to_curve(bn254_snarks_g1_prj, svdw, sha256, k = 128)
genBindings_EC_hash_to_curve(bn254_snarks_g2_aff, svdw, sha256, k = 128)
genBindings_EC_hash_to_curve(bn254_snarks_g2_jac, svdw, sha256, k = 128)
genBindings_EC_hash_to_curve(bn254_snarks_g2_prj, svdw, sha256, k = 128)

collectBindings(cBindings_bn254_snarks_parallel):
genParallelBindings_EC_ShortW_NonAffine(bn254_snarks_g1_jac, bn254_snarks_g1_aff, bn254_snarks_fr)
Expand Down
134 changes: 133 additions & 1 deletion constantine-rust/constantine-sys/src/bindings32.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
/* automatically generated by rust-bindgen 0.69.4 */
/* automatically generated by rust-bindgen 0.69.1 */

pub type secret_word = usize;
pub type secret_bool = usize;
Expand Down Expand Up @@ -1530,6 +1530,72 @@ extern "C" {
len: usize,
);
}
extern "C" {
pub fn ctt_bls12_381_g1_aff_sswu_sha256(
r: *mut bls12_381_g1_aff,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bls12_381_g1_jac_sswu_sha256(
r: *mut bls12_381_g1_jac,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bls12_381_g1_prj_sswu_sha256(
r: *mut bls12_381_g1_prj,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bls12_381_g2_aff_sswu_sha256(
r: *mut bls12_381_g2_aff,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bls12_381_g2_jac_sswu_sha256(
r: *mut bls12_381_g2_jac,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bls12_381_g2_prj_sswu_sha256(
r: *mut bls12_381_g2_prj,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
#[repr(C)]
#[derive(Copy, Clone)]
pub struct bn254_snarks_fr {
Expand Down Expand Up @@ -2890,6 +2956,72 @@ extern "C" {
len: usize,
);
}
extern "C" {
pub fn ctt_bn254_snarks_g1_aff_svdw_sha256(
r: *mut bn254_snarks_g1_aff,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bn254_snarks_g1_jac_svdw_sha256(
r: *mut bn254_snarks_g1_jac,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bn254_snarks_g1_prj_svdw_sha256(
r: *mut bn254_snarks_g1_prj,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bn254_snarks_g2_aff_svdw_sha256(
r: *mut bn254_snarks_g2_aff,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bn254_snarks_g2_jac_svdw_sha256(
r: *mut bn254_snarks_g2_jac,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
extern "C" {
pub fn ctt_bn254_snarks_g2_prj_svdw_sha256(
r: *mut bn254_snarks_g2_prj,
augmentation: *const byte,
augmentation_len: usize,
message: *const byte,
message_len: usize,
domainSepTag: *const byte,
domainSepTag_len: usize,
);
}
#[repr(C)]
#[derive(Copy, Clone)]
pub struct pallas_fr {
Expand Down
Loading
Loading