CryptoNote1

Documentation

Overview

Copyright (c) 2018-2019 by mottla Use of this source code is governed by an MIT license that can be found in the LICENSE file.

Index

• func PrepareRingSig_random(in RingSignature, cosigners int) (signerPosition int, signerPrivatekey *ecdsa.PrivateKey, ...)
• func RandFieldElement(c elliptic.Curve) (k *big.Int)
• type LSAGsignature
  • func NewLSAG(key *ecdsa.PrivateKey) (ls *LSAGsignature)
  • func (s *LSAGsignature) AddKeyImage(priv *ecdsa.PrivateKey)
  • func (s *LSAGsignature) GetCurve() elliptic.Curve
  • func (s *LSAGsignature) Sign(id uint64, candidate common.Address, pubKeys []*ecdsa.PublicKey, ...)
  • func (s LSAGsignature) String() string
  • func (s *LSAGsignature) Verify(id uint64, candidate common.Address, pubKeys []*ecdsa.PublicKey) bool
• type RingSignature
• type Sigma
  • func (s Sigma) String() string

Functions

func PrepareRingSig_random

func PrepareRingSig_random(in RingSignature, cosigners int) (signerPosition int, signerPrivatekey *ecdsa.PrivateKey, pkps []*ecdsa.PublicKey)

creates a signature template with random cosigners and random signer position usefull for testing

func RandFieldElement

func RandFieldElement(c elliptic.Curve) (k *big.Int)

RandFieldElement returns a random element of the field underlying the given Curve using the procedure given in [NSA] A.2.1.

Types

type LSAGsignature

type LSAGsignature struct {
	Sigma
	elliptic.Curve
}

func NewLSAG

func NewLSAG(key *ecdsa.PrivateKey) (ls *LSAGsignature)

returns a new Linkable Spontaneous Anonymous Group Signature Struct. if key is set, ls can be used for signing and verification. If not, ls can be used for verification only

func (*LSAGsignature) AddKeyImage

func (s *LSAGsignature) AddKeyImage(priv *ecdsa.PrivateKey)

Initializes the Key Image which is necessary for signing, validating and the prevention of doublespending after all

func (*LSAGsignature) GetCurve

func (s *LSAGsignature) GetCurve() elliptic.Curve

func (*LSAGsignature) Sign

func (s *LSAGsignature) Sign(id uint64, candidate common.Address, pubKeys []*ecdsa.PublicKey, signerKey *ecdsa.PrivateKey, signerPosition int)

create a Linkable Spontaneous Anonymous Groups Signature asserts that the calling Sigma was prepared properly by calling PrepareRingSig_random(..) before produces a ring signature on a given Curve for a given message as input using the scheme in https://bitcointalk.org/index.php?topic=972541.msg10619684#msg10619684 note that len(Sigma.Ci) =1 != len(Sigma.Si)=len(pubKeys), and therefore the signature requires approximately half the storage as a Traceable Ring Signature produced by SignTRS(...)

func (LSAGsignature) String

func (s LSAGsignature) String() string

func (*LSAGsignature) Verify

func (s *LSAGsignature) Verify(id uint64, candidate common.Address, pubKeys []*ecdsa.PublicKey) bool

checks weather the given LSAG signature is valid according to verification rules in MRL-0005 returns true if valid, false otherwise

type RingSignature

type RingSignature interface {
	Sign(id uint64, candidate common.Address, pubKeys []*ecdsa.PublicKey, signerKey *ecdsa.PrivateKey, signerPosition int)
	Verify(id uint64, candidate common.Address, pubKeys []*ecdsa.PublicKey) bool

	AddKeyImage(priv *ecdsa.PrivateKey)
	// contains filtered or unexported methods
}

type Sigma

type Sigma struct {
	Ix, Iy *big.Int //keyimage I=xH(P)
	//position of signer Public Key in the pubKeys Array. Should be assigned randomly.
	Ci []*big.Int //commitment for TRS. In LSAG only len(Ci)=1
	Si []*big.Int //commitment for LSAG and TRS
}

func (Sigma) String

func (s Sigma) String() string