zkmul

Documentation

Index

• type Commitment
• type Private
• type Proof
  • func NewProof(group curve.Curve, hash *hash.Hash, public Public, private Private) *Proof
  • func (p *Proof) IsValid(public Public) bool
  • func (p *Proof) Verify(group curve.Curve, hash *hash.Hash, public Public) bool
• type Public

Types

type Commitment

type Commitment struct {
	// A = α ⊙ Y % ρ
	A *paillier.Ciphertext
	// B = Enc(α;s)
	B *paillier.Ciphertext
}

type Private

type Private struct {
	// X = x is the plaintext of Public.X.
	X *saferith.Int

	// Rho = ρ is the nonce for Public.C.
	Rho *saferith.Nat

	// RhoX = ρₓ is the nonce for Public.X
	RhoX *saferith.Nat
}

type Proof

type Proof struct {
	*Commitment
	// Z = α + ex
	Z *saferith.Int
	// U = r⋅ρᵉ mod N
	U *saferith.Nat
	// V = s⋅ρₓᵉ
	V *saferith.Nat
}

func NewProof

func NewProof(group curve.Curve, hash *hash.Hash, public Public, private Private) *Proof

func (*Proof) IsValid

func (p *Proof) IsValid(public Public) bool

func (*Proof) Verify

func (p *Proof) Verify(group curve.Curve, hash *hash.Hash, public Public) bool

type Public

type Public struct {
	// X = Enc(x; ρₓ)
	X *paillier.Ciphertext

	// Y is a ciphertext over the prover's public key
	Y *paillier.Ciphertext

	// C = x ⊙ Y % ρ
	C *paillier.Ciphertext

	// Prover = N
	Prover *paillier.PublicKey
}