mta

Documentation

Index

• Constants
• func AliceEnd(pkA *paillier.PublicKey, pf *ProofBob, h1A, h2A, cA, cB, NTildeA *big.Int, ...) (alphaIJ *big.Int, err error)
• func AliceEndWC(pkA *paillier.PublicKey, pf *ProofBobWC, B *crypto.ECPoint, ...) (muIJ, muIJRec, muIJRand *big.Int, err error)
• type ProofBob
  • func BobMid(pkA *paillier.PublicKey, pf *RangeProofAlice, ...) (beta, cB, betaPrm *big.Int, piB *ProofBob, err error)
  • func ProofBobFromBytes(bzs [][]byte) (*ProofBob, error)
  • func ProveBob(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2, x, y, r *big.Int) (*ProofBob, error)
  • func (pf *ProofBob) Bytes() [ProofBobBytesParts][]byte
  • func (pf *ProofBob) ValidateBasic() bool
  • func (pf *ProofBob) Verify(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2 *big.Int) bool
• type ProofBobWC
  • func BobMidWC(pkA *paillier.PublicKey, pf *RangeProofAlice, ...) (betaPrm, cB *big.Int, piB *ProofBobWC, err error)
  • func ProofBobWCFromBytes(bzs [][]byte) (*ProofBobWC, error)
  • func ProveBobWC(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2, x, y, r *big.Int, ...) (*ProofBobWC, error)
  • func (pf *ProofBobWC) Bytes() [ProofBobWCBytesParts][]byte
  • func (pf *ProofBobWC) ValidateBasic() bool
  • func (pf *ProofBobWC) Verify(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2 *big.Int, X *crypto.ECPoint) bool
• type RangeProofAlice
  • func AliceInit(pkA *paillier.PublicKey, a, cA, rA, NTildeB, h1B, h2B *big.Int) (pf *RangeProofAlice, err error)
  • func ProveRangeAlice(pk *paillier.PublicKey, c, NTilde, h1, h2, m, r *big.Int) (*RangeProofAlice, error)
  • func RangeProofAliceFromBytes(bzs [][]byte) (*RangeProofAlice, error)
  • func (pf *RangeProofAlice) Bytes() [RangeProofAliceBytesParts][]byte
  • func (pf *RangeProofAlice) ValidateBasic() bool
  • func (pf *RangeProofAlice) Verify(pk *paillier.PublicKey, NTilde, h1, h2, c *big.Int) bool

Constants

const (
	ProofBobBytesParts   = 10
	ProofBobWCBytesParts = 12
)

const (
	RangeProofAliceBytesParts = 6
)

Functions

func AliceEnd

func AliceEnd(
	pkA *paillier.PublicKey,
	pf *ProofBob,
	h1A, h2A, cA, cB, NTildeA *big.Int,
	sk *paillier.PrivateKey,
) (alphaIJ *big.Int, err error)

func AliceEndWC

func AliceEndWC(
	pkA *paillier.PublicKey,
	pf *ProofBobWC,
	B *crypto.ECPoint,
	cA, cB, NTildeA, h1A, h2A *big.Int,
	sk *paillier.PrivateKey,
) (muIJ, muIJRec, muIJRand *big.Int, err error)

Types

type ProofBob

type ProofBob struct {
	Z, ZPrm, T, V, W, S, S1, S2, T1, T2 *big.Int
}

func BobMid

func BobMid(
	pkA *paillier.PublicKey,
	pf *RangeProofAlice,
	b, cA, NTildeA, h1A, h2A, NTildeB, h1B, h2B *big.Int,
) (beta, cB, betaPrm *big.Int, piB *ProofBob, err error)

func ProofBobFromBytes

func ProofBobFromBytes(bzs [][]byte) (*ProofBob, error)

func ProveBob

func ProveBob(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2, x, y, r *big.Int) (*ProofBob, error)

ProveBob implements Bob's proof "ProveMta_Bob" used in the MtA protocol from GG18Spec (9) Fig. 11.

func (*ProofBob) Bytes

func (pf *ProofBob) Bytes() [ProofBobBytesParts][]byte

func (*ProofBob) ValidateBasic

func (pf *ProofBob) ValidateBasic() bool

func (*ProofBob) Verify

func (pf *ProofBob) Verify(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2 *big.Int) bool

ProveBob.Verify implements verification of Bob's proof without check "VerifyMta_Bob" used in the MtA protocol from GG18Spec (9) Fig. 11.

type ProofBobWC

type ProofBobWC struct {
	*ProofBob
	U *crypto.ECPoint
}

func BobMidWC

func BobMidWC(
	pkA *paillier.PublicKey,
	pf *RangeProofAlice,
	b, cA, NTildeA, h1A, h2A, NTildeB, h1B, h2B *big.Int,
	B *crypto.ECPoint,
) (betaPrm, cB *big.Int, piB *ProofBobWC, err error)

func ProofBobWCFromBytes

func ProofBobWCFromBytes(bzs [][]byte) (*ProofBobWC, error)

func ProveBobWC

func ProveBobWC(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2, x, y, r *big.Int, X *crypto.ECPoint) (*ProofBobWC, error)

ProveBobWC implements Bob's proof both with or without check "ProveMtawc_Bob" and "ProveMta_Bob" used in the MtA protocol from GG18Spec (9) Figs. 10 & 11. an absent `X` generates the proof without the X consistency check X = g^x

func (*ProofBobWC) Bytes

func (pf *ProofBobWC) Bytes() [ProofBobWCBytesParts][]byte

func (*ProofBobWC) ValidateBasic

func (pf *ProofBobWC) ValidateBasic() bool

func (*ProofBobWC) Verify

func (pf *ProofBobWC) Verify(pk *paillier.PublicKey, NTilde, h1, h2, c1, c2 *big.Int, X *crypto.ECPoint) bool

ProveBobWC.Verify implements verification of Bob's proof with check "VerifyMtawc_Bob" used in the MtA protocol from GG18Spec (9) Fig. 10. an absent `X` verifies a proof generated without the X consistency check X = g^x

type RangeProofAlice

type RangeProofAlice struct {
	Z, U, W, S, S1, S2 *big.Int
}

func AliceInit

func AliceInit(
	pkA *paillier.PublicKey,
	a, cA, rA, NTildeB, h1B, h2B *big.Int,
) (pf *RangeProofAlice, err error)

func ProveRangeAlice

func ProveRangeAlice(pk *paillier.PublicKey, c, NTilde, h1, h2, m, r *big.Int) (*RangeProofAlice, error)

ProveRangeAlice implements Alice's range proof used in the MtA and MtAwc protocols from GG18Spec (9) Fig. 9.

func RangeProofAliceFromBytes

func RangeProofAliceFromBytes(bzs [][]byte) (*RangeProofAlice, error)

func (*RangeProofAlice) Bytes

func (pf *RangeProofAlice) Bytes() [RangeProofAliceBytesParts][]byte

func (*RangeProofAlice) ValidateBasic

func (pf *RangeProofAlice) ValidateBasic() bool

func (*RangeProofAlice) Verify

func (pf *RangeProofAlice) Verify(pk *paillier.PublicKey, NTilde, h1, h2, c *big.Int) bool