github/darkfi
1
1
Fork 0
mirror of https://github.com/darkrenaissance/darkfi.git synced 2026-01-09 22:57:59 -05:00
Code Issues Packages Projects Releases Wiki Activity

transfer transaction based off lead coin

Browse Source
This commit is contained in:
mohab metwally
2022-11-18 16:52:51 +02:00
parent e2d7d0d321
commit 08eb5936bb
3 changed files with 107 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
proof/tx.zk
View File

@@ -17,23 +17,11 @@ contract "tx" {
MerklePath c1_cm_path,
Uint32 c1_cm_pos,
Base c1_sn,
# coin (2) witnesses
Base c2_root_sk,
Base c2_sk,
MerklePath c2_sk_path,
Uint32 c2_sk_pos,
Base c2_rho,
Scalar c2_opening,
Base c2_value,
MerklePath c2_cm_path,
Uint32 c2_cm_pos,
Base c2_sn,
# coin (3) witnesses
Base c3_pk,
Base c3_rho,
Scalar c3_opening,
Base c3_value,
# coin (4) witnesses
Base c4_pk,
Base c4_rho,
@@ -52,9 +40,6 @@ circuit "tx" {
# coin (1) pk/public key
c1_pk = poseidon_hash(PREFIX_PK, c1_root_sk);
constrain_instance(c1_pk);
# coin (2) pk/public key
c2_pk = poseidon_hash(PREFIX_PK, c2_root_sk);
constrain_instance(c2_pk);
# coin (1) cm/commitment
c1_cm_msg = poseidon_hash(PREFIX_CM, c1_pk, c1_value, c1_rho);
c1_cm_v = ec_mul_short(c1_cm_msg, VALUE_COMMIT_VALUE);
@@ -65,16 +50,6 @@ circuit "tx" {
c1_cm_hash = poseidon_hash(c1_cm_x, c1_cm_y);
constrain_instance(c1_cm_x);
constrain_instance(c1_cm_y);
# coin (2) cm/commitment
c2_cm_msg = poseidon_hash(PREFIX_CM, c2_pk, c2_value, c2_rho);
c2_cm_v = ec_mul_short(c2_cm_msg, VALUE_COMMIT_VALUE);
c2_cm_r = ec_mul(c2_opening, VALUE_COMMIT_RANDOM);
c2_cm = ec_add(c2_cm_v, c2_cm_r);
c2_cm_x = ec_get_x(c2_cm);
c2_cm_y = ec_get_y(c2_cm);
c2_cm_hash = poseidon_hash(c2_cm_x, c2_cm_y);
constrain_instance(c2_cm_x);
constrain_instance(c2_cm_y);
# coin (3) cm/commitment
c3_cm_msg = poseidon_hash(PREFIX_CM, c3_pk, c3_value, c3_rho);
c3_cm_v = ec_mul_short(c3_cm_msg, VALUE_COMMIT_VALUE);
@@ -93,25 +68,15 @@ circuit "tx" {
constrain_instance(c4_cm_x);
c4_cm_y = ec_get_y(c4_cm);
constrain_instance(c4_cm_y);
v1v2 = base_add(c1_value, c2_value);
v2v3 = base_add(c3_value, c4_value);
constrain_equal_base(v1v2, v2v3);
constrain_equal_base(c1_value, v3v4);
# root of path to coin1 commitment at given position
c1_root = merkle_root(c1_cm_pos, c1_cm_path, c1_cm_hash);
constrain_instance(c1_root);
# root of path to coin2n commitment at given position
c2_root = merkle_root(c2_cm_pos, c2_cm_path, c2_cm_hash);
constrain_instance(c2_root);
# root of path to coin(1) sk at given position
c1_sk_root = merkle_root(c1_sk_pos, c1_sk_path, c1_sk);
constrain_instance(c1_sk_root);
# root of path to coin(2) sk at given position
c2_sk_root = merkle_root(c2_sk_pos, c2_sk_path, c2_sk);
constrain_instance(c2_sk_root);
# coin (1) sn/nullifier
c1_sn = poseidon_hash(PREFIX_SN, c1_root_sk, c1_rho, ZERO);
constrain_instance(c1_sn);
# coin (2) sn/nullifier
c2_sn = poseidon_hash(PREFIX_SN, c1_root_sk, c2_rho, ZERO);
constrain_instance(c2_sn);
}

108
src/consensus/leadcoin.rs
View File

@@ -41,6 +41,36 @@ use crate::{
pub const MERKLE_DEPTH_LEADCOIN: usize = 32;
pub const MERKLE_DEPTH: u8 = 32;
#[derive(Debug, Clone)]
pub struct TransferStx {
/// commitments [coin3_commitment, coin4_commitment]
pub commitments: [pallas::Point; 2],
/// nullifiers coin1_nullifier
pub nullifier: pallas::Base,
/// sk coin pos
pub tau: pallas::Base,
/// root to coin's commitments
pub root: MerkleNode,
/// transfer proof
pub proof: Proof,
}
/// transfered leadcoin is poured into two coins,
/// first coin is transfered poured coin.
/// second coin is the change returning to sender, or different address.
#[derive(Debug, Clone, Copy)]
pub struct PouredCoin {
/// poured coin public key
pub pk: pallas::Base,
/// poured coin nonce
pub rho: pallas::Base,
/// poured coin commitment opening
pub opening: pallas::Scalar,
/// poured coin value
pub value: u64,
}
// TODO: Unify item names with the names in the ZK proof (those are more descriptive)
/// Structure representing the consensus leader coin
#[derive(Debug, Clone, Copy)]
@@ -65,6 +95,8 @@ pub struct LeadCoin {
pub sn: pallas::Base,
/// Merkle root of coin1 commitment
pub coin1_commitment_root: MerkleNode,
/// coin1 sk
pub coin1_sk: pallas::Base,
/// Merkle root of the `coin1` secret key
pub coin1_sk_root: MerkleNode,
/// coin1 sk position in merkle tree
@@ -104,6 +136,8 @@ impl LeadCoin {
value: u64,
// Slot index in the epock
slot_index: usize,
// coin1 sk
coin1_sk: pallas::Base,
// Merkle root of the `coin_1` secret key in the Merkle tree of secret keys
coin1_sk_root: MerkleNode,
// sk pos
@@ -202,6 +236,7 @@ impl LeadCoin {
nonce_cm: coin2_seed,
sn: c_sn,
coin1_commitment_root,
coin1_sk,
coin1_sk_root,
coin1_sk_pos: u32::try_from(usize::from(coin1_sk_pos)).unwrap(),
coin1_commitment_merkle_path: coin1_commitment_merkle_path.try_into().unwrap(),
@@ -278,7 +313,7 @@ impl LeadCoin {
pub fn create_lead_proof(&self, pk: &ProvingKey) -> Result<Proof> {
let bincode = include_bytes!("../../proof/lead.zk.bin");
let zkbin = ZkBinary::decode(bincode)?;
let prover_witnesses = vec![
let witnesses = vec![
Witness::MerklePath(Value::known(self.coin1_commitment_merkle_path)),
Witness::Uint32(Value::known(self.idx)),
Witness::Uint32(Value::known(self.coin1_sk_pos)),
@@ -293,13 +328,80 @@ impl LeadCoin {
Witness::Scalar(Value::known(mod_r_p(self.rho_mu))),
Witness::Scalar(Value::known(mod_r_p(self.y_mu))),
Witness::Base(Value::known(self.sigma1)),
Witness::Base(Value::known(self.sigma2)),
Witness::Base(Value::known(self.sigma2))
];
let circuit = ZkCircuit::new(prover_witnesses, zkbin.clone());
let circuit = ZkCircuit::new(witnesses, zkbin.clone());
Ok(Proof::create(pk, &[circuit], &self.public_inputs(), &mut OsRng)?)
}
pub fn create_xfer_proof(&self,
pk: &ProvingKey,
change_coin: PouredCoin,
transfered_coin: PouredCoin) -> Result<TransferStx> {
assert!(change_coin.value+transfered_coin.value==self.value
&& self.value>0);
let zero = pallas::Base::zero();
let prefix_cm = pallas::Base::from(4);
let bincode = include_bytes!("../../proof/tx.zk.bin");
let zkbin = ZkBinary::decode(bincode)?;
let retval = pallas::Base::from(change_coin.value);
let xferval = pallas::Base::from(transfered_coin.value);
let pos : u32 = self.idx;
let value = pallas::Base::from(self.value);
let witnesses = vec![
// coin (1) burned coin
Witness::Base(Value::known(self.coin1_commitment_root.inner())),
Witness::Base(Value::known(self.coin1_sk_root.inner())),
Witness::Base(Value::known(self.coin1_sk)),
Witness::MerklePath(Value::known(self.coin1_sk_merkle_path)),
Witness::Uint32(Value::known(self.coin1_sk_pos)),
Witness::Base(Value::known(self.nonce)),
Witness::Scalar(Value::known(self.coin1_blind)),
Witness::Base(Value::known(value)),
Witness::MerklePath(Value::known(self.coin1_commitment_merkle_path)),
Witness::Uint32(Value::known(pos)),
Witness::Base(Value::known(self.sn)),
// coin (3)
Witness::Base(Value::known(change_coin.pk)),
Witness::Base(Value::known(change_coin.rho)),
Witness::Scalar(Value::known(change_coin.opening)),
Witness::Base(Value::known(retval)),
// coin (4)
Witness::Base(Value::known(transfered_coin.pk)),
Witness::Base(Value::known(transfered_coin.rho)),
Witness::Scalar(Value::known(transfered_coin.opening)),
Witness::Base(Value::known(xferval)),
];
let circuit = ZkCircuit::new(witnesses, zkbin.clone());
let proof = Proof::create(pk, &[circuit], &self.public_inputs(), &mut OsRng)?;
let cm3_msg_in = [prefix_cm,
change_coin.pk,
pallas::Base::from(change_coin.value),
change_coin.rho,
];
let cm3_msg = poseidon_hash(cm3_msg_in);
let cm3 = pedersen_commitment_base(cm3_msg, change_coin.opening);
let cm4_msg_in = [prefix_cm,
transfered_coin.pk,
pallas::Base::from(transfered_coin.value),
transfered_coin.rho,
];
let cm4_msg = poseidon_hash(cm4_msg_in);
let cm4 = pedersen_commitment_base(cm4_msg, transfered_coin.opening);
let tx = TransferStx {
commitments: [cm3, cm4],
nullifier: self.sn,
tau: self.tau,
root: self.coin1_commitment_root,
proof: proof
};
Ok(tx)
}
}
/// This struct holds the secrets for creating LeadCoins during one epoch.
pub struct LeadCoinSecrets {
pub secret_keys: Vec<SecretKey>,

1
src/consensus/state.rs
View File

@@ -397,6 +397,7 @@ impl ValidatorState {
sigma2,
LOTTERY_HEAD_START, // TODO: TESTNET: Why is this constant being used?
i,
epoch_secrets.secret_keys[i].inner(),
epoch_secrets.merkle_roots[i],
i, //TODO same as idx now for simplicity.
epoch_secrets.merkle_paths[i],