Skip to content
This repository has been archived by the owner on Jun 10, 2020. It is now read-only.

initial rust test #7

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

initial rust test #7

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b0a5ad4
initial rust test
nikkolasg Apr 24, 2020
e320f59
both versions with links
nikkolasg Apr 24, 2020
c16ba08
without println
nikkolasg Apr 24, 2020
f5bd54e
separate impl with test for both
nikkolasg Apr 26, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
190 changes: 190 additions & 0 deletions map.go
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,190 @@
package bls

import (
"crypto/sha256"
"fmt"
"io"

"golang.org/x/crypto/hkdf"
)

func mapG2PairedV18(msg []byte, ciphersuite []byte) *PointG2 {
padded := make([]byte, len(msg)+1)
copy(padded, msg)
msg = padded
//fmt.Println("input to hkdf.extract: msg: ", msg, " -- cipher: ", ciphersuite)
msg_hash := hkdf.Extract(sha256.New, msg, ciphersuite)
//fmt.Println("msg_hash: ", msg_hash)
var fe2s []*fe2
for ctrI := 0; ctrI < 2; ctrI++ {
var fes []*fe
for i := 1; i < 3; i++ {
var ctr = byte(ctrI)
var idx = byte(i)
info := []byte{72, 50, 67, ctr, idx}

out := make([]byte, 64)
h := hkdf.Expand(sha256.New, msg_hash, info)
if _, err := io.ReadFull(h, out); err != nil {
panic(err)
}
fmt.Println("counter", ctr, "index", idx, "out: ", out)
// XXX TO CHANGE
fes = append(fes, new(fe))
}
// use the two Fq to create one Fq2
// XXX TO CHANGE
fe2s = append(fe2s, new(fe2)) // FromFq(...)
}
return mapFq2sToG2(fe2s[0], fe2s[1])
}

func mapG1PairedV18(msg []byte, ciphersuite []byte) *PointG1 {
msg_hash := hkdf.Extract(sha256.New, msg, ciphersuite)
var fes []*fe
for ctrI := 0; ctrI < 2; ctrI++ {
var ctr = byte(ctrI)
var idx = byte(1)
info := []byte{72, 50, 67, ctr, idx}

out := make([]byte, 64)
h := hkdf.Expand(sha256.New, msg_hash, info)
if _, err := io.ReadFull(h, out); err != nil {
panic(err)
}
fmt.Println("counter", ctr, "index", idx, "out: ", out)
// XXX TO CHANGE
fes = append(fes, new(fe))
}
return mapFqsToG1(fes[0], fes[1])
}

//// PAIRING PLUS PART

func mapG2PairingPlusV19Sha256(msg []byte, ciphersuite []byte) *PointG2 {
expanded := expandMessageSha256(msg, ciphersuite)
len_per_elm := 128
var fe2s []*fe2
for i := 0; i < 2; i++ {
bytesToConvert := expanded[i*len_per_elm : (i+1)*len_per_elm]
//fmt.Println(" convert: i ", i, " bytes ->", bytesToConvert)
fq_1 := bytesToConvert[:64]
fq_2 := bytesToConvert[64:]
fmt.Println("ctr:", i, " fq_1", fq_1, "fq_2", fq_2)
// XXX TO CHANGE: form fe2 from fq_1 and fq_2
fe2s = append(fe2s, new(fe2))
}
return mapFq2sToG2(fe2s[0], fe2s[1])
}

func mapG1PairingPlusV19Sha256(msg []byte, ciphersuite []byte) *PointG1 {
expanded := expandMessageSha256(msg, ciphersuite)
len_per_elm := 128
var fes []*fe
for i := 0; i < 2; i++ {
bytesToConvert := expanded[i*len_per_elm : (i+1)*len_per_elm]
//fmt.Println(" convert: i ", i, " bytes ->", bytesToConvert)
fq_1 := bytesToConvert[:32]
fq_2 := bytesToConvert[32:]
fmt.Println("fq_1", fq_1, "fq_2", fq_2)
// XXX TO CHANGE: form fe2 from fq_1 and fq_2
fes = append(fes, new(fe))
}
return mapFqsToG1(fes[0], fes[1])
}

func expandMessageSha256(msg, domain []byte) []byte {
len_in_bytes := 256
length := len_in_bytes // just easier
// b_0
h := sha256.New()
// XXX Why do they hash a 64 byte slice empty !?
h.Write(make([]byte, 64))
h.Write(msg)
h.Write([]byte{byte(length >> 8), byte(length), 0})
h.Write(domain)
h.Write([]byte{byte(len(domain))})
b0 := h.Sum(nil)
// b_1
h = sha256.New()
h.Write(b0)
h.Write([]byte{byte(1)})
h.Write(domain)
h.Write([]byte{byte(len(domain))})
bvals := h.Sum(nil)
//fmt.Println("b0: ", b0)
//fmt.Println("bvals: ", bvals)

// ell = 8
b_in_bytes := 32
for i := 1; i < 8; i++ {
tmp := make([]byte, 32)
//fmt.Println("(i-1) ", i-1, " i ", i, " b_bytes", b_in_bytes)
toZip := bvals[(i-1)*b_in_bytes : i*b_in_bytes]
if len(toZip) != len(b0) {
panic("should check")
}
for j := 0; j < len(toZip); j++ {
tmp[j] = b0[j] ^ toZip[j]
}
//fmt.Println("\ttmp i", i, " --> ", tmp)
h = sha256.New()
h.Write(tmp)
h.Write([]byte{byte(i + 1)})
h.Write(domain)
h.Write([]byte{byte(len(domain))})
bvals = append(bvals, h.Sum(nil)...)
//fmt.Println("\t bvals i ", i, " -> ", bvals)
}
return bvals[:len_in_bytes]
}

///// COMMON PART

func mapFq2sToG2(u1, u2 *fe2) *PointG2 {
g := NewG2(nil)
fp2 := g.f
one := fp2.one()
x1, y1 := fp2.swuMap(u1)
q1 := &PointG2{*x1, *y1, *one}
x2, y2 := fp2.swuMap(u2)
q2 := &PointG2{*x2, *y2, *one}
qaccRaw := g.New()
g.Add(qaccRaw, q1, q2)
g.Affine(qaccRaw)
xacc := qaccRaw[0]
yacc := qaccRaw[1]

// apply isogeny map to accumulated
fp2.isogenyMap(&xacc, &yacc)
r1 := &PointG2{xacc, yacc, *one}

// clear cofactor
g.MulScalar(r1, r1, cofactorEFFG2)
g.Affine(r1)
return r1
}

func mapFqsToG1(u1, u2 *fe) *PointG1 {
g := NewG1()
one := one()
x1, y1 := swuMap(u1)
q1 := &PointG1{*x1, *y1, *one}
x2, y2 := swuMap(u2)
q2 := &PointG1{*x2, *y2, *one}
qaccRaw := g.New()
g.Add(qaccRaw, q1, q2)
g.Affine(qaccRaw)
xacc := qaccRaw[0]
yacc := qaccRaw[1]

// apply isogeny map to accumulated
isogenyMap(&xacc, &yacc)
r1 := &PointG1{xacc, yacc, *one}

// clear cofactor
g.MulScalar(r1, r1, cofactorEFFG1)
g.Affine(r1)
return r1

}
63 changes: 63 additions & 0 deletions rust_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,63 @@
package bls

import (
"testing"

"github.com/stretchr/testify/require"
)

func TestMapG2PairedV18(t *testing.T) {
// output from rust library
// msg: [1, 2, 3, 4]
// ciphersuite: [11, 12, 13, 14]
// g1: [131, 111, 101, 2, 150, 122, 179, 98, 201, 225, 146, 174, 226, 77, 21, 60, 140, 1
// 0, 217, 128, 181, 82, 104, 221, 252, 249, 56, 124, 193, 185, 123, 239, 36, 240, 121,
// 183, 140, 209, 83, 128, 16, 32, 220, 63, 255, 54, 102, 156]
// g2: [160, 93, 104, 53, 27, 41, 139, 58, 91, 218, 1, 247, 99, 145, 6, 244, 46, 130, 12
// 9, 130, 230, 49, 221, 51, 122, 110, 218, 197, 119, 123, 115, 207, 77, 29, 152, 101, 1
// 40, 227, 27, 180, 46, 206, 203, 247, 17, 32, 40, 233, 9, 162, 246, 128, 239, 5, 94, 8
// 5, 50, 14, 217, 228, 20, 130, 226, 88, 244, 97, 110, 73, 241, 216, 222, 158, 122, 93,
// 148, 130, 16, 43, 139, 5, 162, 119, 129, 160, 19, 26, 132, 114, 18, 146, 73, 48, 56,
// 146, 137, 22]
msg := []byte{1, 2, 3, 4}
ciphersuite := []byte{11, 12, 13, 14}

g2 := mapG2PairedV18(msg, ciphersuite)
buffG2 := NewG2(nil).ToCompressed(g2)
expG2 := []byte{160, 93, 104, 53, 27, 41, 139, 58, 91, 218, 1, 247, 99, 145, 6, 244, 46, 130, 12, 9, 130, 230, 49, 221, 51, 122, 110, 218, 197, 119, 123, 115, 207, 77, 29, 152, 101, 1, 40, 227, 27, 180, 46, 206, 203, 247, 17, 32, 40, 233, 9, 162, 246, 128, 239, 5, 94, 8, 5, 50, 14, 217, 228, 20, 130, 226, 88, 244, 97, 110, 73, 241, 216, 222, 158, 122, 93, 148, 130, 16, 43, 139, 5, 162, 119, 129, 160, 19, 26, 132, 114, 18, 146, 73, 48, 56, 146, 137, 22}
require.Equal(t, expG2, buffG2)

g1 := mapG1PairedV18(msg, ciphersuite)
buffG1 := NewG1().ToCompressed(g1)
expG1 := []byte{131, 111, 101, 2, 150, 122, 179, 98, 201, 225, 146, 174, 226, 77, 21, 60, 140, 1, 0, 217, 128, 181, 82, 104, 221, 252, 249, 56, 124, 193, 185, 123, 239, 36, 240, 121, 183, 140, 209, 83, 128, 16, 32, 220, 63, 255, 54, 102, 156}
require.Equal(t, expG1, buffG1)

}

func TestMapG2PairingRustV19(t *testing.T) {
// output from rust library
// msg: [1, 2, 3, 4]
// ciphersuite: [11, 12, 13, 14]
// g1: [136, 41, 115, 190, 51, 57, 186, 221, 122, 190, 164, 136, 206, 67, 232, 125, 233, 231, 173,
// 137, 45, 104, 72, 73, 112, 102, 51, 164, 37, 57, 193, 116, 137, 71, 209, 254, 181, 132, 238, 1
// 73, 194, 241, 24, 210, 169, 220, 180, 96]
// g2: [130, 213, 97, 142, 126, 5, 186, 59, 86, 64, 226, 91, 204, 63, 187, 129, 169, 40, 29, 11, 1
// 91, 9, 50, 207, 28, 0, 76, 251, 86, 151, 252, 6, 180, 245, 1, 135, 188, 144, 82, 163, 153, 198,
// 36, 117, 177, 168, 94, 227, 0, 79, 2, 31, 240, 26, 65, 152, 238, 84, 95, 242, 11, 194, 172, 11
// 8, 40, 87, 36, 181, 147, 183, 174, 64, 153, 219, 3, 130, 109, 101, 39, 51, 214, 232, 149, 146,
// 223, 47, 153, 72, 176, 5, 15, 43, 42, 146, 74, 247]

msg := []byte{1, 2, 3, 4}
ciphersuite := []byte{11, 12, 13, 14}

/* g1 := mapG1PairingPlusV19Sha256(msg, ciphersuite)*/
//buffG1 := NewG1().ToCompressed(g1)
//expG1 := []byte{136, 41, 115, 190, 51, 57, 186, 221, 122, 190, 164, 136, 206, 67, 232, 125, 233, 231, 173, 137, 45, 104, 72, 73, 112, 102, 51, 164, 37, 57, 193, 116, 137, 71, 209, 254, 181, 132, 238, 1, 73, 194, 241, 24, 210, 169, 220, 180, 96}
//require.Equal(t, expG1, buffG1)

g2 := mapG2PairingPlusV19Sha256(msg, ciphersuite)
buffG2 := NewG2(nil).ToCompressed(g2)
expG2 := []byte{130, 213, 97, 142, 126, 5, 186, 59, 86, 64, 226, 91, 204, 63, 187, 129, 169, 40, 29, 11, 1, 91, 9, 50, 207, 28, 0, 76, 251, 86, 151, 252, 6, 180, 245, 1, 135, 188, 144, 82, 163, 153, 198, 36, 117, 177, 168, 94, 227, 0, 79, 2, 31, 240, 26, 65, 152, 238, 84, 95, 242, 11, 194, 172, 11, 8, 40, 87, 36, 181, 147, 183, 174, 64, 153, 219, 3, 130, 109, 101, 39, 51, 214, 232, 149, 146, 223, 47, 153, 72, 176, 5, 15, 43, 42, 146, 74, 247}
require.Equal(t, expG2, buffG2)

}