absolutebi/serai
1
0
Fork 0
mirror of https://github.com/serai-dex/serai.git synced 2025-12-10 21:19:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Implement a binary search for BatchVerifier blame

Browse Source 
Adds helper functions to verify and, on failure, blame, which move an 
unwrap from callers into multiexp where it's guaranteed to be safe and 
easily verified to be proper.

Closes https://github.com/serai-dex/serai/issues/10.
This commit is contained in:
Luke Parker
2022-05-27 02:01:01 -04:00
parent c90e957e6a
commit 469ce9106b
4 changed files with 51 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
crypto/frost/src/schnorr.rs
View File

@@ -47,8 +47,12 @@ pub(crate) fn batch_verify<C: Curve, R: RngCore + CryptoRng>(
triplets: &[(u16, C::G, C::F, SchnorrSignature<C>)]
) -> Result<(), u16> {
let mut values = [(C::F::one(), C::G::generator()); 3];
let mut batch = BatchVerifier::new(triplets.len() * 3, C::little_endian());
let mut batch = BatchVerifier::new(triplets.len(), C::little_endian());
for triple in triplets {
// s = r + ca
// sG == R + cA
// R + cA - sG == 0
// R
values[0].1 = triple.3.R;
// cA
@@ -59,12 +63,5 @@ pub(crate) fn batch_verify<C: Curve, R: RngCore + CryptoRng>(
batch.queue(rng, triple.0, values);
}
// s = r + ca
// sG == R + cA
// R + cA - sG == 0
if batch.verify_vartime() {
Ok(())
} else {
Err(batch.blame_vartime().unwrap())
}
batch.verify_vartime_with_vartime_blame()
}