absolutebi/serai
1
0
Fork 0
mirror of https://github.com/serai-dex/serai.git synced 2025-12-10 21:19:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

3.8.5 Let the caller pass in a DST for the aggregation hash function

Browse Source 
Also moves the aggregator over to Digest. While a bit verbose for this context,
as all appended items were fixed length, it's length prefixing is solid and
the API is pleasant. The downside is the additional dependency which is
in tree and quite compact.
This commit is contained in:
Luke Parker
2023-03-02 09:29:37 -05:00
parent 8b7e7b1a1c
commit 530671795a
3 changed files with 42 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
crypto/schnorr/src/tests/mod.rs
View File

@@ -79,15 +79,17 @@ pub(crate) fn batch_verify<C: Ciphersuite>() {
}
pub(crate) fn aggregate<C: Ciphersuite>() {
const DST: &[u8] = b"Schnorr Aggregator Test";
// Create 5 signatures
let mut keys = vec![];
let mut challenges = vec![];
let mut aggregator = SchnorrAggregator::<Sha256, C>::new();
let mut aggregator = SchnorrAggregator::<Sha256, C>::new(DST);
for i in 0 .. 5 {
keys.push(Zeroizing::new(C::random_nonzero_F(&mut OsRng)));
// In practice, this MUST be a secure challenge binding to the nonce, key, and any message
challenges.push(C::random_nonzero_F(&mut OsRng));
aggregator.aggregate(
C::generator() * keys[i].deref(),
challenges[i],
SchnorrSignature::<C>::sign(
&keys[i],
@@ -101,12 +103,13 @@ pub(crate) fn aggregate<C: Ciphersuite>() {
let aggregate =
SchnorrAggregate::<C>::read::<&[u8]>(&mut aggregate.serialize().as_ref()).unwrap();
assert!(aggregate.verify::<Sha256>(
DST,
keys
.iter()
.map(|key| C::generator() * key.deref())
.zip(challenges.iter().cloned())
.collect::<Vec<_>>()
.as_ref()
.as_ref(),
));
}