mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-12 14:09:25 +00:00
f7c13fd1ca
Removes usage of dalek-ff-group/multiexp for curve25519-dalek. Makes compiling in the generators an optional feature. Adds a structured batch verifier which should be notably more performant. Documentation and clean up still necessary.
21 lines
853 B
Rust
21 lines
853 B
Rust
use std_shims::{sync::OnceLock, vec::Vec};
|
|
|
|
use curve25519_dalek::{scalar::Scalar, edwards::EdwardsPoint};
|
|
|
|
use monero_generators::hash_to_point;
|
|
use monero_primitives::{keccak256, keccak256_to_scalar};
|
|
|
|
// Monero starts BP+ transcripts with the following constant.
|
|
static TRANSCRIPT_CELL: OnceLock<[u8; 32]> = OnceLock::new();
|
|
pub(crate) fn TRANSCRIPT() -> [u8; 32] {
|
|
// Why this uses a hash_to_point is completely unknown.
|
|
*TRANSCRIPT_CELL
|
|
.get_or_init(|| hash_to_point(keccak256(b"bulletproof_plus_transcript")).compress().to_bytes())
|
|
}
|
|
|
|
pub(crate) fn initial_transcript(commitments: core::slice::Iter<'_, EdwardsPoint>) -> Scalar {
|
|
let commitments_hash =
|
|
keccak256_to_scalar(commitments.flat_map(|V| V.compress().to_bytes()).collect::<Vec<_>>());
|
|
keccak256_to_scalar([TRANSCRIPT().as_ref(), &commitments_hash.to_bytes()].concat())
|
|
}
|