mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-08 20:29:23 +00:00
f3a5e3c27e
Updates CLSAG signing as needed. Moves around Error types. CLSAG multisig and the multisig feature is currently completely borked because of this. The created TXs are accepted by Monero nodes.
87 lines
2.1 KiB
Rust
87 lines
2.1 KiB
Rust
use lazy_static::lazy_static;
|
|
|
|
use rand_core::{RngCore, CryptoRng};
|
|
|
|
use tiny_keccak::{Hasher, Keccak};
|
|
|
|
use curve25519_dalek::{
|
|
constants::ED25519_BASEPOINT_TABLE,
|
|
scalar::Scalar,
|
|
edwards::{EdwardsPoint, EdwardsBasepointTable, CompressedEdwardsY}
|
|
};
|
|
|
|
use monero::util::key::H;
|
|
|
|
#[cfg(feature = "multisig")]
|
|
pub mod frost;
|
|
|
|
pub mod key_image;
|
|
pub mod bulletproofs;
|
|
pub mod clsag;
|
|
|
|
pub mod rpc;
|
|
pub mod transaction;
|
|
|
|
#[link(name = "wrapper")]
|
|
extern "C" {
|
|
pub(crate) fn free(ptr: *const u8);
|
|
fn c_hash_to_point(point: *const u8);
|
|
pub(crate) fn c_gen_bp(len: u8, a: *const u64, m: *const [u8; 32]) -> *const u8;
|
|
pub(crate) fn c_verify_clsag(
|
|
serialized_len: usize, serialized: *const u8, I: *const u8,
|
|
ring_size: u8, ring: *const u8, msg: *const u8, pseudo_out: *const u8
|
|
) -> bool;
|
|
}
|
|
|
|
// Allows using a modern rand as dalek's is notoriously dated
|
|
pub fn random_scalar<R: RngCore + CryptoRng>(rng: &mut R) -> Scalar {
|
|
let mut r = [0; 64];
|
|
rng.fill_bytes(&mut r);
|
|
Scalar::from_bytes_mod_order_wide(&r)
|
|
}
|
|
|
|
lazy_static! {
|
|
static ref H_TABLE: EdwardsBasepointTable = EdwardsBasepointTable::create(&H.point.decompress().unwrap());
|
|
}
|
|
|
|
#[allow(non_snake_case)]
|
|
#[derive(Copy, Clone, PartialEq, Eq, Debug)]
|
|
pub struct Commitment {
|
|
pub mask: Scalar,
|
|
pub amount: u64
|
|
}
|
|
|
|
impl Commitment {
|
|
pub fn zero() -> Commitment {
|
|
Commitment { mask: Scalar::one(), amount: 0}
|
|
}
|
|
|
|
pub fn new(mask: Scalar, amount: u64) -> Commitment {
|
|
Commitment { mask, amount }
|
|
}
|
|
|
|
pub fn calculate(&self) -> EdwardsPoint {
|
|
(&self.mask * &ED25519_BASEPOINT_TABLE) + (&Scalar::from(self.amount) * &*H_TABLE)
|
|
}
|
|
}
|
|
|
|
pub fn hash(data: &[u8]) -> [u8; 32] {
|
|
let mut keccak = Keccak::v256();
|
|
keccak.update(data);
|
|
let mut res = [0; 32];
|
|
keccak.finalize(&mut res);
|
|
res
|
|
}
|
|
|
|
pub fn hash_to_scalar(data: &[u8]) -> Scalar {
|
|
Scalar::from_bytes_mod_order(hash(&data))
|
|
}
|
|
|
|
pub fn hash_to_point(point: &EdwardsPoint) -> EdwardsPoint {
|
|
let mut bytes = point.compress().to_bytes();
|
|
unsafe {
|
|
c_hash_to_point(bytes.as_mut_ptr());
|
|
}
|
|
CompressedEdwardsY::from_slice(&bytes).decompress().unwrap()
|
|
}
|