* crypto: add bls12-381 elliptic curve wrapper * params: add bls12-381 precompile gas parameters * core/vm: add bls12-381 precompiles * core/vm: add bls12-381 precompile tests * go.mod, go.sum: use latest bls12381 lib * core/vm: move point encode/decode functions to base library * crypto/bls12381: introduce bls12-381 library init function * crypto/bls12381: import bls12381 elliptic curve implementation * go.mod, go.sum: remove bls12-381 library * remove unsued frobenious coeffs supress warning for inp that used in asm * add mappings tests for zero inputs fix swu g2 minus z inverse constant * crypto/bls12381: fix typo * crypto/bls12381: better comments for bls12381 constants * crypto/bls12381: swu, use single conditional for e2 * crypto/bls12381: utils, delete empty line * crypto/bls12381: utils, use FromHex for string to big * crypto/bls12381: g1, g2, strict length check for FromBytes * crypto/bls12381: field_element, comparision changes * crypto/bls12381: change swu, isogeny constants with hex values * core/vm: fix point multiplication comments * core/vm: fix multiexp gas calculation and lookup for g1 and g2 * core/vm: simpler imput length check for multiexp and pairing precompiles * core/vm: rm empty multiexp result declarations * crypto/bls12381: remove modulus type definition * crypto/bls12381: use proper init function * crypto/bls12381: get rid of new lines at fatal desciprtions * crypto/bls12-381: fix no-adx assembly multiplication * crypto/bls12-381: remove old config function * crypto/bls12381: update multiplication backend this commit changes mul backend to 6limb eip1962 backend mul assign operations are dropped * core/vm/contracts_tests: externalize test vectors for precompiles * core/vm/contracts_test: externalize failure-cases for precompiles * core/vm: linting * go.mod: tiny up sum file * core/vm: fix goimports linter issues * crypto/bls12381: build tags for plain ASM or ADX implementation Co-authored-by: Martin Holst Swende <martin@swende.se> Co-authored-by: Péter Szilágyi <peterke@gmail.com>
		
			
				
	
	
		
			122 lines
		
	
	
		
			3.2 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			122 lines
		
	
	
		
			3.2 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// Copyright 2020 The go-ethereum Authors
 | 
						|
// This file is part of the go-ethereum library.
 | 
						|
//
 | 
						|
// The go-ethereum library is free software: you can redistribute it and/or modify
 | 
						|
// it under the terms of the GNU Lesser General Public License as published by
 | 
						|
// the Free Software Foundation, either version 3 of the License, or
 | 
						|
// (at your option) any later version.
 | 
						|
//
 | 
						|
// The go-ethereum library is distributed in the hope that it will be useful,
 | 
						|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 | 
						|
// GNU Lesser General Public License for more details.
 | 
						|
//
 | 
						|
// You should have received a copy of the GNU Lesser General Public License
 | 
						|
// along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
 | 
						|
 | 
						|
package bls12381
 | 
						|
 | 
						|
import (
 | 
						|
	"errors"
 | 
						|
	"math/big"
 | 
						|
)
 | 
						|
 | 
						|
// E is type for target group element
 | 
						|
type E = fe12
 | 
						|
 | 
						|
// GT is type for target multiplicative group GT.
 | 
						|
type GT struct {
 | 
						|
	fp12 *fp12
 | 
						|
}
 | 
						|
 | 
						|
func (e *E) Set(e2 *E) *E {
 | 
						|
	return e.set(e2)
 | 
						|
}
 | 
						|
 | 
						|
// One sets a new target group element to one
 | 
						|
func (e *E) One() *E {
 | 
						|
	e = new(fe12).one()
 | 
						|
	return e
 | 
						|
}
 | 
						|
 | 
						|
// IsOne returns true if given element equals to one
 | 
						|
func (e *E) IsOne() bool {
 | 
						|
	return e.isOne()
 | 
						|
}
 | 
						|
 | 
						|
// Equal returns true if given two element is equal, otherwise returns false
 | 
						|
func (g *E) Equal(g2 *E) bool {
 | 
						|
	return g.equal(g2)
 | 
						|
}
 | 
						|
 | 
						|
// NewGT constructs new target group instance.
 | 
						|
func NewGT() *GT {
 | 
						|
	fp12 := newFp12(nil)
 | 
						|
	return >{fp12}
 | 
						|
}
 | 
						|
 | 
						|
// Q returns group order in big.Int.
 | 
						|
func (g *GT) Q() *big.Int {
 | 
						|
	return new(big.Int).Set(q)
 | 
						|
}
 | 
						|
 | 
						|
// FromBytes expects 576 byte input and returns target group element
 | 
						|
// FromBytes returns error if given element is not on correct subgroup.
 | 
						|
func (g *GT) FromBytes(in []byte) (*E, error) {
 | 
						|
	e, err := g.fp12.fromBytes(in)
 | 
						|
	if err != nil {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
	if !g.IsValid(e) {
 | 
						|
		return e, errors.New("invalid element")
 | 
						|
	}
 | 
						|
	return e, nil
 | 
						|
}
 | 
						|
 | 
						|
// ToBytes serializes target group element.
 | 
						|
func (g *GT) ToBytes(e *E) []byte {
 | 
						|
	return g.fp12.toBytes(e)
 | 
						|
}
 | 
						|
 | 
						|
// IsValid checks whether given target group element is in correct subgroup.
 | 
						|
func (g *GT) IsValid(e *E) bool {
 | 
						|
	r := g.New()
 | 
						|
	g.fp12.exp(r, e, q)
 | 
						|
	return r.isOne()
 | 
						|
}
 | 
						|
 | 
						|
// New initializes a new target group element which is equal to one
 | 
						|
func (g *GT) New() *E {
 | 
						|
	return new(E).One()
 | 
						|
}
 | 
						|
 | 
						|
// Add adds two field element `a` and `b` and assigns the result to the element in first argument.
 | 
						|
func (g *GT) Add(c, a, b *E) {
 | 
						|
	g.fp12.add(c, a, b)
 | 
						|
}
 | 
						|
 | 
						|
// Sub subtracts two field element `a` and `b`, and assigns the result to the element in first argument.
 | 
						|
func (g *GT) Sub(c, a, b *E) {
 | 
						|
	g.fp12.sub(c, a, b)
 | 
						|
}
 | 
						|
 | 
						|
// Mul multiplies two field element `a` and `b` and assigns the result to the element in first argument.
 | 
						|
func (g *GT) Mul(c, a, b *E) {
 | 
						|
	g.fp12.mul(c, a, b)
 | 
						|
}
 | 
						|
 | 
						|
// Square squares an element `a` and assigns the result to the element in first argument.
 | 
						|
func (g *GT) Square(c, a *E) {
 | 
						|
	g.fp12.cyclotomicSquare(c, a)
 | 
						|
}
 | 
						|
 | 
						|
// Exp exponents an element `a` by a scalar `s` and assigns the result to the element in first argument.
 | 
						|
func (g *GT) Exp(c, a *E, s *big.Int) {
 | 
						|
	g.fp12.cyclotomicExp(c, a, s)
 | 
						|
}
 | 
						|
 | 
						|
// Inverse inverses an element `a` and assigns the result to the element in first argument.
 | 
						|
func (g *GT) Inverse(c, a *E) {
 | 
						|
	g.fp12.inverse(c, a)
 | 
						|
}
 |