logos-storage/plonky2
1
0
Fork 0
mirror of https://github.com/logos-storage/plonky2.git synced 2026-02-10 17:03:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

256-bit hashing

Browse Source
This commit is contained in:
Nicholas Ward 2022-01-20 15:59:43 -08:00
parent e116ab7809
commit 5de2b69558
2 changed files with 13 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
plonky2/src/curve/ecdsa.rs
View File

@ -1,4 +1,5 @@
use itertools::unfold;
use itertools::{unfold, Itertools};
use num::BigUint;
use crate::curve::curve_types::{AffinePoint, Curve, CurveScalar};
use crate::field::field_types::{Field, RichField};
@ -35,15 +36,19 @@ pub fn hash_to_bits<F: RichField>(x: F, num_bits: usize) -> Vec<bool> {
pub fn hash_to_scalar<F: RichField, C: Curve>(x: F, num_bits: usize) -> C::ScalarField {
let h_bits = hash_to_bits(x, num_bits);
let h_u32 = h_bits
let h_vals: Vec<_> = h_bits
.iter()
.zip(0..32)
.fold(0u32, |acc, (&bit, pow)| acc + (bit as u32) * (2 << pow));
C::ScalarField::from_canonical_u32(h_u32)
.chunks(32)
.into_iter()
.map(|chunk| {
chunk.enumerate()
.fold(0u32, |acc, (pow, &bit)| acc + (bit as u32) * (2 << pow))
}).collect();
C::ScalarField::from_biguint(BigUint::new(h_vals))
}
pub fn sign_message<F: RichField, C: Curve>(msg: F, sk: ECDSASecretKey<C>) -> ECDSASignature<C> {
let h = hash_to_scalar::<F, C>(msg, 32);
let h = hash_to_scalar::<F, C>(msg, 256);
let k = C::ScalarField::rand();
let rr = (CurveScalar(k) * C::GENERATOR_PROJECTIVE).to_affine();
@ -60,7 +65,7 @@ pub fn verify_message<F: RichField, C: Curve>(
) -> bool {
let ECDSASignature { r, s } = sig;
let h = hash_to_scalar::<F, C>(msg, 32);
let h = hash_to_scalar::<F, C>(msg, 256);
let c = s.inverse();
let u1 = h * c;

2
plonky2/src/gadgets/ecdsa.rs
View File

@ -55,7 +55,7 @@ impl<F: RichField + Extendable<D>, const D: usize> CircuitBuilder<F, D> {
) {
let ECDSASignatureTarget { r, s } = sig;
let h = self.hash_to_scalar::<C>(msg, 32);
let h = self.hash_to_scalar::<C>(msg, 256);
let c = self.inv_nonnative(&s);
let u1 = self.mul_nonnative(&h, &c);