308 lines
7.5 KiB
Go
308 lines
7.5 KiB
Go
package cgokzg4844
|
|
|
|
// #cgo CFLAGS: -I${SRCDIR}/../../src
|
|
// #cgo CFLAGS: -I${SRCDIR}/blst_headers
|
|
// #cgo CFLAGS: -DFIELD_ELEMENTS_PER_BLOB=4096
|
|
// #include "c_kzg_4844.c"
|
|
import "C"
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"unsafe"
|
|
|
|
// So its functions are available during compilation.
|
|
_ "github.com/supranational/blst/bindings/go"
|
|
)
|
|
|
|
const (
|
|
BytesPerBlob = C.BYTES_PER_BLOB
|
|
BytesPerCommitment = C.BYTES_PER_COMMITMENT
|
|
BytesPerFieldElement = C.BYTES_PER_FIELD_ELEMENT
|
|
BytesPerProof = C.BYTES_PER_PROOF
|
|
FieldElementsPerBlob = C.FIELD_ELEMENTS_PER_BLOB
|
|
)
|
|
|
|
type (
|
|
Bytes32 [32]byte
|
|
Bytes48 [48]byte
|
|
KZGCommitment Bytes48
|
|
KZGProof Bytes48
|
|
Blob [BytesPerBlob]byte
|
|
)
|
|
|
|
var (
|
|
loaded = false
|
|
settings = C.KZGSettings{}
|
|
ErrBadArgs = errors.New("bad arguments")
|
|
ErrError = errors.New("unexpected error")
|
|
ErrMalloc = errors.New("malloc failed")
|
|
errorMap = map[C.C_KZG_RET]error{
|
|
C.C_KZG_OK: nil,
|
|
C.C_KZG_BADARGS: ErrBadArgs,
|
|
C.C_KZG_ERROR: ErrError,
|
|
C.C_KZG_MALLOC: ErrMalloc,
|
|
}
|
|
)
|
|
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
// Helper functions
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
|
|
// makeErrorFromRet translates an (integral) return value, as reported
|
|
// by the C library, into a proper Go error. If there is no error, this
|
|
// will return nil.
|
|
func makeErrorFromRet(ret C.C_KZG_RET) error {
|
|
err, ok := errorMap[ret]
|
|
if !ok {
|
|
panic(fmt.Sprintf("unexpected return value: %v", ret))
|
|
}
|
|
return err
|
|
}
|
|
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
// Public functions
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
|
|
/*
|
|
LoadTrustedSetup is the binding for:
|
|
|
|
C_KZG_RET load_trusted_setup(
|
|
KZGSettings *out,
|
|
const uint8_t *g1_bytes,
|
|
size_t n1,
|
|
const uint8_t *g2_bytes,
|
|
size_t n2);
|
|
*/
|
|
func LoadTrustedSetup(g1Bytes, g2Bytes []byte) error {
|
|
if loaded {
|
|
panic("trusted setup is already loaded")
|
|
}
|
|
if len(g1Bytes)%C.BYTES_PER_G1 != 0 {
|
|
panic(fmt.Sprintf("len(g1Bytes) is not a multiple of %v", C.BYTES_PER_G1))
|
|
}
|
|
if len(g2Bytes)%C.BYTES_PER_G2 != 0 {
|
|
panic(fmt.Sprintf("len(g2Bytes) is not a multiple of %v", C.BYTES_PER_G2))
|
|
}
|
|
numG1Elements := len(g1Bytes) / C.BYTES_PER_G1
|
|
numG2Elements := len(g2Bytes) / C.BYTES_PER_G2
|
|
ret := C.load_trusted_setup(
|
|
&settings,
|
|
*(**C.uint8_t)(unsafe.Pointer(&g1Bytes)),
|
|
(C.size_t)(numG1Elements),
|
|
*(**C.uint8_t)(unsafe.Pointer(&g2Bytes)),
|
|
(C.size_t)(numG2Elements))
|
|
if ret == C.C_KZG_OK {
|
|
loaded = true
|
|
}
|
|
return makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
LoadTrustedSetupFile is the binding for:
|
|
|
|
C_KZG_RET load_trusted_setup_file(
|
|
KZGSettings *out,
|
|
FILE *in);
|
|
*/
|
|
func LoadTrustedSetupFile(trustedSetupFile string) error {
|
|
if loaded {
|
|
panic("trusted setup is already loaded")
|
|
}
|
|
cTrustedSetupFile := C.CString(trustedSetupFile)
|
|
defer C.free(unsafe.Pointer(cTrustedSetupFile))
|
|
cMode := C.CString("r")
|
|
defer C.free(unsafe.Pointer(cMode))
|
|
fp := C.fopen(cTrustedSetupFile, cMode)
|
|
if fp == nil {
|
|
panic("error reading trusted setup")
|
|
}
|
|
ret := C.load_trusted_setup_file(&settings, fp)
|
|
C.fclose(fp)
|
|
if ret == C.C_KZG_OK {
|
|
loaded = true
|
|
}
|
|
return makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
FreeTrustedSetup is the binding for:
|
|
|
|
void free_trusted_setup(
|
|
KZGSettings *s);
|
|
*/
|
|
func FreeTrustedSetup() {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
C.free_trusted_setup(&settings)
|
|
loaded = false
|
|
}
|
|
|
|
/*
|
|
BlobToKZGCommitment is the binding for:
|
|
|
|
C_KZG_RET blob_to_kzg_commitment(
|
|
KZGCommitment *out,
|
|
const Blob *blob,
|
|
const KZGSettings *s);
|
|
*/
|
|
func BlobToKZGCommitment(blob Blob) (KZGCommitment, error) {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
commitment := KZGCommitment{}
|
|
ret := C.blob_to_kzg_commitment(
|
|
(*C.KZGCommitment)(unsafe.Pointer(&commitment)),
|
|
(*C.Blob)(unsafe.Pointer(&blob)),
|
|
&settings)
|
|
return commitment, makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
ComputeKZGProof is the binding for:
|
|
|
|
C_KZG_RET compute_kzg_proof(
|
|
KZGProof *proof_out,
|
|
Bytes32 *y_out,
|
|
const Blob *blob,
|
|
const Bytes32 *z_bytes,
|
|
const KZGSettings *s);
|
|
*/
|
|
func ComputeKZGProof(blob Blob, zBytes Bytes32) (KZGProof, Bytes32, error) {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
proof := KZGProof{}
|
|
y := Bytes32{}
|
|
ret := C.compute_kzg_proof(
|
|
(*C.KZGProof)(unsafe.Pointer(&proof)),
|
|
(*C.Bytes32)(unsafe.Pointer(&y)),
|
|
(*C.Blob)(unsafe.Pointer(&blob)),
|
|
(*C.Bytes32)(unsafe.Pointer(&zBytes)),
|
|
&settings)
|
|
return proof, y, makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
ComputeBlobKZGProof is the binding for:
|
|
|
|
C_KZG_RET compute_blob_kzg_proof(
|
|
KZGProof *out,
|
|
const Blob *blob,
|
|
const Bytes48 *commitment_bytes,
|
|
const KZGSettings *s);
|
|
*/
|
|
func ComputeBlobKZGProof(blob Blob, commitmentBytes Bytes48) (KZGProof, error) {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
proof := KZGProof{}
|
|
ret := C.compute_blob_kzg_proof(
|
|
(*C.KZGProof)(unsafe.Pointer(&proof)),
|
|
(*C.Blob)(unsafe.Pointer(&blob)),
|
|
(*C.Bytes48)(unsafe.Pointer(&commitmentBytes)),
|
|
&settings)
|
|
return proof, makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
VerifyKZGProof is the binding for:
|
|
|
|
C_KZG_RET verify_kzg_proof(
|
|
bool *out,
|
|
const Bytes48 *commitment_bytes,
|
|
const Bytes32 *z_bytes,
|
|
const Bytes32 *y_bytes,
|
|
const Bytes48 *proof_bytes,
|
|
const KZGSettings *s);
|
|
*/
|
|
func VerifyKZGProof(commitmentBytes Bytes48, zBytes, yBytes Bytes32, proofBytes Bytes48) (bool, error) {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
var result C.bool
|
|
ret := C.verify_kzg_proof(
|
|
&result,
|
|
(*C.Bytes48)(unsafe.Pointer(&commitmentBytes)),
|
|
(*C.Bytes32)(unsafe.Pointer(&zBytes)),
|
|
(*C.Bytes32)(unsafe.Pointer(&yBytes)),
|
|
(*C.Bytes48)(unsafe.Pointer(&proofBytes)),
|
|
&settings)
|
|
return bool(result), makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
VerifyBlobKZGProof is the binding for:
|
|
|
|
C_KZG_RET verify_blob_kzg_proof(
|
|
bool *out,
|
|
const Blob *blob,
|
|
const Bytes48 *commitment_bytes,
|
|
const Bytes48 *proof_bytes,
|
|
const KZGSettings *s);
|
|
*/
|
|
func VerifyBlobKZGProof(blob Blob, commitmentBytes, proofBytes Bytes48) (bool, error) {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
var result C.bool
|
|
ret := C.verify_blob_kzg_proof(
|
|
&result,
|
|
(*C.Blob)(unsafe.Pointer(&blob)),
|
|
(*C.Bytes48)(unsafe.Pointer(&commitmentBytes)),
|
|
(*C.Bytes48)(unsafe.Pointer(&proofBytes)),
|
|
&settings)
|
|
return bool(result), makeErrorFromRet(ret)
|
|
}
|
|
|
|
/*
|
|
VerifyBlobKZGProofBatch is the binding for:
|
|
|
|
C_KZG_RET verify_blob_kzg_proof_batch(
|
|
bool *out,
|
|
const Blob *blobs,
|
|
const Bytes48 *commitments_bytes,
|
|
const Bytes48 *proofs_bytes,
|
|
const KZGSettings *s);
|
|
*/
|
|
func VerifyBlobKZGProofBatch(blobs []Blob, commitmentsBytes, proofsBytes []Bytes48) (bool, error) {
|
|
if !loaded {
|
|
panic("trusted setup isn't loaded")
|
|
}
|
|
if len(blobs) != len(commitmentsBytes) || len(blobs) != len(proofsBytes) {
|
|
return false, ErrBadArgs
|
|
}
|
|
|
|
var result C.bool
|
|
ret := C.verify_blob_kzg_proof_batch(
|
|
&result,
|
|
*(**C.Blob)(unsafe.Pointer(&blobs)),
|
|
*(**C.Bytes48)(unsafe.Pointer(&commitmentsBytes)),
|
|
*(**C.Bytes48)(unsafe.Pointer(&proofsBytes)),
|
|
(C.size_t)(len(blobs)),
|
|
&settings)
|
|
return bool(result), makeErrorFromRet(ret)
|
|
}
|
|
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
// Private functions
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
|
|
/*
|
|
sha256 is the binding for:
|
|
|
|
void blst_sha256(
|
|
byte out[32],
|
|
const byte *msg,
|
|
size_t msg_len);
|
|
*/
|
|
func sha256(msg []byte) Bytes32 {
|
|
var out Bytes32
|
|
C.blst_sha256(
|
|
(*C.byte)(unsafe.Pointer(&out)),
|
|
*(**C.byte)(unsafe.Pointer(&msg)),
|
|
(C.size_t)(len(msg)))
|
|
return out
|
|
}
|