115 lines
3.7 KiB
C
115 lines
3.7 KiB
C
/*
|
|
* Copyright 2021 Benjamin Edgington
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
/**
|
|
* @file c_kzg_4844.h
|
|
*
|
|
* Minimal interface required for EIP-4844.
|
|
*/
|
|
|
|
#ifndef C_KZG_4844_H
|
|
#define C_KZG_4844_H
|
|
|
|
#include <stdio.h>
|
|
#include <stdint.h>
|
|
#include <stdbool.h>
|
|
|
|
#include "blst.h"
|
|
|
|
#define FIELD_ELEMENTS_PER_BLOB 4096
|
|
|
|
typedef blst_p1 g1_t; /**< Internal G1 group element type */
|
|
typedef blst_p2 g2_t; /**< Internal G2 group element type */
|
|
typedef blst_fr fr_t; /**< Internal Fr field element type */
|
|
|
|
typedef g1_t KZGCommitment;
|
|
typedef g1_t KZGProof;
|
|
typedef fr_t BLSFieldElement;
|
|
typedef BLSFieldElement Polynomial[FIELD_ELEMENTS_PER_BLOB];
|
|
|
|
/**
|
|
* The common return type for all routines in which something can go wrong.
|
|
*
|
|
* @warning In the case of @p C_KZG_OK or @p C_KZG_BADARGS, the caller can assume that all memory allocated by the
|
|
* called routines has been deallocated. However, in the case of @p C_KZG_ERROR or @p C_KZG_MALLOC being returned, these
|
|
* are unrecoverable and memory may have been leaked.
|
|
*/
|
|
typedef enum {
|
|
C_KZG_OK = 0, /**< Success! */
|
|
C_KZG_BADARGS, /**< The supplied data is invalid in some way */
|
|
C_KZG_ERROR, /**< Internal error - this should never occur and may indicate a bug in the library */
|
|
C_KZG_MALLOC, /**< Could not allocate memory */
|
|
} C_KZG_RET;
|
|
|
|
/**
|
|
* KZGCommitment and KZGProof can be recovered as 48 bytes
|
|
*/
|
|
void bytes_from_g1(uint8_t out[48], const g1_t*);
|
|
C_KZG_RET bytes_to_g1(g1_t* out, const uint8_t[48]);
|
|
|
|
/**
|
|
* BLSFieldElements can be recovered as 32 bytes
|
|
*/
|
|
void bytes_from_bls_field(uint8_t out[32], const BLSFieldElement*);
|
|
void bytes_to_bls_field(BLSFieldElement *out, const uint8_t bytes[32]);
|
|
|
|
/**
|
|
* Stores the setup and parameters needed for performing FFTs.
|
|
*/
|
|
typedef struct {
|
|
uint64_t max_width; /**< The maximum size of FFT these settings support, a power of 2. */
|
|
fr_t *expanded_roots_of_unity; /**< Ascending powers of the root of unity, size `width + 1`. */
|
|
fr_t *reverse_roots_of_unity; /**< Descending powers of the root of unity, size `width + 1`. */
|
|
fr_t *roots_of_unity; /**< Powers of the root of unity in bit-reversal permutation, size `width`. */
|
|
} FFTSettings;
|
|
|
|
/**
|
|
* Stores the setup and parameters needed for computing KZG proofs.
|
|
*/
|
|
typedef struct {
|
|
const FFTSettings *fs; /**< The corresponding settings for performing FFTs */
|
|
g1_t *g1_values; /**< G1 group elements from the trusted setup, in Lagrange form bit-reversal permutation */
|
|
g2_t *g2_values; /**< G2 group elements from the trusted setup; both arrays have FIELD_ELEMENTS_PER_BLOB elements */
|
|
} KZGSettings;
|
|
|
|
/**
|
|
* Interface functions
|
|
*/
|
|
|
|
C_KZG_RET load_trusted_setup(KZGSettings *out,
|
|
FILE *in);
|
|
|
|
void free_trusted_setup(
|
|
KZGSettings *s);
|
|
|
|
C_KZG_RET compute_aggregate_kzg_proof(KZGProof *out,
|
|
const Polynomial blobs[],
|
|
size_t n,
|
|
const KZGSettings *s);
|
|
|
|
C_KZG_RET verify_aggregate_kzg_proof(bool *out,
|
|
const Polynomial blobs[],
|
|
const KZGCommitment expected_kzg_commitments[],
|
|
size_t n,
|
|
const KZGProof *kzg_aggregated_proof,
|
|
const KZGSettings *s);
|
|
|
|
void blob_to_kzg_commitment(KZGCommitment *out,
|
|
const Polynomial blob,
|
|
const KZGSettings *s);
|
|
|
|
#endif // C_KZG_4844_H
|