2020-02-08 10:42:35 +00:00
|
|
|
# Constantine
|
|
|
|
# Copyright (c) 2018-2019 Status Research & Development GmbH
|
|
|
|
# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
|
2018-07-24 14:52:18 +00:00
|
|
|
# Licensed and distributed under either of
|
|
|
|
# * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
|
|
|
|
# * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
|
|
|
|
# at your option. This file may not be copied, modified, or distributed except according to those terms.
|
|
|
|
|
2020-02-08 23:52:24 +00:00
|
|
|
import unittest, random,
|
2020-02-12 22:57:51 +00:00
|
|
|
../constantine/math/finite_fields,
|
|
|
|
../constantine/io/io_fields,
|
|
|
|
../constantine/config/curves
|
|
|
|
|
2020-02-14 23:26:40 +00:00
|
|
|
import ../constantine/io/io_bigints
|
|
|
|
|
2020-02-12 22:57:51 +00:00
|
|
|
static: doAssert defined(testingCurves), "This modules requires the -d:testingCurves compile option"
|
2020-02-12 20:57:39 +00:00
|
|
|
|
|
|
|
proc main() =
|
|
|
|
suite "Basic arithmetic over finite fields":
|
|
|
|
test "Addition mod 101":
|
|
|
|
block:
|
2020-02-14 12:36:34 +00:00
|
|
|
var x, y, z: Fq[Fake101]
|
2020-02-12 22:57:51 +00:00
|
|
|
|
|
|
|
x.fromUint(80'u32)
|
|
|
|
y.fromUint(10'u32)
|
|
|
|
z.fromUint(90'u32)
|
|
|
|
|
|
|
|
x += y
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
90'u64 == cast[uint64](x_bytes)
|
2020-02-12 22:57:51 +00:00
|
|
|
|
2020-02-12 23:11:45 +00:00
|
|
|
block:
|
2020-02-14 12:36:34 +00:00
|
|
|
var x, y, z: Fq[Fake101]
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
x.fromUint(80'u32)
|
|
|
|
y.fromUint(21'u32)
|
|
|
|
z.fromUint(0'u32)
|
|
|
|
|
|
|
|
x += y
|
2020-02-15 01:59:08 +00:00
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-15 01:59:08 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
0'u64 == cast[uint64](x_bytes)
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
block:
|
2020-02-14 12:36:34 +00:00
|
|
|
var x, y, z: Fq[Fake101]
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
x.fromUint(80'u32)
|
|
|
|
y.fromUint(22'u32)
|
|
|
|
z.fromUint(1'u32)
|
|
|
|
|
|
|
|
x += y
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
1'u64 == cast[uint64](x_bytes)
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
test "Substraction mod 101":
|
|
|
|
block:
|
2020-02-14 12:36:34 +00:00
|
|
|
var x, y, z: Fq[Fake101]
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
x.fromUint(80'u32)
|
|
|
|
y.fromUint(10'u32)
|
|
|
|
z.fromUint(70'u32)
|
|
|
|
|
|
|
|
x -= y
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
70'u64 == cast[uint64](x_bytes)
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
block:
|
2020-02-14 12:36:34 +00:00
|
|
|
var x, y, z: Fq[Fake101]
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
x.fromUint(80'u32)
|
|
|
|
y.fromUint(80'u32)
|
|
|
|
z.fromUint(0'u32)
|
|
|
|
|
|
|
|
x -= y
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
0'u64 == cast[uint64](x_bytes)
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
block:
|
2020-02-14 12:36:34 +00:00
|
|
|
var x, y, z: Fq[Fake101]
|
2020-02-12 23:11:45 +00:00
|
|
|
|
|
|
|
x.fromUint(80'u32)
|
|
|
|
y.fromUint(81'u32)
|
|
|
|
z.fromUint(100'u32)
|
|
|
|
|
|
|
|
x -= y
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-14 23:26:40 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
100'u64 == cast[uint64](x_bytes)
|
2020-02-12 23:11:45 +00:00
|
|
|
|
2020-02-15 01:59:08 +00:00
|
|
|
test "Multiplication mod 101":
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Fake101]
|
|
|
|
|
|
|
|
x.fromUint(10'u32)
|
|
|
|
y.fromUint(10'u32)
|
|
|
|
z.fromUint(100'u32)
|
|
|
|
|
|
|
|
let r = x * y
|
|
|
|
|
|
|
|
var r_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
r_bytes.exportRawUint(r, cpuEndian)
|
2020-02-15 01:59:08 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == r)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
100'u64 == cast[uint64](r_bytes)
|
|
|
|
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Fake101]
|
|
|
|
|
|
|
|
x.fromUint(10'u32)
|
|
|
|
y.fromUint(11'u32)
|
|
|
|
z.fromUint(9'u32)
|
|
|
|
|
|
|
|
let r = x * y
|
|
|
|
|
|
|
|
var r_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
r_bytes.exportRawUint(r, cpuEndian)
|
2020-02-15 01:59:08 +00:00
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == r)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
9'u64 == cast[uint64](r_bytes)
|
|
|
|
|
2020-02-16 17:59:10 +00:00
|
|
|
test "Addition mod 2^61 - 1":
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(80'u64)
|
|
|
|
y.fromUint(10'u64)
|
|
|
|
z.fromUint(90'u64)
|
|
|
|
|
|
|
|
x += y
|
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_x = cast[uint64](x_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
new_x == 90'u64
|
|
|
|
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(1'u64 shl 61 - 2)
|
|
|
|
y.fromUint(1'u32)
|
|
|
|
z.fromUint(0'u32)
|
|
|
|
|
|
|
|
x += y
|
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_x = cast[uint64](x_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
new_x == 0'u64
|
|
|
|
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(1'u64 shl 61 - 2)
|
|
|
|
y.fromUint(2'u64)
|
|
|
|
z.fromUint(1'u64)
|
|
|
|
|
|
|
|
x += y
|
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_x = cast[uint64](x_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
new_x == 1'u64
|
|
|
|
|
|
|
|
test "Substraction mod 2^61 - 1":
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(80'u64)
|
|
|
|
y.fromUint(10'u64)
|
|
|
|
z.fromUint(70'u64)
|
|
|
|
|
|
|
|
x -= y
|
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_x = cast[uint64](x_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
new_x == 70'u64
|
|
|
|
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(0'u64)
|
|
|
|
y.fromUint(1'u64)
|
|
|
|
z.fromUint(1'u64 shl 61 - 2)
|
|
|
|
|
|
|
|
x -= y
|
|
|
|
|
|
|
|
var x_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
x_bytes.exportRawUint(x, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_x = cast[uint64](x_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == x)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
new_x == 1'u64 shl 61 - 2
|
|
|
|
|
2020-02-16 23:13:42 +00:00
|
|
|
test "Multiplication mod 2^61 - 1":
|
2020-02-16 17:59:10 +00:00
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(10'u32)
|
|
|
|
y.fromUint(10'u32)
|
|
|
|
z.fromUint(100'u32)
|
|
|
|
|
|
|
|
let r = x * y
|
|
|
|
|
|
|
|
var r_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
r_bytes.exportRawUint(r, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_r = cast[uint64](r_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == r)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
cast[uint64](r_bytes) == 100'u64
|
|
|
|
|
|
|
|
block:
|
|
|
|
var x, y, z: Fq[Mersenne61]
|
|
|
|
|
|
|
|
x.fromUint(1'u32 shl 31)
|
|
|
|
y.fromUint(1'u32 shl 31)
|
|
|
|
z.fromUint(2'u32)
|
|
|
|
|
|
|
|
let r = x * y
|
|
|
|
|
|
|
|
var r_bytes: array[8, byte]
|
2020-02-18 11:36:42 +00:00
|
|
|
r_bytes.exportRawUint(r, cpuEndian)
|
2020-02-16 17:59:10 +00:00
|
|
|
let new_r = cast[uint64](r_bytes)
|
|
|
|
|
|
|
|
check:
|
|
|
|
# Check equality in the Montgomery domain
|
|
|
|
bool(z == r)
|
|
|
|
# Check equality when converting back to natural domain
|
|
|
|
new_r == 2'u64
|
|
|
|
|
|
|
|
|
2020-02-12 22:57:51 +00:00
|
|
|
main()
|