status-im
/
dagger-contracts
mirror of https://github.com/status-im/dagger-contracts.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Document that group elements are checked by precompiles 

Co-Authored-By: Balazs Komuves <bkomuves@gmail.com>
This commit is contained in:
Mark Spanbroek 2024-03-13 10:45:08 +01:00 committed by markspanbroek
parent c55b34fc76
commit 84eba26f76
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
contracts/Groth16Verifier.sol
View File

@ -54,6 +54,10 @@ contract Groth16Verifier is IGroth16Verifier {
G1Point memory point1, G1Point memory point1,
G1Point memory point2 G1Point memory point2
) private view returns (bool success, G1Point memory sum) { ) private view returns (bool success, G1Point memory sum) {
// Call the precompiled contract for addition on the alt_bn128 curve.
// The call will fail if the points are not valid group elements:
// https://eips.ethereum.org/EIPS/eip-196#exact-semantics
uint256[4] memory input; uint256[4] memory input;
input[0] = point1.x; input[0] = point1.x;
input[1] = point1.y; input[1] = point1.y;
@ -69,6 +73,10 @@ contract Groth16Verifier is IGroth16Verifier {
G1Point memory point, G1Point memory point,
uint256 scalar uint256 scalar
) private view returns (bool success, G1Point memory product) { ) private view returns (bool success, G1Point memory product) {
// Call the precompiled contract for scalar multiplication on the alt_bn128
// curve. The call will fail if the points are not valid group elements:
// https://eips.ethereum.org/EIPS/eip-196#exact-semantics
uint256[3] memory input; uint256[3] memory input;
input[0] = point.x; input[0] = point.x;
input[1] = point.y; input[1] = point.y;
@ -89,6 +97,10 @@ contract Groth16Verifier is IGroth16Verifier {
G1Point memory d1, G1Point memory d1,
G2Point memory d2 G2Point memory d2
) private view returns (bool success, uint256 outcome) { ) private view returns (bool success, uint256 outcome) {
// Call the precompiled contract for pairing check on the alt_bn128 curve.
// The call will fail if the points are not valid group elements:
// https://eips.ethereum.org/EIPS/eip-197#specification
uint256[24] memory input; // 4 pairs of G1 and G2 points uint256[24] memory input; // 4 pairs of G1 and G2 points
uint256[1] memory output; uint256[1] memory output;