580 lines
21 KiB
Python
580 lines
21 KiB
Python
|
"""
|
||
|
|
KZG 4844 test vectors generator
|
||
|
|
"""
|
||
|
|
|
||
|
|
from hashlib import sha256
|
||
|
|
from typing import Tuple, Iterable, Any, Callable, Dict
|
||
|
|
|
||
|
|
from eth_utils import (
|
||
|
|
encode_hex,
|
||
|
|
int_to_big_endian,
|
||
|
|
)
|
||
|
|
|
||
|
|
from eth2spec.utils import bls
|
||
|
|
from eth2spec.test.helpers.constants import DENEB
|
||
|
|
from eth2spec.test.helpers.typing import SpecForkName
|
||
|
|
from eth2spec.gen_helpers.gen_base import gen_runner, gen_typing
|
||
|
|
from eth2spec.deneb import spec
|
||
|
|
|
||
|
|
|
||
|
|
def expect_exception(func, *args):
|
||
|
|
try:
|
||
|
|
func(*args)
|
||
|
|
except Exception:
|
||
|
|
pass
|
||
|
|
else:
|
||
|
|
raise Exception("should have raised exception")
|
||
|
|
|
||
|
|
|
||
|
|
def field_element_bytes(x):
|
||
|
|
return int.to_bytes(x % spec.BLS_MODULUS, 32, "little")
|
||
|
|
|
||
|
|
|
||
|
|
def encode_hex_list(a):
|
||
|
|
return [encode_hex(x) for x in a]
|
||
|
|
|
||
|
|
|
||
|
|
def bls_add_one(x):
|
||
|
|
"""
|
||
|
|
Adds "one" (actually bls.G1()) to a compressed group element.
|
||
|
|
Useful to compute definitely incorrect proofs.
|
||
|
|
"""
|
||
|
|
return bls.G1_to_bytes48(
|
||
|
|
bls.add(bls.bytes48_to_G1(x), bls.G1())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
def evaluate_blob_at(blob, z):
|
||
|
|
return field_element_bytes(
|
||
|
|
spec.evaluate_polynomial_in_evaluation_form(spec.blob_to_polynomial(blob), spec.bytes_to_bls_field(z))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
G1 = bls.G1_to_bytes48(bls.G1())
|
||
|
|
P1_NOT_IN_G1 = bytes.fromhex("8123456789abcdef0123456789abcdef0123456789abcdef" +
|
||
|
|
"0123456789abcdef0123456789abcdef0123456789abcdef")
|
||
|
|
P1_NOT_ON_CURVE = bytes.fromhex("8123456789abcdef0123456789abcdef0123456789abcdef" +
|
||
|
|
"0123456789abcdef0123456789abcdef0123456789abcde0")
|
||
|
|
BLS_MODULUS_BYTES = spec.BLS_MODULUS.to_bytes(32, spec.ENDIANNESS)
|
||
|
|
|
||
|
|
BLOB_ALL_ZEROS = spec.Blob()
|
||
|
|
BLOB_RANDOM_VALID1 = spec.Blob(b''.join([field_element_bytes(pow(2, n + 256, spec.BLS_MODULUS)) for n in range(4096)]))
|
||
|
|
BLOB_RANDOM_VALID2 = spec.Blob(b''.join([field_element_bytes(pow(3, n + 256, spec.BLS_MODULUS)) for n in range(4096)]))
|
||
|
|
BLOB_RANDOM_VALID3 = spec.Blob(b''.join([field_element_bytes(pow(5, n + 256, spec.BLS_MODULUS)) for n in range(4096)]))
|
||
|
|
BLOB_ALL_MODULUS_MINUS_ONE = spec.Blob(b''.join([field_element_bytes(spec.BLS_MODULUS - 1) for n in range(4096)]))
|
||
|
|
BLOB_ALMOST_ZERO = spec.Blob(b''.join([field_element_bytes(1 if n == 3211 else 0) for n in range(4096)]))
|
||
|
|
BLOB_INVALID = spec.Blob(b'\xFF' * 4096 * 32)
|
||
|
|
BLOB_INVALID_CLOSE = spec.Blob(b''.join(
|
||
|
|
[BLS_MODULUS_BYTES if n == 2111 else field_element_bytes(0) for n in range(4096)]
|
||
|
|
))
|
||
|
|
|
||
|
|
VALID_BLOBS = [BLOB_ALL_ZEROS, BLOB_RANDOM_VALID1, BLOB_RANDOM_VALID2,
|
||
|
|
BLOB_RANDOM_VALID3, BLOB_ALL_MODULUS_MINUS_ONE, BLOB_ALMOST_ZERO]
|
||
|
|
INVALID_BLOBS = [BLOB_INVALID, BLOB_INVALID_CLOSE]
|
||
|
|
VALID_ZS = [field_element_bytes(x) for x in [0, 1, 2, pow(5, 1235, spec.BLS_MODULUS),
|
||
|
|
spec.BLS_MODULUS - 1, spec.ROOTS_OF_UNITY[1]]]
|
||
|
|
INVALID_ZS = [x.to_bytes(32, spec.ENDIANNESS) for x in [spec.BLS_MODULUS, 2**256 - 1, 2**256 - 2**128]]
|
||
|
|
|
||
|
|
|
||
|
|
def hash(x):
|
||
|
|
return sha256(x).digest()
|
||
|
|
|
||
|
|
|
||
|
|
def int_to_hex(n: int, byte_length: int = None) -> str:
|
||
|
|
byte_value = int_to_big_endian(n)
|
||
|
|
if byte_length:
|
||
|
|
byte_value = byte_value.rjust(byte_length, b'\x00')
|
||
|
|
return encode_hex(byte_value)
|
||
|
|
|
||
|
|
|
||
|
|
def case01_blob_to_kzg_commitment():
|
||
|
|
# Valid cases
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
yield f'blob_to_kzg_commitment_case_valid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
},
|
||
|
|
'output': encode_hex(commitment)
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid blobs
|
||
|
|
for blob in INVALID_BLOBS:
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
expect_exception(spec.blob_to_kzg_commitment, blob)
|
||
|
|
yield f'blob_to_kzg_commitment_case_invalid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob)
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def case02_compute_kzg_proof():
|
||
|
|
# Valid cases
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
for z in VALID_ZS:
|
||
|
|
proof = spec.compute_kzg_proof(blob, z)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}_{encode_hex(z)}'
|
||
|
|
yield f'compute_kzg_proof_case_valid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
},
|
||
|
|
'output': encode_hex(proof)
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid blobs
|
||
|
|
for blob in INVALID_BLOBS:
|
||
|
|
z = VALID_ZS[0]
|
||
|
|
expect_exception(spec.compute_kzg_proof, blob, z)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}_{encode_hex(z)}'
|
||
|
|
yield f'compute_kzg_proof_case_invalid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid z
|
||
|
|
for z in INVALID_ZS:
|
||
|
|
blob = VALID_BLOBS[4]
|
||
|
|
expect_exception(spec.compute_kzg_proof, blob, z)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}_{encode_hex(z)}'
|
||
|
|
yield f'compute_kzg_proof_case_invalid_z_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def case03_verify_kzg_proof():
|
||
|
|
# Valid cases
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
for z in VALID_ZS:
|
||
|
|
proof = spec.compute_kzg_proof(blob, z)
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
y = evaluate_blob_at(blob, z)
|
||
|
|
assert spec.verify_kzg_proof(commitment, z, y, proof)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}_{encode_hex(z)}'
|
||
|
|
yield f'verify_kzg_proof_case_correct_proof_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': True
|
||
|
|
}
|
||
|
|
|
||
|
|
# Incorrect proofs
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
for z in VALID_ZS:
|
||
|
|
proof = bls_add_one(spec.compute_kzg_proof(blob, z))
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
y = evaluate_blob_at(blob, z)
|
||
|
|
assert not spec.verify_kzg_proof(commitment, z, y, proof)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}_{encode_hex(z)}'
|
||
|
|
yield f'verify_kzg_proof_case_incorrect_proof_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': False
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid z
|
||
|
|
for z in INVALID_ZS:
|
||
|
|
blob, validz = VALID_BLOBS[4], VALID_ZS[1]
|
||
|
|
proof = spec.compute_kzg_proof(blob, validz)
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
y = VALID_ZS[3]
|
||
|
|
expect_exception(spec.verify_kzg_proof, commitment, z, y, proof)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}_{encode_hex(z)}'
|
||
|
|
yield f'verify_kzg_proof_case_invalid_z_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid y
|
||
|
|
blob, z = VALID_BLOBS[1], VALID_ZS[1]
|
||
|
|
proof = spec.compute_kzg_proof(blob, z)
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
y = INVALID_ZS[0]
|
||
|
|
expect_exception(spec.verify_kzg_proof, commitment, z, y, proof)
|
||
|
|
yield 'verify_kzg_proof_case_invalid_y', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid proof, not in G1
|
||
|
|
blob, z = VALID_BLOBS[2], VALID_ZS[0]
|
||
|
|
proof = P1_NOT_IN_G1
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
y = VALID_ZS[1]
|
||
|
|
expect_exception(spec.verify_kzg_proof, commitment, z, y, proof)
|
||
|
|
yield 'verify_kzg_proof_case_proof_not_in_G1', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid proof, not on curve
|
||
|
|
blob, z = VALID_BLOBS[3], VALID_ZS[1]
|
||
|
|
proof = P1_NOT_ON_CURVE
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
y = VALID_ZS[1]
|
||
|
|
expect_exception(spec.verify_kzg_proof, commitment, z, y, proof)
|
||
|
|
yield 'verify_kzg_proof_case_proof_not_on_curve', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid commitment, not in G1
|
||
|
|
blob, z = VALID_BLOBS[4], VALID_ZS[3]
|
||
|
|
proof = spec.compute_kzg_proof(blob, z)
|
||
|
|
commitment = P1_NOT_IN_G1
|
||
|
|
y = VALID_ZS[2]
|
||
|
|
expect_exception(spec.verify_kzg_proof, commitment, z, y, proof)
|
||
|
|
yield 'verify_kzg_proof_case_commitment_not_in_G1', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid commitment, not on curve
|
||
|
|
blob, z = VALID_BLOBS[1], VALID_ZS[4]
|
||
|
|
proof = spec.compute_kzg_proof(blob, z)
|
||
|
|
commitment = P1_NOT_ON_CURVE
|
||
|
|
y = VALID_ZS[3]
|
||
|
|
expect_exception(spec.verify_kzg_proof, commitment, z, y, proof)
|
||
|
|
yield 'verify_kzg_proof_case_commitment_not_on_curve', {
|
||
|
|
'input': {
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'z': encode_hex(z),
|
||
|
|
'y': encode_hex(y),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def case04_compute_blob_kzg_proof():
|
||
|
|
# Valid cases
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
proof = spec.compute_blob_kzg_proof(blob)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
yield f'compute_blob_kzg_proof_case_valid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
},
|
||
|
|
'output': encode_hex(proof)
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid blob
|
||
|
|
for blob in INVALID_BLOBS:
|
||
|
|
expect_exception(spec.compute_blob_kzg_proof, blob)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
yield f'compute_blob_kzg_proof_case_invalid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def case05_verify_blob_kzg_proof():
|
||
|
|
# Valid cases
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
proof = spec.compute_blob_kzg_proof(blob)
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
assert spec.verify_blob_kzg_proof(blob, commitment, proof)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
yield f'verify_blob_kzg_proof_case_correct_proof_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': True
|
||
|
|
}
|
||
|
|
|
||
|
|
# Incorrect proofs
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
proof = bls_add_one(spec.compute_blob_kzg_proof(blob))
|
||
|
|
commitment = spec.blob_to_kzg_commitment(blob)
|
||
|
|
assert not spec.verify_blob_kzg_proof(blob, commitment, proof)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
yield f'verify_blob_kzg_proof_case_incorrect_proof_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': False
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid proof, not in G1
|
||
|
|
blob = VALID_BLOBS[2]
|
||
|
|
proof = P1_NOT_IN_G1
|
||
|
|
commitment = G1
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof, blob, commitment, proof)
|
||
|
|
yield 'verify_blob_kzg_proof_case_proof_not_in_G1', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid proof, not on curve
|
||
|
|
blob = VALID_BLOBS[1]
|
||
|
|
proof = P1_NOT_ON_CURVE
|
||
|
|
commitment = G1
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof, blob, commitment, proof)
|
||
|
|
yield 'verify_blob_kzg_proof_case_proof_not_on_curve', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid commitment, not in G1
|
||
|
|
blob = VALID_BLOBS[0]
|
||
|
|
proof = G1
|
||
|
|
commitment = P1_NOT_IN_G1
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof, blob, commitment, proof)
|
||
|
|
yield 'verify_blob_kzg_proof_case_commitment_not_in_G1', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid commitment, not on curve
|
||
|
|
blob = VALID_BLOBS[2]
|
||
|
|
proof = G1
|
||
|
|
commitment = P1_NOT_ON_CURVE
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof, blob, commitment, proof)
|
||
|
|
yield 'verify_blob_kzg_proof_case_commitment_not_on_curve', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid blob
|
||
|
|
for blob in INVALID_BLOBS:
|
||
|
|
proof = G1
|
||
|
|
commitment = G1
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof, blob, commitment, proof)
|
||
|
|
identifier = f'{encode_hex(hash(blob))}'
|
||
|
|
yield f'verify_blob_kzg_proof_case_invalid_blob_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blob': encode_hex(blob),
|
||
|
|
'commitment': encode_hex(commitment),
|
||
|
|
'proof': encode_hex(proof),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def case06_verify_blob_kzg_proof_batch():
|
||
|
|
# Valid cases
|
||
|
|
proofs = []
|
||
|
|
commitments = []
|
||
|
|
for blob in VALID_BLOBS:
|
||
|
|
proofs.append(spec.compute_blob_kzg_proof(blob))
|
||
|
|
commitments.append(spec.blob_to_kzg_commitment(blob))
|
||
|
|
|
||
|
|
for i in range(len(proofs)):
|
||
|
|
assert spec.verify_blob_kzg_proof_batch(VALID_BLOBS[:i], commitments[:i], proofs[:i])
|
||
|
|
identifier = f'{encode_hex(hash(b"".join(VALID_BLOBS[:i])))}'
|
||
|
|
yield f'verify_blob_kzg_proof_batch_case_{(hash(bytes(identifier, "utf-8"))[:8]).hex()}', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS[:i]),
|
||
|
|
'commitments': encode_hex_list(commitments[:i]),
|
||
|
|
'proofs': encode_hex_list(proofs[:i]),
|
||
|
|
},
|
||
|
|
'output': True
|
||
|
|
}
|
||
|
|
|
||
|
|
# Incorrect proof
|
||
|
|
proofs_incorrect = [bls_add_one(proofs[0])] + proofs[1:]
|
||
|
|
assert not spec.verify_blob_kzg_proof_batch(VALID_BLOBS, commitments, proofs_incorrect)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_invalid_proof', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments),
|
||
|
|
'proofs': encode_hex_list(proofs_incorrect),
|
||
|
|
},
|
||
|
|
'output': False
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid proof, not in G1
|
||
|
|
proofs_invalid_notG1 = [P1_NOT_IN_G1] + proofs[1:]
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS, commitments, proofs_invalid_notG1)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_proof_not_in_G1', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments),
|
||
|
|
'proofs': encode_hex_list(proofs_invalid_notG1),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid proof, not on curve
|
||
|
|
proofs_invalid_notCurve = proofs[:1] + [P1_NOT_ON_CURVE] + proofs[2:]
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS, commitments, proofs_invalid_notCurve)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_proof_not_on_curve', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments),
|
||
|
|
'proofs': encode_hex_list(proofs_invalid_notCurve),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid commitment, not in G1
|
||
|
|
commitments_invalid_notG1 = commitments[:2] + [P1_NOT_IN_G1] + commitments[3:]
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS, commitments, commitments_invalid_notG1)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_commitment_not_in_G1', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments_invalid_notG1),
|
||
|
|
'proofs': encode_hex_list(proofs),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid commitment, not on curve
|
||
|
|
commitments_invalid_notCurve = commitments[:3] + [P1_NOT_ON_CURVE] + commitments[4:]
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS, commitments, commitments_invalid_notCurve)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_not_on_curve', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments_invalid_notCurve),
|
||
|
|
'proofs': encode_hex_list(proofs),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Invalid blob
|
||
|
|
blobs_invalid = VALID_BLOBS[:4] + [BLOB_INVALID] + VALID_BLOBS[5:]
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, blobs_invalid, commitments, proofs)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_invalid_blob', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(blobs_invalid),
|
||
|
|
'commitments': encode_hex_list(commitments),
|
||
|
|
'proofs': encode_hex_list(proofs),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Blob length different
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS[:-1], commitments, proofs)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_blob_length_different', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS[:-1]),
|
||
|
|
'commitments': encode_hex_list(commitments),
|
||
|
|
'proofs': encode_hex_list(proofs),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Commitment length different
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS, commitments[:-1], proofs)
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_commitment_length_different', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments[:-1]),
|
||
|
|
'proofs': encode_hex_list(proofs),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
# Edge case: Proof length different
|
||
|
|
expect_exception(spec.verify_blob_kzg_proof_batch, VALID_BLOBS, commitments, proofs[:-1])
|
||
|
|
yield 'verify_blob_kzg_proof_batch_case_proof_length_different', {
|
||
|
|
'input': {
|
||
|
|
'blobs': encode_hex_list(VALID_BLOBS),
|
||
|
|
'commitments': encode_hex_list(commitments),
|
||
|
|
'proofs': encode_hex_list(proofs[:-1]),
|
||
|
|
},
|
||
|
|
'output': None
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def create_provider(fork_name: SpecForkName,
|
||
|
|
handler_name: str,
|
||
|
|
test_case_fn: Callable[[], Iterable[Tuple[str, Dict[str, Any]]]]) -> gen_typing.TestProvider:
|
||
|
|
|
||
|
|
def prepare_fn() -> None:
|
||
|
|
# Nothing to load / change in spec. Maybe in future forks.
|
||
|
|
# Put the tests into the general config category, to not require any particular configuration.
|
||
|
|
return
|
||
|
|
|
||
|
|
def cases_fn() -> Iterable[gen_typing.TestCase]:
|
||
|
|
for data in test_case_fn():
|
||
|
|
(case_name, case_content) = data
|
||
|
|
yield gen_typing.TestCase(
|
||
|
|
fork_name=fork_name,
|
||
|
|
preset_name='general',
|
||
|
|
runner_name='kzg',
|
||
|
|
handler_name=handler_name,
|
||
|
|
suite_name='small',
|
||
|
|
case_name=case_name,
|
||
|
|
case_fn=lambda: [('data', 'data', case_content)]
|
||
|
|
)
|
||
|
|
|
||
|
|
return gen_typing.TestProvider(prepare=prepare_fn, make_cases=cases_fn)
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == "__main__":
|
||
|
|
bls.use_arkworks()
|
||
|
|
gen_runner.run_generator("kzg", [
|
||
|
|
# DENEB
|
||
|
|
create_provider(DENEB, 'blob_to_kzg_commitment', case01_blob_to_kzg_commitment),
|
||
|
|
create_provider(DENEB, 'compute_kzg_proof', case02_compute_kzg_proof),
|
||
|
|
create_provider(DENEB, 'verify_kzg_proof', case03_verify_kzg_proof),
|
||
|
|
create_provider(DENEB, 'compute_blob_kzg_proof', case04_compute_blob_kzg_proof),
|
||
|
|
create_provider(DENEB, 'verify_blob_kzg_proof', case05_verify_blob_kzg_proof),
|
||
|
|
create_provider(DENEB, 'verify_blob_kzg_proof_batch', case06_verify_blob_kzg_proof_batch),
|
||
|
|
])
|