ceremonyclient/nekryptology/pkg/tecdsa/dkls/v1/dkg/dkg_test.go

//
// Copyright Coinbase, Inc. All Rights Reserved.
//
// SPDX-License-Identifier: Apache-2.0
//

package dkg

import (
	"fmt"
	"testing"

	"github.com/stretchr/testify/require"

	"source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/core/curves"
)

func TestDkg(t *testing.T) {
	t.Parallel()
	curveInstances := []*curves.Curve{
		curves.K256(),
		curves.P256(),
	}
	for _, curve := range curveInstances {
		boundCurve := curve
		t.Run(fmt.Sprintf("testing dkg for curve %s", boundCurve.Name), func(tt *testing.T) {
			tt.Parallel()
			alice := NewAlice(256, 80, boundCurve)
			bob := NewBob(256, 80, boundCurve)

			seed, err := bob.Round1GenerateRandomSeed()
			require.NoError(tt, err)
			round3Output, err := alice.Round2CommitToProof(seed)
			require.NoError(tt, err)
			proof, err := bob.Round3SchnorrProve(round3Output)
			require.NoError(tt, err)
			proof, err = alice.Round4VerifyAndReveal(proof)
			require.NoError(tt, err)
			proof, err = bob.Round5DecommitmentAndStartOt(proof)
			require.NoError(tt, err)
			compressedReceiversMaskedChoice, err := alice.Round6DkgRound2Ot(proof)
			require.NoError(tt, err)
			challenge, err := bob.Round7DkgRound3Ot(compressedReceiversMaskedChoice)
			require.NoError(tt, err)
			challengeResponse, err := alice.Round8DkgRound4Ot(challenge)
			require.NoError(tt, err)
			challengeOpenings, err := bob.Round9DkgRound5Ot(challengeResponse)
			require.NoError(tt, err)
			err = alice.Round10DkgRound6Ot(challengeOpenings)
			require.NoError(tt, err)
			// Verify correctness of the OT subprotocol after  has completed
			for i := 0; i < 256; i++ {
				if alice.receiver.Output.OneTimePadDecryptionKey[i] != bob.sender.Output.OneTimePadEncryptionKeys[i][alice.receiver.Output.RandomChoiceBits[i]] {
					tt.Errorf("oblivious transfer is incorrect at index i=%v", i)
				}
			}

			pkA := boundCurve.ScalarBaseMult(alice.Output().SecretKeyShare)
			pkB := boundCurve.ScalarBaseMult(bob.Output().SecretKeyShare)

			computedPublicKeyA := pkA.Mul(bob.Output().SecretKeyShare)
			require.True(tt, computedPublicKeyA.Equal(alice.Output().PublicKey))
			require.True(tt, computedPublicKeyA.Equal(bob.Output().PublicKey))

			computedPublicKeyB := pkB.Mul(alice.Output().SecretKeyShare)
			require.True(tt, computedPublicKeyB.Equal(alice.Output().PublicKey))
			require.True(tt, computedPublicKeyB.Equal(bob.Output().PublicKey))
		})
	}
}

func BenchmarkDkg(b *testing.B) {
	if testing.Short() {
		b.SkipNow()
	}
	curve := curves.K256()

	for n := 0; n < b.N; n++ {
		alice := NewAlice(256, 80, curve)
		bob := NewBob(256, 80, curve)

		seed, err := bob.Round1GenerateRandomSeed()
		require.NoError(b, err)
		round3Output, err := alice.Round2CommitToProof(seed)
		require.NoError(b, err)
		proof, err := bob.Round3SchnorrProve(round3Output)
		require.NoError(b, err)
		proof, err = alice.Round4VerifyAndReveal(proof)
		require.NoError(b, err)
		proof, err = bob.Round5DecommitmentAndStartOt(proof)
		require.NoError(b, err)
		compressedReceiversMaskedChoice, err := alice.Round6DkgRound2Ot(proof)
		require.NoError(b, err)
		challenge, err := bob.Round7DkgRound3Ot(compressedReceiversMaskedChoice)
		require.NoError(b, err)
		challengeResponse, err := alice.Round8DkgRound4Ot(challenge)
		require.NoError(b, err)
		challengeOpenings, err := bob.Round9DkgRound5Ot(challengeResponse)
		require.NoError(b, err)
		err = alice.Round10DkgRound6Ot(challengeOpenings)
		require.NoError(b, err)
	}
}