mirror of
https://source.quilibrium.com/quilibrium/ceremonyclient.git
synced 2024-11-15 04:35:17 +00:00
97 lines
4.0 KiB
Markdown
97 lines
4.0 KiB
Markdown
|
# Nekryptology
|
||
|
|
Coinbase's advanced cryptography library, brought back from the dead and enhanced
|
||
|
|
|
||
|
|
## Differences from Kryptology
|
||
|
|
- Schnorr proofs are patched to use hash-to-curve, fixes a bug where depending on the curve there may be a small to very large percentage of proofs that are invalid encodings
|
||
|
|
- Supports BLS48-581 (uses MIRACL-generated implementation, slightly altered to align to curves.Scalar/curves.Point interfaces)
|
||
|
|
- Enhanced KOS15 implementation to support arbitrary computational and statistical security parameters
|
||
|
|
- Updated DKLs18 multiplication to use KOS15 enhancements
|
||
|
|
- OT-based t-of-n multiplication scheme (borrowed from DKLs19)
|
||
|
|
- Supports <=2048-bit IQC primitives (uses harmony-one's implementation, slightly adjusted to fix vulnerabilities in FS transform)
|
||
|
|
- Added Wesolowski VDF
|
||
|
|
- GG20 is removed
|
||
|
|
|
||
|
|
## Quickstart
|
||
|
|
Use the latest version of this library:
|
||
|
|
|
||
|
|
```
|
||
|
|
go get source.quilibrium.com/quilibrium/monorepo/nekryptology
|
||
|
|
```
|
||
|
|
|
||
|
|
## Documentation
|
||
|
|
|
||
|
|
Public documentations can be found at https://pkg.go.dev/source.quilibrium.com/quilibrium/monorepo/nekryptology
|
||
|
|
|
||
|
|
To access the documentation of the local version, run `godoc -http=:6060` and open
|
||
|
|
the following url in your browser.
|
||
|
|
|
||
|
|
http://localhost:6060/pkg/source.quilibrium.com/quilibrium/monorepo/nekryptology/
|
||
|
|
|
||
|
|
## Developer Setup
|
||
|
|
**Prerequisites**: `golang 1.18`, `make`
|
||
|
|
|
||
|
|
```
|
||
|
|
git clone git@source.quilibrium.com/quilibrium/monorepo/nekryptology.git && make
|
||
|
|
```
|
||
|
|
|
||
|
|
## Components
|
||
|
|
|
||
|
|
The following is the list of primitives and protocols that are implemented in this repository.
|
||
|
|
|
||
|
|
### Curves
|
||
|
|
|
||
|
|
The curve abstraction code can be found at [pkg/core/curves/curve.go](pkg/core/curves/curve.go)
|
||
|
|
|
||
|
|
The curves that implement this abstraction are as follows.
|
||
|
|
|
||
|
|
- [BLS12377](pkg/core/curves/bls12377_curve.go)
|
||
|
|
- [BLS12381](pkg/core/curves/bls12381_curve.go)
|
||
|
|
- [BLS48581](pkg/core/curves/bls48581_curve.go)
|
||
|
|
- [Ed25519](pkg/core/curves/ed25519_curve.go)
|
||
|
|
- [Secp256k1](pkg/core/curves/k256_curve.go)
|
||
|
|
- [P256](pkg/core/curves/p256_curve.go)
|
||
|
|
- [Pallas](pkg/core/curves/pallas_curve.go)
|
||
|
|
|
||
|
|
### IQC
|
||
|
|
|
||
|
|
The IQC abstraction code can be found at [pkg/core/iqc/classgroup.go](pkg/core/iqc/classgroup.go).
|
||
|
|
|
||
|
|
### Protocols
|
||
|
|
|
||
|
|
The generic protocol interface [pkg/core/protocol/protocol.go](pkg/core/protocol/protocol.go).
|
||
|
|
|
||
|
|
- [Cryptographic Accumulators](pkg/accumulator)
|
||
|
|
- [Bulletproof](pkg/bulletproof)
|
||
|
|
- Oblivious Transfer
|
||
|
|
- [Verifiable Simplest OT](pkg/ot/base/simplest)
|
||
|
|
- [KOS OT Extension](pkg/ot/extension/kos)
|
||
|
|
- Threshold ECDSA Signature
|
||
|
|
- [DKLs18 - DKG and Signing](pkg/tecdsa/dkls/v1)
|
||
|
|
- GG20: The authors of GG20 have stated that the protocol is obsolete and should not be used. See [https://eprint.iacr.org/2020/540.pdf](https://eprint.iacr.org/2020/540.pdf).
|
||
|
|
- [GG20 - DKG](pkg/dkg/gennaro)
|
||
|
|
- [GG20 - Signing](pkg/tecdsa/gg20)
|
||
|
|
- Threshold Schnorr Signature
|
||
|
|
- [FROST threshold signature - DKG](pkg/dkg/frost)
|
||
|
|
- [FROST threshold signature - Signing](pkg/ted25519/frost)
|
||
|
|
- [Paillier encryption system](pkg/paillier)
|
||
|
|
- Secret Sharing Schemes
|
||
|
|
- [Shamir's secret sharing scheme](pkg/sharing/shamir.go)
|
||
|
|
- [Pedersen](pkg/sharing/pedersen.go)
|
||
|
|
- [Feldman](pkg/sharing/feldman.go)
|
||
|
|
- [Verifiable encryption](pkg/verenc)
|
||
|
|
- [ZKP Schnorr](pkg/zkp/schnorr)
|
||
|
|
|
||
|
|
|
||
|
|
## Contributing
|
||
|
|
- [Versioning](https://blog.golang.org/publishing-go-modules): `vMajor.Minor.Patch`
|
||
|
|
- Major revision indicates breaking API change or significant new features
|
||
|
|
- Minor revision indicates no API breaking changes and may include significant new features or documentation
|
||
|
|
- Patch indicates no API breaking changes and may include only fixes
|
||
|
|
|
||
|
|
|
||
|
|
## [References](docs/)
|
||
|
|
- [[GG20] _One Round Threshold ECDSA with Identifiable Abort._](https://eprint.iacr.org/2020/540.pdf)
|
||
|
|
- [[specV5] _One Round Threshold ECDSA for Coinbase._](docs/Coinbase_Pseudocode_v5.pdf)
|
||
|
|
- [[EL20] _Eliding RSA Group Membership Checks._](docs/rsa-membership.pdf) [src](https://www.overleaf.com/project/5f9c3b0624a9a600012037a3)
|
||
|
|
- [[P99] _Public-Key Cryptosystems Based on Composite Degree Residuosity Classes._](http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.112.4035&rep=rep1&type=pdf)
|