package application import ( "bytes" "crypto" "crypto/rand" "testing" "github.com/cloudflare/circl/sign/ed448" "github.com/iden3/go-iden3-crypto/poseidon" "github.com/stretchr/testify/require" "google.golang.org/protobuf/proto" "source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/core/curves" bls48581 "source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/core/curves/native/bls48581" "source.quilibrium.com/quilibrium/monorepo/node/protobufs" "source.quilibrium.com/quilibrium/monorepo/node/tries" ) func TestCeremonyTransitions(t *testing.T) { bls48581.Init() old := curves.BLS48581G1().Scalar.Random(rand.Reader) old2 := old.Mul(old) old3 := old2.Mul(old) proverPubKey, proverKey, err := ed448.GenerateKey(rand.Reader) require.NoError(t, err) idk := curves.ED448().Scalar.Random(rand.Reader) idkPub := curves.ED448().Point.Generator().Mul(idk).ToAffineCompressed() spk := curves.ED448().Scalar.Random(rand.Reader) spkPub := curves.ED448().Point.Generator().Mul(spk).ToAffineCompressed() require.NoError(t, err) trie := &tries.RewardCritbitTrie{} a := &CeremonyApplication{ RewardTrie: trie, LatestTranscript: &protobufs.CeremonyTranscript{ G1Powers: []*protobufs.BLS48581G1PublicKey{ { KeyValue: curves.BLS48581G1().Point.Generator().ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( old, ).ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( old2, ).ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( old3, ).ToAffineCompressed(), }, }, G2Powers: []*protobufs.BLS48581G2PublicKey{ { KeyValue: curves.BLS48581G2().Point.Generator().ToAffineCompressed(), }, { KeyValue: curves.BLS48581G2().Point.Generator().Mul( old, ).ToAffineCompressed(), }, }, RunningG1_256Witnesses: []*protobufs.BLS48581G1PublicKey{ { KeyValue: curves.BLS48581G1().Point.Generator().ToAffineCompressed(), }, }, RunningG2_256Powers: []*protobufs.BLS48581G2PublicKey{ { KeyValue: curves.BLS48581G2().Point.Generator().Mul( old, ).ToAffineCompressed(), }, }, }, } join := &protobufs.CeremonyLobbyJoin{ FrameNumber: 0, IdentityKey: &protobufs.X448PublicKey{ KeyValue: idkPub, }, SignedPreKey: &protobufs.X448PublicKey{ KeyValue: spkPub, }, } sig, err := join.SignWithProverKey(proverKey) require.NoError(t, err) join.PublicKeySignatureEd448 = &protobufs.Ed448Signature{ Signature: sig, PublicKey: &protobufs.Ed448PublicKey{ KeyValue: proverPubKey, }, } joinBytes, err := proto.Marshal(join) require.NoError(t, err) a, err = a.ApplyTransition(0, &protobufs.CeremonyLobbyStateTransition{ TypeUrls: []string{protobufs.CeremonyLobbyJoinType}, TransitionInputs: [][]byte{joinBytes}, }) require.NoError(t, err) require.Equal(t, a.LobbyState, CEREMONY_APPLICATION_STATE_OPEN) for i := uint64(0); i < 10; i++ { a, err = a.ApplyTransition(i+1, &protobufs.CeremonyLobbyStateTransition{ TypeUrls: []string{}, TransitionInputs: [][]byte{}, }) require.NoError(t, err) require.Equal(t, a.LobbyState, CEREMONY_APPLICATION_STATE_OPEN) } a, err = a.ApplyTransition(12, &protobufs.CeremonyLobbyStateTransition{ TypeUrls: []string{}, TransitionInputs: [][]byte{}, }) require.NoError(t, err) require.Equal(t, a.LobbyState, CEREMONY_APPLICATION_STATE_IN_PROGRESS) require.True(t, bytes.Equal( a.ActiveParticipants[0].PublicKeySignatureEd448.PublicKey.KeyValue, proverPubKey, )) tau := curves.BLS48581G1().Scalar.Random(rand.Reader) tau2 := tau.Mul(tau) tau3 := tau2.Mul(tau) tauPubG2 := curves.BLS48581G2().Point.Generator().Mul(tau) proverSig, err := proverKey.Sign( rand.Reader, tauPubG2.ToAffineCompressed(), crypto.Hash(0), ) require.NoError(t, err) blsSignature := make([]byte, int(bls48581.MODBYTES)+1) key := tau.Bytes() if bls48581.Core_Sign(blsSignature, proverPubKey, key) != bls48581.BLS_OK { require.Fail(t, "could not sign") } blsSig := blsSignature[:] advanceRound := &protobufs.CeremonyTranscriptCommit{ ProverSignature: &protobufs.Ed448Signature{ Signature: proverSig, PublicKey: &protobufs.Ed448PublicKey{ KeyValue: proverPubKey, }, }, ContributionSignature: &protobufs.BLS48581Signature{ Signature: blsSig, PublicKey: &protobufs.BLS48581G2PublicKey{ KeyValue: tauPubG2.ToAffineCompressed(), }, }, } advanceRoundBytes, err := proto.Marshal(advanceRound) require.NoError(t, err) a, err = a.ApplyTransition(13, &protobufs.CeremonyLobbyStateTransition{ TypeUrls: []string{protobufs.CeremonyTranscriptCommitType}, TransitionInputs: [][]byte{advanceRoundBytes}, }) require.NoError(t, err) require.Equal(t, a.LobbyState, CEREMONY_APPLICATION_STATE_FINALIZING) g1 := curves.BLS48581G1().Point.Generator() g2 := curves.BLS48581G2().Point.Generator() transcriptShare := &protobufs.CeremonyTranscriptShare{ AdditiveG1Powers: []*protobufs.BLS48581G1PublicKey{ { KeyValue: g1.Mul(old.Mul(tau)).ToAffineCompressed(), }, { KeyValue: g1.Mul(old2.Mul(tau2)).ToAffineCompressed(), }, { KeyValue: g1.Mul(old3.Mul(tau3)).ToAffineCompressed(), }, }, AdditiveG2Powers: []*protobufs.BLS48581G2PublicKey{ { KeyValue: g2.Mul(old.Mul(tau)).ToAffineCompressed(), }, }, AdditiveG1_256Witness: &protobufs.BLS48581G1PublicKey{ KeyValue: g1.Mul(tau).ToAffineCompressed(), }, AdditiveG2_256Witness: &protobufs.BLS48581G2PublicKey{ KeyValue: g2.Mul(old.Mul(tau)).ToAffineCompressed(), }, } sig, err = transcriptShare.SignWithProverKey(proverKey) require.NoError(t, err) transcriptShare.ProverSignature = &protobufs.Ed448Signature{ Signature: sig, PublicKey: &protobufs.Ed448PublicKey{ KeyValue: proverPubKey, }, } shareBytes, err := proto.Marshal(transcriptShare) require.NoError(t, err) a, err = a.ApplyTransition(14, &protobufs.CeremonyLobbyStateTransition{ TypeUrls: []string{protobufs.CeremonyTranscriptShareType}, TransitionInputs: [][]byte{shareBytes}, }) require.NoError(t, err) require.Equal(t, a.LobbyState, CEREMONY_APPLICATION_STATE_VALIDATING) updatedTranscript := &protobufs.CeremonyTranscript{ G1Powers: []*protobufs.BLS48581G1PublicKey{ { KeyValue: curves.BLS48581G1().Point.Generator().ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( old, ).Mul(tau).ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( old2, ).Mul(tau2).ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( old3, ).Mul(tau3).ToAffineCompressed(), }, }, G2Powers: []*protobufs.BLS48581G2PublicKey{ { KeyValue: curves.BLS48581G2().Point.Generator().ToAffineCompressed(), }, { KeyValue: curves.BLS48581G2().Point.Generator().Mul( old, ).Mul(tau).ToAffineCompressed(), }, }, RunningG1_256Witnesses: []*protobufs.BLS48581G1PublicKey{ { KeyValue: curves.BLS48581G1().Point.Generator().ToAffineCompressed(), }, { KeyValue: curves.BLS48581G1().Point.Generator().Mul( tau, ).ToAffineCompressed(), }, }, RunningG2_256Powers: []*protobufs.BLS48581G2PublicKey{ { KeyValue: curves.BLS48581G2().Point.Generator().Mul( old, ).ToAffineCompressed(), }, { KeyValue: curves.BLS48581G2().Point.Generator().Mul( old, ).Mul(tau).ToAffineCompressed(), }, }, } transcriptBytes, err := proto.Marshal(updatedTranscript) require.NoError(t, err) a, err = a.ApplyTransition(15, &protobufs.CeremonyLobbyStateTransition{ TypeUrls: []string{protobufs.CeremonyTranscriptType}, TransitionInputs: [][]byte{transcriptBytes}, }) require.NoError(t, err) require.Equal(t, a.LobbyState, CEREMONY_APPLICATION_STATE_OPEN) bi, err := poseidon.HashBytes(proverPubKey) require.NoError(t, err) addr := bi.FillBytes(make([]byte, 32)) _, f, reward := a.RewardTrie.Get(addr) require.Equal(t, f, uint64(15)) require.Equal(t, reward, uint64(161)) }