mirror of
https://source.quilibrium.com/quilibrium/ceremonyclient.git
synced 2024-11-13 03:35:17 +00:00
104 lines
3.4 KiB
Go
104 lines
3.4 KiB
Go
//
|
|
// Copyright Coinbase, Inc. All Rights Reserved.
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
//
|
|
|
|
package dkg
|
|
|
|
import (
|
|
"fmt"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/core/curves"
|
|
)
|
|
|
|
func TestDkg(t *testing.T) {
|
|
t.Parallel()
|
|
curveInstances := []*curves.Curve{
|
|
curves.K256(),
|
|
curves.P256(),
|
|
}
|
|
for _, curve := range curveInstances {
|
|
boundCurve := curve
|
|
t.Run(fmt.Sprintf("testing dkg for curve %s", boundCurve.Name), func(tt *testing.T) {
|
|
tt.Parallel()
|
|
alice := NewAlice(256, 80, boundCurve)
|
|
bob := NewBob(256, 80, boundCurve)
|
|
|
|
seed, err := bob.Round1GenerateRandomSeed()
|
|
require.NoError(tt, err)
|
|
round3Output, err := alice.Round2CommitToProof(seed)
|
|
require.NoError(tt, err)
|
|
proof, err := bob.Round3SchnorrProve(round3Output)
|
|
require.NoError(tt, err)
|
|
proof, err = alice.Round4VerifyAndReveal(proof)
|
|
require.NoError(tt, err)
|
|
proof, err = bob.Round5DecommitmentAndStartOt(proof)
|
|
require.NoError(tt, err)
|
|
compressedReceiversMaskedChoice, err := alice.Round6DkgRound2Ot(proof)
|
|
require.NoError(tt, err)
|
|
challenge, err := bob.Round7DkgRound3Ot(compressedReceiversMaskedChoice)
|
|
require.NoError(tt, err)
|
|
challengeResponse, err := alice.Round8DkgRound4Ot(challenge)
|
|
require.NoError(tt, err)
|
|
challengeOpenings, err := bob.Round9DkgRound5Ot(challengeResponse)
|
|
require.NoError(tt, err)
|
|
err = alice.Round10DkgRound6Ot(challengeOpenings)
|
|
require.NoError(tt, err)
|
|
// Verify correctness of the OT subprotocol after has completed
|
|
for i := 0; i < 256; i++ {
|
|
if alice.receiver.Output.OneTimePadDecryptionKey[i] != bob.sender.Output.OneTimePadEncryptionKeys[i][alice.receiver.Output.RandomChoiceBits[i]] {
|
|
tt.Errorf("oblivious transfer is incorrect at index i=%v", i)
|
|
}
|
|
}
|
|
|
|
pkA := boundCurve.ScalarBaseMult(alice.Output().SecretKeyShare)
|
|
pkB := boundCurve.ScalarBaseMult(bob.Output().SecretKeyShare)
|
|
|
|
computedPublicKeyA := pkA.Mul(bob.Output().SecretKeyShare)
|
|
require.True(tt, computedPublicKeyA.Equal(alice.Output().PublicKey))
|
|
require.True(tt, computedPublicKeyA.Equal(bob.Output().PublicKey))
|
|
|
|
computedPublicKeyB := pkB.Mul(alice.Output().SecretKeyShare)
|
|
require.True(tt, computedPublicKeyB.Equal(alice.Output().PublicKey))
|
|
require.True(tt, computedPublicKeyB.Equal(bob.Output().PublicKey))
|
|
})
|
|
}
|
|
}
|
|
|
|
func BenchmarkDkg(b *testing.B) {
|
|
if testing.Short() {
|
|
b.SkipNow()
|
|
}
|
|
curve := curves.K256()
|
|
|
|
for n := 0; n < b.N; n++ {
|
|
alice := NewAlice(256, 80, curve)
|
|
bob := NewBob(256, 80, curve)
|
|
|
|
seed, err := bob.Round1GenerateRandomSeed()
|
|
require.NoError(b, err)
|
|
round3Output, err := alice.Round2CommitToProof(seed)
|
|
require.NoError(b, err)
|
|
proof, err := bob.Round3SchnorrProve(round3Output)
|
|
require.NoError(b, err)
|
|
proof, err = alice.Round4VerifyAndReveal(proof)
|
|
require.NoError(b, err)
|
|
proof, err = bob.Round5DecommitmentAndStartOt(proof)
|
|
require.NoError(b, err)
|
|
compressedReceiversMaskedChoice, err := alice.Round6DkgRound2Ot(proof)
|
|
require.NoError(b, err)
|
|
challenge, err := bob.Round7DkgRound3Ot(compressedReceiversMaskedChoice)
|
|
require.NoError(b, err)
|
|
challengeResponse, err := alice.Round8DkgRound4Ot(challenge)
|
|
require.NoError(b, err)
|
|
challengeOpenings, err := bob.Round9DkgRound5Ot(challengeResponse)
|
|
require.NoError(b, err)
|
|
err = alice.Round10DkgRound6Ot(challengeOpenings)
|
|
require.NoError(b, err)
|
|
}
|
|
}
|