mirror of
https://source.quilibrium.com/quilibrium/ceremonyclient.git
synced 2024-12-30 18:35:18 +00:00
113 lines
2.0 KiB
Go
113 lines
2.0 KiB
Go
//
|
|
// Copyright Coinbase, Inc. All Rights Reserved.
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
//
|
|
|
|
package mina
|
|
|
|
import (
|
|
"source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/core/curves/native/pasta/fp"
|
|
)
|
|
|
|
// SBox is the type of exponentiation to perform
|
|
type SBox int
|
|
|
|
const (
|
|
Cube = iota // x^3
|
|
Quint // x^5
|
|
Sept // x^7
|
|
Inverse // x^-1
|
|
)
|
|
|
|
// Exp mutates f by computing x^3, x^5, x^7 or x^-1 as described in
|
|
// https://eprint.iacr.org/2019/458.pdf page 8
|
|
func (sbox SBox) Exp(f *fp.Fp) {
|
|
switch sbox {
|
|
case Cube:
|
|
t := new(fp.Fp).Square(f)
|
|
f.Mul(t, f)
|
|
case Quint:
|
|
t := new(fp.Fp).Square(f)
|
|
t.Square(t)
|
|
f.Mul(t, f)
|
|
case Sept:
|
|
f2 := new(fp.Fp).Square(f)
|
|
f4 := new(fp.Fp).Square(f2)
|
|
t := new(fp.Fp).Mul(f2, f4)
|
|
f.Mul(t, f)
|
|
case Inverse:
|
|
f.Invert(f)
|
|
default:
|
|
}
|
|
}
|
|
|
|
// Permutation is the permute function to use
|
|
type Permutation int
|
|
|
|
const (
|
|
ThreeW = iota
|
|
FiveW
|
|
Three
|
|
)
|
|
|
|
// Permute executes the poseidon hash function
|
|
func (p Permutation) Permute(ctx *Context) {
|
|
switch p {
|
|
case ThreeW:
|
|
for r := 0; r < ctx.fullRounds; r++ {
|
|
ark(ctx, r)
|
|
sbox(ctx)
|
|
mds(ctx)
|
|
}
|
|
ark(ctx, ctx.fullRounds)
|
|
case Three:
|
|
fallthrough
|
|
case FiveW:
|
|
// Full rounds only
|
|
for r := 0; r < ctx.fullRounds; r++ {
|
|
sbox(ctx)
|
|
mds(ctx)
|
|
ark(ctx, r)
|
|
}
|
|
default:
|
|
}
|
|
}
|
|
|
|
func ark(ctx *Context, round int) {
|
|
for i := 0; i < ctx.spongeWidth; i++ {
|
|
ctx.state[i].Add(ctx.state[i], ctx.roundKeys[round][i])
|
|
}
|
|
}
|
|
|
|
func sbox(ctx *Context) {
|
|
for i := 0; i < ctx.spongeWidth; i++ {
|
|
ctx.sBox.Exp(ctx.state[i])
|
|
}
|
|
}
|
|
|
|
func mds(ctx *Context) {
|
|
state2 := make([]*fp.Fp, len(ctx.state))
|
|
for i := range ctx.state {
|
|
state2[i] = new(fp.Fp).SetZero()
|
|
}
|
|
for row := 0; row < ctx.spongeWidth; row++ {
|
|
for col := 0; col < ctx.spongeWidth; col++ {
|
|
t := new(fp.Fp).Mul(ctx.state[col], ctx.mdsMatrix[row][col])
|
|
state2[row].Add(state2[row], t)
|
|
}
|
|
}
|
|
for i, f := range state2 {
|
|
ctx.state[i].Set(f)
|
|
}
|
|
}
|
|
|
|
// NetworkType is which Mina network id to use
|
|
type NetworkType int
|
|
|
|
const (
|
|
TestNet = iota
|
|
MainNet
|
|
NullNet
|
|
)
|