Struct PoKOfSignatureG1Proof

pub struct PoKOfSignatureG1Proof<E: Pairing> {
    pub A_prime: E::G1Affine,
    pub A_bar: E::G1Affine,
    pub d: E::G1Affine,
    pub sc_resp_1: PokTwoDiscreteLogs<E::G1Affine>,
    pub T2: E::G1Affine,
    pub sc_resp_2: Option<SchnorrResponse<E::G1Affine>>,
    pub sc_partial_resp_2: Option<PartialSchnorrResponse<E::G1Affine>>,
}

Proof of knowledge of BBS+ signature in G1. It contains the randomized signature, commitment (Schnorr step 1) and response (Schnorr step 3) to both Schnorr protocols in T_ and sc_resp_

Fields

A_prime: E::G1Affine

A_bar: E::G1Affine

d: E::G1Affine

sc_resp_1: PokTwoDiscreteLogs<E::G1Affine>

Proof of relation A_bar - d = A_prime * -e + h_0 * r2

T2: E::G1Affine

Proof of relation g1 + h1*m1 + h2*m2 +.... + h_i*m_i = d*r3 + {h_0}*{-s'} + h1*{-m1} + h2*{-m2} + .... + h_j*{-m_j} for all disclosed messages m_i and for all undisclosed messages m_j

sc_resp_2: Option<SchnorrResponse<E::G1Affine>>

The following could be achieved by using Either<SchnorrResponse, PartialSchnorrResponse> but serialization for Either is not supported out of the box and had to be implemented

sc_partial_resp_2: Option<PartialSchnorrResponse<E::G1Affine>>

Implementations

impl<E: Pairing> PoKOfSignatureG1Proof<E>

pub fn verify( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, pk: impl Into<PreparedPublicKeyG2<E>>, params: impl Into<PreparedSignatureParamsG1<E>>, ) -> Result<(), BBSPlusError>

Verify if the proof is valid. Assumes that the public key and parameters have been validated already.

pub fn verify_with_randomized_pairing_checker( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, pk: impl Into<PreparedPublicKeyG2<E>>, params: impl Into<PreparedSignatureParamsG1<E>>, pairing_checker: &mut RandomizedPairingChecker<E>, ) -> Result<(), BBSPlusError>

pub fn verify_partial( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, pk: impl Into<PreparedPublicKeyG2<E>>, params: impl Into<PreparedSignatureParamsG1<E>>, missing_responses: BTreeMap<usize, E::ScalarField>, ) -> Result<(), BBSPlusError>

Similar to Self::verify but responses for some messages (witnesses) are provided in missing_responses. The keys of the map are message indices.

pub fn verify_partial_with_randomized_pairing_checker( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, pk: impl Into<PreparedPublicKeyG2<E>>, params: impl Into<PreparedSignatureParamsG1<E>>, pairing_checker: &mut RandomizedPairingChecker<E>, missing_responses: BTreeMap<usize, E::ScalarField>, ) -> Result<(), BBSPlusError>

Similar to Self::verify_with_randomized_pairing_checker but responses for some messages (witnesses) are provided in missing_responses. The keys of the map are message indices.

pub fn challenge_contribution<W: Write>( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, params: &SignatureParamsG1<E>, writer: W, ) -> Result<(), BBSPlusError>

For the verifier to independently calculate the challenge

pub fn get_resp_for_message( &self, msg_idx: usize, revealed_msg_ids: &BTreeSet<usize>, ) -> Result<&E::ScalarField, BBSPlusError>

Get the response from post-challenge phase of the Schnorr protocol for the given message index msg_idx. Used when comparing message equality

pub fn get_responses( &self, msg_ids: &BTreeSet<usize>, revealed_msg_ids: &BTreeSet<usize>, ) -> Result<BTreeMap<usize, E::ScalarField>, BBSPlusError>

pub fn _verify( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, pk: impl Into<PreparedPublicKeyG2<E>>, params: impl Into<PreparedSignatureParamsG1<E>>, missing_responses: Option<BTreeMap<usize, E::ScalarField>>, ) -> Result<(), BBSPlusError>

pub fn _verify_with_randomized_pairing_checker( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, pk: impl Into<PreparedPublicKeyG2<E>>, params: impl Into<PreparedSignatureParamsG1<E>>, pairing_checker: &mut RandomizedPairingChecker<E>, missing_responses: Option<BTreeMap<usize, E::ScalarField>>, ) -> Result<(), BBSPlusError>

pub fn verify_schnorr_proofs( &self, revealed_msgs: &BTreeMap<usize, E::ScalarField>, challenge: &E::ScalarField, g1: E::G1Affine, h_0: E::G1Affine, h: Vec<E::G1Affine>, missing_responses: Option<BTreeMap<usize, E::ScalarField>>, ) -> Result<(), BBSPlusError>

Trait Implementations

impl<E: Pairing> CanonicalDeserialize for PoKOfSignatureG1Proof<E>

fn deserialize_with_mode<R: Read>( reader: R, compress: Compress, validate: Validate, ) -> Result<Self, SerializationError>

The general deserialize method that takes in customization flags.

fn deserialize_compressed<R>(reader: R) -> Result<Self, SerializationError>

where R: Read,

fn deserialize_compressed_unchecked<R>( reader: R, ) -> Result<Self, SerializationError>

where R: Read,

fn deserialize_uncompressed<R>(reader: R) -> Result<Self, SerializationError>

where R: Read,

fn deserialize_uncompressed_unchecked<R>( reader: R, ) -> Result<Self, SerializationError>

where R: Read,

impl<E: Pairing> CanonicalSerialize for PoKOfSignatureG1Proof<E>

fn serialize_with_mode<W: Write>( &self, writer: W, compress: Compress, ) -> Result<(), SerializationError>

The general serialize method that takes in customization flags.

fn serialized_size(&self, compress: Compress) -> usize

fn serialize_compressed<W>(&self, writer: W) -> Result<(), SerializationError>

where W: Write,

fn compressed_size(&self) -> usize

fn serialize_uncompressed<W>(&self, writer: W) -> Result<(), SerializationError>

where W: Write,

fn uncompressed_size(&self) -> usize

impl<E: Clone + Pairing> Clone for PoKOfSignatureG1Proof<E>

where E::G1Affine: Clone,

fn clone(&self) -> PoKOfSignatureG1Proof<E>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<E: Debug + Pairing> Debug for PoKOfSignatureG1Proof<E>

where E::G1Affine: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de, E: Pairing> Deserialize<'de> for PoKOfSignatureG1Proof<E>

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<E: PartialEq + Pairing> PartialEq for PoKOfSignatureG1Proof<E>

where E::G1Affine: PartialEq,

fn eq(&self, other: &PoKOfSignatureG1Proof<E>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<E: Pairing> Serialize for PoKOfSignatureG1Proof<E>

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl<E: Pairing> Valid for PoKOfSignatureG1Proof<E>

fn check(&self) -> Result<(), SerializationError>

fn batch_check<'a>( batch: impl Iterator<Item = &'a Self> + Send, ) -> Result<(), SerializationError>

where Self: 'a,

impl<E: Eq + Pairing> Eq for PoKOfSignatureG1Proof<E>

where E::G1Affine: Eq,

impl<E: Pairing> StructuralPartialEq for PoKOfSignatureG1Proof<E>