arcis-compiler 0.9.6

A framework for writing secure multi-party computation (MPC) circuits to be executed on the Arcium network.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107

use crate::{
    core::{
        circuits::boolean::{boolean_value::BooleanValue, byte::Byte},
        global_value::value::FieldValue,
    },
    utils::{
        field::ScalarField,
        zkp::{
            elgamal::{DecryptHandle, ElGamalCiphertext, ElGamalPubkey},
            pedersen::{Pedersen, PedersenCommitment, PedersenOpening},
        },
    },
};
use zk_elgamal_proof::encryption::{DECRYPT_HANDLE_LEN, PEDERSEN_COMMITMENT_LEN};

pub const GROUPED_ELGAMAL_CIPHERTEXT_2_HANDLES_LEN: usize =
    PEDERSEN_COMMITMENT_LEN + 2 * DECRYPT_HANDLE_LEN;

pub const GROUPED_ELGAMAL_CIPHERTEXT_3_HANDLES_LEN: usize =
    PEDERSEN_COMMITMENT_LEN + 3 * DECRYPT_HANDLE_LEN;

/// Algorithm handle for the grouped ElGamal encryption
pub struct GroupedElGamal<const N: usize>;
impl<const N: usize> GroupedElGamal<N> {
    /// Encrypts an amount under an array of ElGamal public keys using a specified Pedersen
    /// opening.
    pub fn encrypt_with(
        pubkeys: [&ElGamalPubkey; N],
        amount: FieldValue<ScalarField>,
        opening: &PedersenOpening,
    ) -> GroupedElGamalCiphertext<N> {
        let commitment = Pedersen::with(amount, opening);
        let handles = pubkeys.map(|handle| handle.decrypt_handle(opening));

        GroupedElGamalCiphertext {
            commitment,
            handles,
        }
    }

    /// Converts a grouped ElGamal ciphertext into a regular ElGamal ciphertext using the decrypt
    /// handle at a specified index.
    fn to_elgamal_ciphertext(
        grouped_ciphertext: &GroupedElGamalCiphertext<N>,
        index: usize,
    ) -> ElGamalCiphertext {
        assert!(index < N);
        ElGamalCiphertext {
            commitment: grouped_ciphertext.commitment,
            handle: grouped_ciphertext.handles[index],
        }
    }
}

/// A grouped ElGamal ciphertext.
///
/// The type is defined with a generic constant parameter that specifies the number of
/// decryption handles that the ciphertext holds.
#[derive(Clone, Copy)]
pub struct GroupedElGamalCiphertext<const N: usize> {
    pub commitment: PedersenCommitment,
    pub handles: [DecryptHandle; N],
}

impl<const N: usize> GroupedElGamalCiphertext<N> {
    /// Converts a grouped ElGamal ciphertext into a regular ElGamal ciphertext using the decrypt
    /// handle at a specified index.
    pub fn to_elgamal_ciphertext(&self, index: usize) -> ElGamalCiphertext {
        GroupedElGamal::to_elgamal_ciphertext(self, index)
    }
}

#[derive(Clone, Copy)]
pub struct GroupedElGamalCiphertext2Handles(pub GroupedElGamalCiphertext<2>);

impl GroupedElGamalCiphertext2Handles {
    pub fn to_bytes(&self) -> [Byte<BooleanValue>; GROUPED_ELGAMAL_CIPHERTEXT_2_HANDLES_LEN] {
        let mut bytes = [Byte::<BooleanValue>::from(0u8); GROUPED_ELGAMAL_CIPHERTEXT_2_HANDLES_LEN];
        bytes[..PEDERSEN_COMMITMENT_LEN]
            .copy_from_slice(&self.0.commitment.get_point().compress().to_bytes());
        let mut offset = PEDERSEN_COMMITMENT_LEN;
        for handle in &self.0.handles {
            bytes[offset..offset + DECRYPT_HANDLE_LEN]
                .copy_from_slice(&handle.get_point().compress().to_bytes());
            offset += DECRYPT_HANDLE_LEN;
        }
        bytes
    }
}

#[derive(Clone, Copy)]
pub struct GroupedElGamalCiphertext3Handles(pub GroupedElGamalCiphertext<3>);

impl GroupedElGamalCiphertext3Handles {
    pub fn to_bytes(&self) -> [Byte<BooleanValue>; GROUPED_ELGAMAL_CIPHERTEXT_3_HANDLES_LEN] {
        let mut bytes = [Byte::<BooleanValue>::from(0u8); GROUPED_ELGAMAL_CIPHERTEXT_3_HANDLES_LEN];
        bytes[..PEDERSEN_COMMITMENT_LEN]
            .copy_from_slice(&self.0.commitment.get_point().compress().to_bytes());
        let mut offset = PEDERSEN_COMMITMENT_LEN;
        for handle in &self.0.handles {
            bytes[offset..offset + DECRYPT_HANDLE_LEN]
                .copy_from_slice(&handle.get_point().compress().to_bytes());
            offset += DECRYPT_HANDLE_LEN;
        }
        bytes
    }
}