vrf-contract-verifier 0.8.4

Minimal VRF proof verification for smart contracts
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

use crate::constants::CHALLENGE_LENGTH;
use crate::types::{VrfOutput, VrfPublicKey, VrfProof, VerificationError};

// RFC 9381 proof length: gamma(32) + c(16) + s(32) = 80 bytes
const RFC_VRF_PROOF_LENGTH: usize = 32 + CHALLENGE_LENGTH + 32; // 80 bytes

/// VRF verification function for NEAR contracts (with fixed-length arrays)
/// Returns the VRF output on successful verification
pub fn verify_vrf_fixed(
    proof_bytes: &[u8; RFC_VRF_PROOF_LENGTH],    // RFC 9381: 80 bytes
    public_key_bytes: &[u8; 32],                 // Fixed-length for better type safety
    input: &[u8],
) -> Result<VrfOutput, VerificationError> {
    let public_key = VrfPublicKey(*public_key_bytes);

    // Parse RFC 9381 proof structure: gamma(32) + c(16) + s(32)
    let proof = VrfProof {
        gamma: proof_bytes[0..32].try_into()
            .map_err(|_| VerificationError::InvalidProofLength)?,
        c: proof_bytes[32..(32 + CHALLENGE_LENGTH)].try_into()
            .map_err(|_| VerificationError::InvalidProofLength)?,
        s: proof_bytes[(32 + CHALLENGE_LENGTH)..RFC_VRF_PROOF_LENGTH].try_into()
            .map_err(|_| VerificationError::InvalidProofLength)?,
    };

    proof.verify(input, &public_key)
}

/// VRF verification function for NEAR contracts (Vec input for compatibility)
/// Returns the VRF output on successful verification
pub fn verify_vrf(
    proof_bytes: &[u8],
    public_key_bytes: &[u8],
    input: &[u8],
) -> Result<VrfOutput, VerificationError> {
    if public_key_bytes.len() != 32 {
        return Err(VerificationError::InvalidPublicKey);
    }

    if proof_bytes.len() != RFC_VRF_PROOF_LENGTH {  // RFC 9381: 80 bytes
        return Err(VerificationError::InvalidProofLength);
    }

    let public_key_array: [u8; 32] = public_key_bytes.try_into()
        .map_err(|_| VerificationError::InvalidPublicKey)?;
    let proof_array: [u8; RFC_VRF_PROOF_LENGTH] = proof_bytes.try_into()
        .map_err(|_| VerificationError::InvalidProofLength)?;

    verify_vrf_fixed(&proof_array, &public_key_array, &input)
}

/// Boolean verification for simpler contract usage
pub fn verify_vrf_bool(
    proof_bytes: Vec<u8>,
    public_key_bytes: Vec<u8>,
    input: Vec<u8>,
) -> bool {
    verify_vrf(&proof_bytes, &public_key_bytes, &input).is_ok()
}