zkpyc-stdlib 0.1.0-dev

Standard library for the ZKPyC compiler.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

from zkpyc.types import Array, field # zk_ignore
from zkpyc.stdlib.utils.casts.int_to_bits import to_bits
from zkpyc.stdlib.utils.casts.int_from_bits import from_bits
from zkpyc.stdlib.ecc.edwardsAdd import add
from zkpyc.stdlib.ecc.edwardsCompress import edwardsCompress
from zkpyc.stdlib.ecc.babyjubjubParams import BABYJUBJUB_PARAMS
from zkpyc.stdlib.commitment.pedersen.bn256.hash512bitBool import pedersen_no_compress
from zkpyc.stdlib.hashes.pedersen.bn256.generators import G_table
from zkpyc.stdlib.hashes.pedersen.bn256.generators import H_table
from zkpyc.stdlib.EMBED import unpack
from zkpyc.stdlib.EMBED import get_field_size

def commit_int(x: Array[int, 16], r: Array[int, 16]) -> Array[int, 8]:
    x_bool: Array[bool, 512] = [
        *to_bits(x[0]),
        *to_bits(x[1]),
        *to_bits(x[2]),
        *to_bits(x[3]),
        *to_bits(x[4]),
        *to_bits(x[5]),
        *to_bits(x[6]),
        *to_bits(x[7]),
        *to_bits(x[8]),
        *to_bits(x[9]),
        *to_bits(x[10]),
        *to_bits(x[11]),
        *to_bits(x[12]),
        *to_bits(x[13]),
        *to_bits(x[14]),
        *to_bits(x[15])
    ]

    r_bool: Array[bool, 512] = [
        *to_bits(r[0]),
        *to_bits(r[1]),
        *to_bits(r[2]),
        *to_bits(r[3]),
        *to_bits(r[4]),
        *to_bits(r[5]),
        *to_bits(r[6]),
        *to_bits(r[7]),
        *to_bits(r[8]),
        *to_bits(r[9]),
        *to_bits(r[10]),
        *to_bits(r[11]),
        *to_bits(r[12]),
        *to_bits(r[13]),
        *to_bits(r[14]),
        *to_bits(r[15])
    ]

    input_hash: Array[field, 2] = pedersen_no_compress(x_bool, G_table)
    blinding_hash: Array[field, 2] = pedersen_no_compress(r_bool, H_table)
    commitment:  Array[bool, 256] = edwardsCompress(add(input_hash, blinding_hash, BABYJUBJUB_PARAMS))

    return [
        from_bits(commitment[0:32]),
        from_bits(commitment[32:64]),
        from_bits(commitment[64:96]),
        from_bits(commitment[96:128]),
        from_bits(commitment[128:160]),
        from_bits(commitment[160:192]),
        from_bits(commitment[192:224]),
        from_bits(commitment[224:256])
    ]

def commit_field(x: field, r: Array[field, 2]) -> Array[int, 8]:
    x_bool: Array[bool, 512] = [
        *unpack(x, get_field_size()),
        *[False for _ in range(512 - get_field_size())]
    ]

    r_bool: Array[bool, 512] = [
        *unpack(r[0], get_field_size()),
        *unpack(r[1], get_field_size()),
        *[False for _ in range(512 - 2*get_field_size())]
    ]

    input_hash: Array[field, 2] = pedersen_no_compress(x_bool, G_table)
    blinding_hash: Array[field, 2] = pedersen_no_compress(r_bool, H_table)
    commitment:  Array[bool, 256] = edwardsCompress(add(input_hash, blinding_hash, BABYJUBJUB_PARAMS))

    return [
        from_bits(commitment[0:32]),
        from_bits(commitment[32:64]),
        from_bits(commitment[64:96]),
        from_bits(commitment[96:128]),
        from_bits(commitment[128:160]),
        from_bits(commitment[160:192]),
        from_bits(commitment[192:224]),
        from_bits(commitment[224:256])
    ]