Struct nazgul::clsag::CLSAG

pub struct CLSAG { /* fields omitted */ }

Concise Linkable Spontaneous Anonymous Group (CLSAG) signatures

CLSAG is sort of half-way between bLSAG and MLSAG. Suppose you have a ‘primary’ key, and associated with it are several ‘auxiliary’ keys. It is important to prove knowledge of all private keys, but linkability only applies to the primary. This linkability retraction allows smaller, faster signatures than afforded by MLSAG.

Please read tests at the bottom of the source code for this module for examples on how to use it

Trait Implementations

impl KeyImageGen<Vec<Scalar>, Vec<RistrettoPoint>> for CLSAG

fn generate_key_image<Hash: Digest<OutputSize = U64> + Clone + Default>(
    ks: Vec<Scalar>
) -> Vec<RistrettoPoint>

Some signature schemes require the key images to be signed as well. Use this method to generate them

impl Link for CLSAG

fn link(signature_1: CLSAG, signature_2: CLSAG) -> bool

This is for linking two signatures and checking if they are signed by the same person

impl Sign<Vec<Scalar>, Vec<Vec<RistrettoPoint>>> for CLSAG

fn sign<Hash: Digest<OutputSize = U64> + Clone + Default, CSPRNG: CryptoRng + RngCore + Default>(
    ks: Vec<Scalar>,
    ring: Vec<Vec<RistrettoPoint>>,
    message: &Vec<u8>
) -> CLSAG

To sign you need ks which is the set of private keys you want to sign with. Only the first one is linkable. The ring contains public keys for everybody except you. Your public key will be inserted into it at random (secret) index. The message is what you are signing

impl Verify for CLSAG

fn verify<Hash: Digest<OutputSize = U64> + Clone + Default>(
    signature: CLSAG,
    message: &Vec<u8>
) -> bool

To verify a signature you need the message too