zkp_operation_paillier_commitment_range.h

/** 
 *  Name:
 *  zkp_oper_paillier_commit_range
 *  
 *  Description:
 *  Paillier Homomorphic Operation against Group Element with Exponent in Range Zero Knoeledge Proof.
 * 
 *  Usage:
 *  Constructor and destructor for zkp_<...>_t don't set any values and handles only proof fields.
 *  When using <...>_prove, all public and secret fields of zkp_<...>_t needs to be already populated (externally).
 *  Calling <...>_prove sets only the proof fields.
 *  When using <...>_verify, all public and proof fields of zkp_<...>_t need to be already populated.
 *  Calling <...>_verify return 0/1 (fail/pass).
 * 
 */

#ifndef __CMP20_ECDSA_MPC_ZKP_OPERATION_VS_PAILLIER_H__
#define __CMP20_ECDSA_MPC_ZKP_OPERATION_VS_PAILLIER_H__

#include "zkp_common.h"

typedef struct
{ 
  uint64_t x_range_bytes;
  uint64_t y_range_bytes;
  scalar_t challenge_modulus;

  ring_pedersen_public_t *rped_pub;
  paillier_public_key_t *paillier_pub_0;      // Encrypted the public C
  paillier_public_key_t *paillier_pub_1;      // Encrypted the secret y

  scalar_t C;       // PAILLIER_MODULUS_BYTES * 2
  scalar_t D;       // PAILLIER_MODULUS_BYTES * 2
  scalar_t Y;       // PAILLIER_MODULUS_BYTES * 2
  scalar_t X;       // PAILLIER_MODULUS_BYTES * 2
} zkp_oper_paillier_commit_range_public_t;

typedef struct
{
    scalar_t x;       // x_range_bytes
    scalar_t y;       // y_range_bytes
    scalar_t rho;     // PAILLIER_MODULUS_BYTES
    scalar_t rho_x;   // PAILLIER_MODULUS_BYTES
    scalar_t rho_y;   // PAILLIER_MODULUS_BYTES
} zkp_oper_paillier_commit_range_secret_t;

typedef struct
{
  
  scalar_t A;       // PAILLIER_MODULUS_BYTES * 2
  scalar_t B_x;     // PAILLIER_MODULUS_BYTES * 2
  scalar_t B_y;     // PAILLIER_MODULUS_BYTES * 2
  scalar_t E;       // RING_PED_MODULUS_BYTES
  scalar_t F;       // RING_PED_MODULUS_BYTES
  scalar_t S;       // RING_PED_MODULUS_BYTES
  scalar_t T;       // RING_PED_MODULUS_BYTES
  scalar_t z_1;     // x_range_bytes + EPS_ZKP_SLACK_PARAMETER_BYTES
  scalar_t z_2;     // y_range_bytes + EPS_ZKP_SLACK_PARAMETER_BYTES
  scalar_t z_3;     // RING_PED_MODULUS_BYTES + x_range_bytes + EPS_ZKP_SLACK_PARAMETER_BYTES
  scalar_t z_4;     // RING_PED_MODULUS_BYTES + x_range_bytes + EPS_ZKP_SLACK_PARAMETER_BYTES
  scalar_t w;       // PAILLIER_MODULUS_BYTES
  scalar_t w_x;     // PAILLIER_MODULUS_BYTES
  scalar_t w_y;     // PAILLIER_MODULUS_BYTES
} zkp_oper_paillier_commit_range_proof_t;

// Zero Knowledge Proofs

zkp_oper_paillier_commit_range_proof_t*
     zkp_oper_paillier_commit_range_new              ();
void zkp_oper_paillier_commit_range_free             (zkp_oper_paillier_commit_range_proof_t *proof);
void zkp_oper_paillier_commit_range_prove            (zkp_oper_paillier_commit_range_proof_t *proof, const zkp_oper_paillier_commit_range_secret_t *secret, const zkp_oper_paillier_commit_range_public_t *public, const zkp_aux_info_t *aux);
int  zkp_oper_paillier_commit_range_verify           (const zkp_oper_paillier_commit_range_proof_t *proof, const zkp_oper_paillier_commit_range_public_t *public, const zkp_aux_info_t *aux);
void zkp_oper_paillier_commit_range_proof_to_bytes   (uint8_t **bytes, uint64_t *byte_len, const zkp_oper_paillier_commit_range_proof_t *proof, uint64_t x_range_bytes, uint64_t y_range_bytes, int move_to_end);
void zkp_oper_paillier_commit_range_proof_from_bytes (zkp_oper_paillier_commit_range_proof_t *proof, uint8_t **bytes, uint64_t *byte_len, uint64_t x_range_bytes, uint64_t y_range_bytes, const scalar_t N0, const scalar_t N1, int move_to_end);

#endif