1use ark_algebra_test_templates::*;
  2use ark_ec::{AffineRepr, CurveGroup, PrimeGroup};
  3use ark_ff::{fields::Field, One, UniformRand, Zero};
  4use ark_serialize::{CanonicalDeserialize, CanonicalSerialize, Compress, Validate};
  5use ark_std::{rand::Rng, test_rng, vec};
  6
  7use crate::{Bls12_381, Fq, Fq2, Fr, G1Affine, G1Projective, G2Affine, G2Projective};
  8
  9test_group!(g1; G1Projective; sw);
 10test_group!(g2; G2Projective; sw);
 11test_group!(pairing_output; ark_ec::pairing::PairingOutput<Bls12_381>; msm);
 12test_pairing!(pairing; crate::Bls12_381);
 13test_h2c!(g1_h2c; "./src/curves/tests"; "BLS12381G1"; crate::g1::Config; crate::Fq; crate::Fq; 1);
 14test_h2c!(g2_hc2; "./src/curves/tests"; "BLS12381G2"; crate::g2::Config; crate::Fq2; crate::Fq; 2);
 15
 16#[test]
 17fn test_g1_endomorphism_beta() {
 18    assert!(crate::g1::BETA.pow(&[3u64]).is_one());
 19}
 20
 21#[test]
 22fn test_g1_subgroup_membership_via_endomorphism() {
 23    let mut rng = test_rng();
 24    let generator = G1Projective::rand(&mut rng).into_affine();
 25    assert!(generator.is_in_correct_subgroup_assuming_on_curve());
 26}
 27
 28#[test]
 29fn test_g1_subgroup_non_membership_via_endomorphism() {
 30    let mut rng = test_rng();
 31    loop {
 32        let x = Fq::rand(&mut rng);
 33        let greatest = rng.gen();
 34
 35        if let Some(p) = G1Affine::get_point_from_x_unchecked(x, greatest) {
 36            if !p.mul_bigint(Fr::characteristic()).is_zero() {
 37                assert!(!p.is_in_correct_subgroup_assuming_on_curve());
 38                return;
 39            }
 40        }
 41    }
 42}
 43
 44#[test]
 45fn test_g2_subgroup_membership_via_endomorphism() {
 46    let mut rng = test_rng();
 47    let generator = G2Projective::rand(&mut rng).into_affine();
 48    assert!(generator.is_in_correct_subgroup_assuming_on_curve());
 49}
 50
 51#[test]
 52fn test_g2_subgroup_non_membership_via_endomorphism() {
 53    let mut rng = test_rng();
 54    loop {
 55        let x = Fq2::rand(&mut rng);
 56        let greatest = rng.gen();
 57
 58        if let Some(p) = G2Affine::get_point_from_x_unchecked(x, greatest) {
 59            if !p.mul_bigint(Fr::characteristic()).is_zero() {
 60                assert!(!p.is_in_correct_subgroup_assuming_on_curve());
 61                return;
 62            }
 63        }
 64    }
 65}
 66
 67// Test vectors and macro adapted from https://github.com/zkcrypto/bls12_381/blob/e224ad4ea1babfc582ccd751c2bf128611d10936/src/tests/mod.rs
 68macro_rules! test_vectors {
 69    ($projective:ident, $affine:ident, $compress:expr, $expected:ident) => {
 70        let mut e = $projective::zero();
 71
 72        let mut v = vec![];
 73        {
 74            let mut expected = $expected;
 75            for _ in 0..1000 {
 76                let e_affine = $affine::from(e);
 77                let mut serialized = vec![0u8; e.serialized_size($compress)];
 78                e_affine
 79                    .serialize_with_mode(serialized.as_mut_slice(), $compress)
 80                    .unwrap();
 81                v.extend_from_slice(&serialized[..]);
 82
 83                let mut decoded = serialized;
 84                let len_of_encoding = decoded.len();
 85                (&mut decoded[..]).copy_from_slice(&expected[0..len_of_encoding]);
 86                expected = &expected[len_of_encoding..];
 87                let decoded =
 88                    $affine::deserialize_with_mode(&decoded[..], $compress, Validate::Yes).unwrap();
 89                assert_eq!(e_affine, decoded);
 90
 91                e += &$projective::generator();
 92            }
 93        }
 94
 95        assert_eq!(&v[..], $expected);
 96    };
 97}
 98
 99#[test]
100fn g1_compressed_valid_test_vectors() {
101    let bytes: &'static [u8] = include_bytes!("g1_compressed_valid_test_vectors.dat");
102    test_vectors!(G1Projective, G1Affine, Compress::Yes, bytes);
103}
104
105#[test]
106fn g1_uncompressed_valid_test_vectors() {
107    let bytes: &'static [u8] = include_bytes!("g1_uncompressed_valid_test_vectors.dat");
108    test_vectors!(G1Projective, G1Affine, Compress::No, bytes);
109}
110
111#[test]
112fn g2_compressed_valid_test_vectors() {
113    let bytes: &'static [u8] = include_bytes!("g2_compressed_valid_test_vectors.dat");
114    test_vectors!(G2Projective, G2Affine, Compress::Yes, bytes);
115}
116
117#[test]
118fn g2_uncompressed_valid_test_vectors() {
119    let bytes: &'static [u8] = include_bytes!("g2_uncompressed_valid_test_vectors.dat");
120    test_vectors!(G2Projective, G2Affine, Compress::No, bytes);
121}