Jordi Baylina
4 years ago
No known key found for this signature in database
GPG Key ID: 7480C80C1BE43112
18 changed files with 3710 additions and 370 deletions
Split View
Diff Options
-
+19 -19circuits/README.md
-
+1 -1circuits/eddsaposeidon.circom
-
+124 -145circuits/poseidon.circom
-
+2 -2circuits/smt/smthash_poseidon.circom
-
+2 -4src/eddsa.js
-
+11 -0src/evmasm.js
-
+33 -105src/poseidon.js
-
+3449 -0src/poseidon_constants.json
-
+32 -26src/poseidon_gencontract.js
-
+0 -16src/poseidon_printconstants.js
-
+1 -1src/poseidon_printcontract.js
-
+10 -5src/smt_hashes_poseidon.js
-
+4 -2src/smt_memdb.js
-
+1 -1test/circuits/poseidon3_test.circom
-
+1 -1test/circuits/poseidon6_test.circom
-
+2 -2test/eddsa_js.js
-
+10 -28test/poseidoncircuit.js
-
+8 -12test/poseidoncontract.js
+ 124
- 145
circuits/poseidon.circom
File diff suppressed because it is too large
View File
@ -1,121 +1,49 @@ |
|||
const Scalar = require("ffjavascript").Scalar; |
|||
const blake2b = require("blake2b"); |
|||
const assert = require("assert"); |
|||
const Scalar = require("ffjavascript").Scalar; |
|||
const ZqField = require("ffjavascript").ZqField; |
|||
const utils = require("ffjavascript").utils; |
|||
const { unstringifyBigInts } = require("ffjavascript").utils; |
|||
|
|||
// Prime 0x30644e72e131a029b85045b68181585d2833e84879b9709143e1f593f0000001
|
|||
const F = new ZqField(Scalar.fromString("21888242871839275222246405745257275088548364400416034343698204186575808495617")); |
|||
exports.F = F; |
|||
|
|||
const SEED = "poseidon"; |
|||
const NROUNDSF = 8; |
|||
const NROUNDSP = 57; |
|||
const T = 6; |
|||
// Parameters are generated by a reference script https://extgit.iaik.tugraz.at/krypto/hadeshash/-/blob/master/code/generate_parameters_grain.sage
|
|||
// Used like so: sage generate_parameters_grain.sage 1 0 254 2 8 56 0x30644e72e131a029b85045b68181585d2833e84879b9709143e1f593f0000001
|
|||
const { C, M } = unstringifyBigInts(require("./poseidon_constants.json")); |
|||
|
|||
function getPseudoRandom(seed, n) { |
|||
const res = []; |
|||
let input = Buffer.from(seed); |
|||
let h = blake2b(32).update(input).digest(); |
|||
while (res.length<n) { |
|||
const n = F.normalize(utils.leBuff2int(Buffer.from(h))); |
|||
res.push(n); |
|||
h = blake2b(32).update(h).digest(); |
|||
} |
|||
// Using recommended parameters from whitepaper https://eprint.iacr.org/2019/458.pdf (table 2, table 8)
|
|||
// Generated by https://extgit.iaik.tugraz.at/krypto/hadeshash/-/blob/master/code/calc_round_numbers.py
|
|||
// And rounded up to nearest integer that divides by t
|
|||
const N_ROUNDS_F = 8; |
|||
const N_ROUNDS_P = [56, 57, 56, 60, 60, 63, 64, 63]; |
|||
|
|||
return res; |
|||
} |
|||
const pow5 = a => F.mul(a, F.square(F.square(a, a))); |
|||
|
|||
function allDifferent(v) { |
|||
for (let i=0; i<v.length; i++) { |
|||
if (F.isZero(v[i])) return false; |
|||
for (let j=i+1; j<v.length; j++) { |
|||
if (F.eq(v[i],v[j])) return false; |
|||
} |
|||
} |
|||
return true; |
|||
} |
|||
|
|||
exports.getMatrix = (t, seed, nRounds) => { |
|||
if (typeof seed === "undefined") seed = SEED; |
|||
if (typeof nRounds === "undefined") nRounds = NROUNDSF + NROUNDSP; |
|||
if (typeof t === "undefined") t = T; |
|||
assert(t<=6); // Force the same matrix for all.
|
|||
t=6; |
|||
let nonce = "0000"; |
|||
let cmatrix = getPseudoRandom(seed+"_matrix_"+nonce, t*2); |
|||
while (!allDifferent(cmatrix)) { |
|||
nonce = (Number(nonce)+1)+""; |
|||
while(nonce.length<4) nonce = "0"+nonce; |
|||
cmatrix = getPseudoRandom(seed+"_matrix_"+nonce, t*2); |
|||
} |
|||
|
|||
const M = new Array(t); |
|||
for (let i=0; i<t; i++) { |
|||
M[i] = new Array(t); |
|||
for (let j=0; j<t; j++) { |
|||
M[i][j] = F.normalize(F.inv(F.sub(cmatrix[i], cmatrix[t+j]))); |
|||
} |
|||
} |
|||
return M; |
|||
}; |
|||
function poseidon(inputs) { |
|||
assert(inputs.length > 0); |
|||
assert(inputs.length < N_ROUNDS_P.length - 1); |
|||
|
|||
exports.getConstants = (t, seed, nRounds) => { |
|||
if (typeof seed === "undefined") seed = SEED; |
|||
if (typeof nRounds === "undefined") nRounds = NROUNDSF + NROUNDSP; |
|||
if (typeof t === "undefined") t = T; |
|||
const cts = getPseudoRandom(seed+"_constants", nRounds); |
|||
return cts; |
|||
}; |
|||
const t = inputs.length + 1; |
|||
const nRoundsF = N_ROUNDS_F; |
|||
const nRoundsP = N_ROUNDS_P[t - 2]; |
|||
|
|||
function ark(state, c) { |
|||
for (let j=0; j<state.length; j++ ) { |
|||
state[j] = F.add(state[j], c); |
|||
} |
|||
} |
|||
let state = [...inputs.map(a => F.e(a)), F.zero]; |
|||
for (let r = 0; r < nRoundsF + nRoundsP; r++) { |
|||
state = state.map((a, i) => F.add(a, C[t - 2][r * t + i])); |
|||
|
|||
function sigma(a) { |
|||
return F.mul(a, F.square(F.square(a,a))); |
|||
} |
|||
if (r < nRoundsF / 2 || r >= nRoundsF / 2 + nRoundsP) { |
|||
state = state.map(a => pow5(a)); |
|||
} else { |
|||
state[0] = pow5(state[0]); |
|||
} |
|||
|
|||
function mix(state, M) { |
|||
const newState = new Array(state.length); |
|||
for (let i=0; i<state.length; i++) { |
|||
newState[i] = F.zero; |
|||
for (let j=0; j<state.length; j++) { |
|||
newState[i] = F.add(newState[i], F.mul(M[i][j], state[j]) ); |
|||
// no matrix multiplication in the last round
|
|||
if (r < nRoundsF + nRoundsP - 1) { |
|||
state = state.map((_, i) => |
|||
state.reduce((acc, a, j) => F.add(acc, F.mul(M[t - 2][j][i], a)), F.zero) |
|||
); |
|||
} |
|||
} |
|||
for (let i=0; i<state.length; i++) state[i] = newState[i]; |
|||
return F.normalize(state[0]); |
|||
} |
|||
|
|||
exports.createHash = (t, nRoundsF, nRoundsP, seed) => { |
|||
|
|||
if (typeof seed === "undefined") seed = SEED; |
|||
if (typeof nRoundsF === "undefined") nRoundsF = NROUNDSF; |
|||
if (typeof nRoundsP === "undefined") nRoundsP = NROUNDSP; |
|||
if (typeof t === "undefined") t = T; |
|||
|
|||
assert(nRoundsF % 2 == 0); |
|||
const C = exports.getConstants(t, seed, nRoundsF + nRoundsP); |
|||
const M = exports.getMatrix(t, seed, nRoundsF + nRoundsP); |
|||
return function(inputs) { |
|||
let state = []; |
|||
assert(inputs.length <= t); |
|||
assert(inputs.length > 0); |
|||
for (let i=0; i<inputs.length; i++) state[i] = F.e(inputs[i]); |
|||
for (let i=inputs.length; i<t; i++) state[i] = F.zero; |
|||
|
|||
for (let i=0; i< nRoundsF + nRoundsP; i++) { |
|||
ark(state, C[i]); |
|||
if ((i<nRoundsF/2) || (i >= nRoundsF/2 + nRoundsP)) { |
|||
for (let j=0; j<t; j++) state[j] = sigma(state[j]); |
|||
} else { |
|||
state[0] = sigma(state[0]); |
|||
} |
|||
mix(state, M); |
|||
} |
|||
return F.normalize(state[0]); |
|||
}; |
|||
}; |
|||
|
|||
|
|||
module.exports = poseidon; |
|||
+ 3449
- 0
src/poseidon_constants.json
File diff suppressed because it is too large
View File
@ -1,16 +0,0 @@ |
|||
|
|||
|
|||
const Poseidon = require("./poseidon.js"); |
|||
|
|||
const C = Poseidon.getConstants(); |
|||
|
|||
let S = "[\n"; |
|||
|
|||
for (let i=0; i<C.length; i++) { |
|||
S = S + " " + C[i].toString(); |
|||
if (i<C.length-1) S = S + ","; |
|||
S = S + "\n"; |
|||
} |
|||
S=S+ "]\n"; |
|||
|
|||
console.log(S); |
|||
@ -1,5 +1,5 @@ |
|||
const poseidonGenContract = require("./poseidon_gencontract"); |
|||
|
|||
|
|||
console.log(poseidonGenContract.createCode(6, 8, 57)); |
|||
console.log(poseidonGenContract.createCode(5)); |
|||
|
|||
@ -1,13 +1,18 @@ |
|||
const Poseidon = require("./poseidon"); |
|||
|
|||
const hash = Poseidon.createHash(6, 8, 57); |
|||
const ZqField = require("ffjavascript").ZqField; |
|||
const Scalar = require("ffjavascript").Scalar; |
|||
|
|||
const poseidon = require("./poseidon"); |
|||
|
|||
const F = new ZqField(Scalar.fromString("21888242871839275222246405745257275088548364400416034343698204186575808495617")); |
|||
|
|||
|
|||
exports.hash0 = function (left, right) { |
|||
return hash([left, right]); |
|||
return poseidon([left, right]); |
|||
}; |
|||
|
|||
exports.hash1 = function(key, value) { |
|||
return hash([key, value, Poseidon.F.one]); |
|||
return poseidon([key, value, F.one]); |
|||
}; |
|||
|
|||
exports.F = Poseidon.F; |
|||
exports.F = F; |
|||
@ -1,3 +1,3 @@ |
|||
include "../../circuits/poseidon.circom" |
|||
|
|||
component main = Poseidon(2, 3, 8, 57); |
|||
component main = Poseidon(2); |
|||
@ -1,3 +1,3 @@ |
|||
include "../../circuits/poseidon.circom" |
|||
|
|||
component main = Poseidon(2, 6, 8, 57); |
|||
component main = Poseidon(5); |
|||