You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
101 lines
3.2 KiB
101 lines
3.2 KiB
const chai = require("chai");
|
|
const path = require("path");
|
|
const wasm_tester = require("circom_tester").wasm;
|
|
const Scalar = require("ffjavascript").Scalar;
|
|
const buildBabyjub = require("circomlibjs").buildBabyjub;
|
|
|
|
const assert = chai.assert;
|
|
|
|
describe("Montgomery test", function () {
|
|
let babyJub;
|
|
let Fr;
|
|
let circuitE2M;
|
|
let circuitM2E;
|
|
let circuitMAdd;
|
|
let circuitMDouble;
|
|
|
|
let g;
|
|
|
|
let mg, mg2, g2, g3, mg3;
|
|
|
|
this.timeout(100000);
|
|
|
|
|
|
before( async() => {
|
|
babyJub = await buildBabyjub();
|
|
Fr = babyJub.F;
|
|
g = [
|
|
Fr.e("5299619240641551281634865583518297030282874472190772894086521144482721001553"),
|
|
Fr.e("16950150798460657717958625567821834550301663161624707787222815936182638968203")
|
|
];
|
|
|
|
circuitE2M = await wasm_tester(path.join(__dirname, "circuits", "edwards2montgomery.circom"));
|
|
await circuitE2M.loadSymbols();
|
|
circuitM2E = await wasm_tester(path.join(__dirname, "circuits", "montgomery2edwards.circom"));
|
|
await circuitM2E.loadSymbols();
|
|
circuitMAdd = await wasm_tester(path.join(__dirname, "circuits", "montgomeryadd.circom"));
|
|
await circuitMAdd.loadSymbols();
|
|
circuitMDouble = await wasm_tester(path.join(__dirname, "circuits", "montgomerydouble.circom"));
|
|
await circuitMDouble.loadSymbols();
|
|
});
|
|
|
|
it("Convert Edwards to Montgomery and back again", async () => {
|
|
let w, xout, yout;
|
|
|
|
w = await circuitE2M.calculateWitness({ in: [Fr.toObject(g[0]), Fr.toObject(g[1])]}, true);
|
|
|
|
xout = w[circuitE2M.symbols["main.out[0]"].varIdx];
|
|
yout = w[circuitE2M.symbols["main.out[1]"].varIdx];
|
|
|
|
mg = [xout, yout];
|
|
|
|
w = await circuitM2E.calculateWitness({ in: [xout, yout]}, true);
|
|
|
|
xout = w[circuitM2E.symbols["main.out[0]"].varIdx];
|
|
yout = w[circuitM2E.symbols["main.out[1]"].varIdx];
|
|
|
|
assert(Fr.eq(Fr.e(xout), g[0]));
|
|
assert(Fr.eq(Fr.e(yout), g[1]));
|
|
});
|
|
it("Should double a point", async () => {
|
|
let w, xout, yout;
|
|
|
|
g2 = babyJub.addPoint(g,g);
|
|
|
|
w = await circuitMDouble.calculateWitness({ in: mg}, true);
|
|
|
|
xout = w[circuitE2M.symbols["main.out[0]"].varIdx];
|
|
yout = w[circuitE2M.symbols["main.out[1]"].varIdx];
|
|
|
|
mg2 = [xout, yout];
|
|
|
|
w = await circuitM2E.calculateWitness({ in: mg2}, true);
|
|
|
|
xout = w[circuitM2E.symbols["main.out[0]"].varIdx];
|
|
yout = w[circuitM2E.symbols["main.out[1]"].varIdx];
|
|
|
|
|
|
assert(Fr.eq(Fr.e(xout), g2[0]));
|
|
assert(Fr.eq(Fr.e(yout), g2[1]));
|
|
});
|
|
it("Should add a point", async () => {
|
|
let w, xout, yout;
|
|
|
|
g3 = babyJub.addPoint(g,g2);
|
|
|
|
w = await circuitMAdd.calculateWitness({ in1: mg, in2: mg2}, true);
|
|
|
|
xout = w[circuitMAdd.symbols["main.out[0]"].varIdx];
|
|
yout = w[circuitMAdd.symbols["main.out[1]"].varIdx];
|
|
|
|
mg3 = [xout, yout];
|
|
|
|
w = await circuitM2E.calculateWitness({ in: mg3}, true);
|
|
|
|
xout = w[circuitM2E.symbols["main.out[0]"].varIdx];
|
|
yout = w[circuitM2E.symbols["main.out[1]"].varIdx];
|
|
|
|
assert(Fr.eq(Fr.e(xout), g3[0]));
|
|
assert(Fr.eq(Fr.e(yout), g3[1]));
|
|
});
|
|
});
|