You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
110 lines
3.7 KiB
110 lines
3.7 KiB
/*
|
|
|
|
# deposit.circom
|
|
|
|
+----------+ +----------+
|
|
PUB_nullifier+------>+ | | |
|
|
| | | SMT |
|
|
PUB_coinCode+------->+ | | Poseidon +<------+PUB_rootOld
|
|
| Poseidon +-+----------->+ Verifier |
|
|
PUB_amount+--------->+ | | | Non |
|
|
| | | | Existance+<------+PRI_siblings
|
|
PRI_secret+--------->+ | | | | +
|
|
+----------+ | +----------+ |
|
|
| |
|
|
| |
|
|
| +----------+ |
|
|
| | | |
|
|
| | | |
|
|
+----+ | | SMT +<---------+
|
|
PUB_commitment+----> == +<--------+----------->+ Poseidon |
|
|
+----+ | Verifier |
|
|
| +<------+PUB_rootNew
|
|
| |
|
|
+----------+
|
|
|
|
|
|
*/
|
|
|
|
include "../node_modules/circomlib/circuits/comparators.circom";
|
|
include "../node_modules/circomlib/circuits/poseidon.circom";
|
|
include "../node_modules/circomlib/circuits/smt/smtverifier.circom";
|
|
|
|
template Deposit(nLevels) {
|
|
signal input coinCode;
|
|
signal input amount;
|
|
signal private input secret;
|
|
signal private input nullifier;
|
|
signal private input oldKey;
|
|
signal private input oldValue;
|
|
signal private input siblingsOld[nLevels];
|
|
signal private input siblingsNew[nLevels];
|
|
signal input rootOld;
|
|
signal input rootNew;
|
|
signal input commitment;
|
|
signal input key;
|
|
|
|
component hash = Poseidon(4, 6, 8, 57);
|
|
hash.inputs[0] <== coinCode;
|
|
hash.inputs[1] <== amount;
|
|
hash.inputs[2] <== secret;
|
|
hash.inputs[3] <== nullifier; // nullifier
|
|
|
|
component comCheck = IsEqual();
|
|
comCheck.in[0] <== hash.out;
|
|
comCheck.in[1] <== commitment;
|
|
comCheck.out === 1;
|
|
|
|
// TODO instead of 2 siblings input, get siblingsOld from
|
|
// siblingsNew[len-1] both siblingsOld & siblingsNew have same values
|
|
// except for one, can be merged into one, to ensure that the circuit
|
|
// checks that the leaf non existing under rootOld is in the same
|
|
// position than the check that the leaf exists under the rootNew
|
|
|
|
// check that nLevels-1 siblings match from siblingsOld & siblingsNew
|
|
component siblEq[nLevels];
|
|
signal count[nLevels];
|
|
for (var i=0; i<nLevels; i++) {
|
|
siblEq[i] = IsEqual();
|
|
siblEq[i].in[0] <== siblingsOld[i];
|
|
siblEq[i].in[1] <== siblingsNew[i];
|
|
if (i==0) {
|
|
count[0] <== siblEq[i].out;
|
|
} else {
|
|
count[i] <== siblEq[i].out + count[i-1];
|
|
}
|
|
}
|
|
component countCheck = IsEqual();
|
|
countCheck.in[0] <== count[nLevels-1];
|
|
countCheck.in[1] <== nLevels-1;
|
|
countCheck.out === 1;
|
|
|
|
component smtOld = SMTVerifier(nLevels);
|
|
smtOld.enabled <== 1;
|
|
smtOld.fnc <== 1;
|
|
smtOld.root <== rootOld;
|
|
for (var i=0; i<nLevels; i++) {
|
|
smtOld.siblings[i] <== siblingsOld[i];
|
|
}
|
|
/* smtOld.oldKey <== 1; */
|
|
smtOld.oldKey <== oldKey;
|
|
smtOld.oldValue <== oldValue;
|
|
smtOld.isOld0 <== 0;
|
|
smtOld.key <== key;
|
|
smtOld.value <== hash.out;
|
|
|
|
component smtNew = SMTVerifier(nLevels);
|
|
smtNew.enabled <== 1;
|
|
smtNew.fnc <== 0;
|
|
smtNew.root <== rootNew;
|
|
for (var i=0; i<nLevels; i++) {
|
|
smtNew.siblings[i] <== siblingsNew[i];
|
|
}
|
|
smtNew.oldKey <== 0;
|
|
smtNew.oldValue <== 0;
|
|
smtNew.isOld0 <== 0;
|
|
smtNew.key <== key;
|
|
smtNew.value <== hash.out;
|
|
}
|
|
|
|
component main = Deposit(17); // 16 real levels (due circom leaf protection)
|