diff --git a/cli.js b/cli.js
new file mode 100644
index 0000000..06c482d
--- /dev/null
+++ b/cli.js
@@ -0,0 +1,352 @@
+#!/usr/bin/env node
+
+/*
+ Copyright 2018 0KIMS association.
+
+ This file is part of jaz (Zero Knowledge Circuit Compiler).
+
+ jaz is a free software: you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ jaz is distributed in the hope that it will be useful, but WITHOUT
+ ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public
+ License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with jaz. If not, see
+
+setup command
+=============
+
+ snarkjs setup
+
+ Runs a setup for a circuit generating the proving and the verification key.
+
+ -c or --circuit
+
+ Filename of the compiled circuit file generated by circom.
+
+ Default: circuit.json
+
+ --pk or --provingkey
+
+ Output filename where the proving key will be stored.
+
+ Default: proving_key.json
+
+ --vk or --verificationkey
+
+ Output Filename where the verification key will be stored.
+
+ Default: verification_key.json
+
+calculate witness command
+=========================
+
+ snarkjs calculatewitness
+
+ Calculate the witness of a circuit given an input.
+
+ -c or --circuit
+
+ Filename of the compiled circuit file generated by circom.
+
+ Default: circuit.json
+
+ -i or --input
+
+ JSON file with the inputs of the circuit.
+
+ Default: input.json
+
+ Example of for a circuit with tow inputs a and b:
+
+ {"a": "22", "b": "33"}
+
+ -w or --witness
+
+ Output filename with the generated witness.
+
+ Default: witness.json
+
+generate a proof command
+========================
+
+ snarkjs proof
+
+ -w or --witness
+
+ Input filename used to calculate the proof.
+
+ Default: witness.json
+
+ --pk or --provingkey
+
+ Input filename with the proving key (generated during the setup).
+
+ Default: proving_key.json
+
+ -p or --proof
+
+ Output filenam with the zero knowlage proof.
+
+ Default: proof.json
+
+ --pub or --public
+
+ Output filename with the value of the public wires/signals.
+ This info will be needed to verify the proof.
+
+ Default: public.json
+
+verify command
+==============
+
+ snarkjs verify
+
+ The command returns "OK" if the proof is valid
+ and "INVALID" in case it is not a valid proof.
+
+ --vk or --verificationkey
+
+ Input Filename with the verification key (generated during the setup).
+
+ Default: verification_key.json
+
+ -p or --proof
+
+ Input filenam with the zero knowlage proof you want to verify
+
+ Default: proof.json
+
+ --pub or --public
+
+ Input filename with the public wires/signals.
+
+ Default: public.json
+
+generate solidity verifier command
+==================================
+
+ snarkjs generateverifier
+
+ Generates a solidity smart contract that verifies the zero knowlage proof.
+
+ --vk or --verificationkey
+
+ Input Filename with the verification key (generated during the setup).
+
+ Default: verification_key.json
+
+ -v or --verifier
+
+ Output file with a solidity smart contract that verifies a zero knowlage proof.
+
+ Default: verifier.sol
+
+generate call parameters
+========================
+
+ snarkjs generatecall
+
+ Outputs into the console the raw parameters to be used in 'verifyProof'
+ method of the solidity verifier.
+
+ -p or --proof
+
+ Input filenam with the zero knowlage proof you want to use
+
+ Default: proof.json
+
+ --pub or --public
+
+ Input filename with the public wires/signals.
+
+ Default: public.json
+
+
+ `)
+ .alias("c", "circuit")
+ .alias("pk", "provingkey")
+ .alias("vk", "verificationkey")
+ .alias("w", "witness")
+ .alias("p", "proof")
+ .alias("i", "input")
+ .alias("pub", "public")
+ .alias("v", "verifier")
+ .help("h")
+ .alias("h", "help")
+ .epilogue(`Copyright (C) 2018 0kims association
+ This program comes with ABSOLUTELY NO WARRANTY;
+ This is free software, and you are welcome to redistribute it
+ under certain conditions; see the COPYING file in the official
+ repo directory at https://github.com/iden3/circom `)
+ .argv;
+
+const circuitName = (argv.circuit) ? argv.circuit : "circuit.json";
+const provingKeyName = (argv.provingkey) ? argv.provingkey : "proving_key.json";
+const verificationKeyName = (argv.verificationkey) ? argv.verificationkey : "verification_key.json";
+const inputName = (argv.input) ? argv.input : "input.json";
+const witnessName = (argv.witness) ? argv.witness : "witness.json";
+const proofName = (argv.proof) ? argv.proof : "proof.json";
+const publicName = (argv.public) ? argv.public : "public.json";
+const verifierName = (argv.public) ? argv.public : "verifier.sol";
+
+function p256(n) {
+ let nstr = n.toString(16);
+ while (nstr.length < 64) nstr = "0"+nstr;
+ nstr = `"0x${nstr}"`;
+ return nstr;
+}
+
+try {
+ if (argv._[0].toUpperCase() == "SETUP") {
+ const cirDef = JSON.parse(fs.readFileSync(circuitName, "utf8"));
+ const cir = new zkSnark.Circuit(cirDef);
+ const setup = zkSnark.setup(cir);
+
+ fs.writeFileSync(provingKeyName, JSON.stringify(stringifyBigInts(setup.vk_proof), null, 1), "utf-8");
+ fs.writeFileSync(verificationKeyName, JSON.stringify(stringifyBigInts(setup.vk_verifier), null, 1), "utf-8");
+ process.exit(0);
+ } else if (argv._[0].toUpperCase() == "CALCULATEWITNESS") {
+ const cirDef = JSON.parse(fs.readFileSync(circuitName, "utf8"));
+ const cir = new zkSnark.Circuit(cirDef);
+ const input = unstringifyBigInts(JSON.parse(fs.readFileSync(inputName, "utf8")));
+
+ const witness = cir.calculateWitness(input);
+
+ fs.writeFileSync(witnessName, JSON.stringify(stringifyBigInts(witness), null, 1), "utf-8");
+ process.exit(0);
+ } else if (argv._[0].toUpperCase() == "PROOF") {
+ const witness = unstringifyBigInts(JSON.parse(fs.readFileSync(witnessName, "utf8")));
+ const provingKey = unstringifyBigInts(JSON.parse(fs.readFileSync(provingKeyName, "utf8")));
+
+ const {proof, publicSignals} = zkSnark.genProof(provingKey, witness);
+
+ fs.writeFileSync(proofName, JSON.stringify(stringifyBigInts(proof), null, 1), "utf-8");
+ fs.writeFileSync(publicName, JSON.stringify(stringifyBigInts(publicSignals), null, 1), "utf-8");
+ process.exit(0);
+ } else if (argv._[0].toUpperCase() == "VERIFY") {
+ const public = unstringifyBigInts(JSON.parse(fs.readFileSync(publicName, "utf8")));
+ const verificationKey = unstringifyBigInts(JSON.parse(fs.readFileSync(verificationKeyName, "utf8")));
+ const proof = unstringifyBigInts(JSON.parse(fs.readFileSync(proofName, "utf8")));
+ const isValid = zkSnark.isValid(verificationKey, proof, public);
+
+ if (isValid) {
+ console.log("OK");
+ process.exit(0);
+ } else {
+ console.log("INVALID");
+ process.exit(1);
+ }
+ } else if (argv._[0].toUpperCase() == "GENERATEVERIFIER") {
+
+ const verificationKey = unstringifyBigInts(JSON.parse(fs.readFileSync(verificationKeyName, "utf8")));
+ let template = fs.readFileSync(path.join( __dirname, "templates", "verifier.sol"), "utf-8");
+
+ const vka_str = `[${verificationKey.vk_a[0][1].toString()},`+
+ `${verificationKey.vk_a[0][0].toString()}], `+
+ `[${verificationKey.vk_a[1][1].toString()},` +
+ `${verificationKey.vk_a[1][0].toString()}]`;
+ template = template.replace("<%vk_a%>", vka_str);
+
+ const vkb_str = `${verificationKey.vk_b[0].toString()},`+
+ `${verificationKey.vk_b[1].toString()}`;
+ template = template.replace("<%vk_b%>", vkb_str);
+
+ const vkc_str = `[${verificationKey.vk_c[0][1].toString()},`+
+ `${verificationKey.vk_c[0][0].toString()}], `+
+ `[${verificationKey.vk_c[1][1].toString()},` +
+ `${verificationKey.vk_c[1][0].toString()}]`;
+ template = template.replace("<%vk_c%>", vkc_str);
+
+ const vkg_str = `[${verificationKey.vk_g[0][1].toString()},`+
+ `${verificationKey.vk_g[0][0].toString()}], `+
+ `[${verificationKey.vk_g[1][1].toString()},` +
+ `${verificationKey.vk_g[1][0].toString()}]`;
+ template = template.replace("<%vk_g%>", vkg_str);
+
+ const vkgb1_str = `${verificationKey.vk_gb_1[0].toString()},`+
+ `${verificationKey.vk_gb_1[1].toString()}`;
+ template = template.replace("<%vk_gb1%>", vkgb1_str);
+
+ const vkgb2_str = `[${verificationKey.vk_gb_2[0][1].toString()},`+
+ `${verificationKey.vk_gb_2[0][0].toString()}], `+
+ `[${verificationKey.vk_gb_2[1][1].toString()},` +
+ `${verificationKey.vk_gb_2[1][0].toString()}]`;
+ template = template.replace("<%vk_gb2%>", vkgb2_str);
+
+ const vkz_str = `[${verificationKey.vk_z[0][1].toString()},`+
+ `${verificationKey.vk_z[0][0].toString()}], `+
+ `[${verificationKey.vk_z[1][1].toString()},` +
+ `${verificationKey.vk_z[1][0].toString()}]`;
+ template = template.replace("<%vk_z%>", vkz_str);
+
+ // The points
+
+ template = template.replace("<%vk_input_length%>", (verificationKey.A.length-1).toString());
+ template = template.replace("<%vk_ic_length%>", verificationKey.A.length.toString());
+ let vi = "";
+ for (let i=0; i", vi);
+
+
+ fs.writeFileSync(verifierName, template, "utf-8");
+ process.exit(0);
+
+ } else if (argv._[0].toUpperCase() == "GENERATECALL") {
+
+ const public = unstringifyBigInts(JSON.parse(fs.readFileSync(publicName, "utf8")));
+ const proof = unstringifyBigInts(JSON.parse(fs.readFileSync(proofName, "utf8")));
+
+ inputs = "";
+ for (let i=0; i {
if (this.notInitSignals[c] == 0) this.triggerComponent(c);
});
- return value;
+ return this.witness[sId];
}
setVar(name, sels, value) {
diff --git a/src/circuit.js b/src/circuit.js
index eda9671..4e6d877 100644
--- a/src/circuit.js
+++ b/src/circuit.js
@@ -59,6 +59,58 @@ module.exports = class Circuit {
return calculateWitness(this, input, log);
}
+ checkWitness(w) {
+ const evalLC = (lc, w) => {
+ let acc = bigInt(0);
+ for (let k in lc) {
+ acc= acc.add(bigInt(w[k]).mul(bigInt(lc[k]))).mod(__P__);
+ }
+ return acc;
+ }
+
+ const checkConstraint = (ct, w) => {
+ const a=evalLC(ct[0],w);
+ const b=evalLC(ct[1],w);
+ const c=evalLC(ct[2],w);
+ const res = (a.mul(b).sub(c)).affine(__P__);
+ if (!res.isZero()) return false;
+ return true;
+ }
+
+
+ for (let i=0; i {
+ let S = "";
+ for (let k in lc) {
+ const name = this.signals[k].names[0];
+ let v = bigInt(lc[k]);
+ let vs;
+ if (!v.lesserOrEquals(__P__.shr(bigInt(1)))) {
+ v = __P__.sub(v);
+ vs = "-"+v.toString();
+ } else {
+ vs = "+"+v.toString();
+ }
+
+ S= S + " " + vs + name;
+ }
+ return S;
+ }
+ const S = `[ ${lc2str(c[0])} ] * [ ${lc2str(c[1])} ] - [ ${lc2str(c[2])} ]`;
+ console.log(S);
+ }
+
getSignalIdx(name) {
if (typeof(this.signalName2Idx[name]) != "undefined") return this.signalName2Idx[name];
if (!isNaN(name)) return Number(name);
diff --git a/src/gcurve.js b/src/gcurve.js
index ab5772b..39768a2 100644
--- a/src/gcurve.js
+++ b/src/gcurve.js
@@ -3,17 +3,17 @@
This file is part of zksnark JavaScript library.
- zksnark JavaScript library is a free software: you can redistribute it and/or
- modify it under the terms of the GNU General Public License as published by the
- Free Software Foundation, either version 3 of the License, or (at your option)
+ zksnark JavaScript library is a free software: you can redistribute it and/or
+ modify it under the terms of the GNU General Public License as published by the
+ Free Software Foundation, either version 3 of the License, or (at your option)
any later version.
zksnark JavaScript library is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
- or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
more details.
- You should have received a copy of the GNU General Public License along with
+ You should have received a copy of the GNU General Public License along with
zksnark JavaScript library. If not, see