1package gocircomprover
 2
 3import (
 4	"fmt"
 5	"math/big"
 6
 7	"github.com/ethereum/go-ethereum/crypto/bn256"
 8)
 9
10// Vk is the Verification Key data structure
11type Vk struct {
12	Alpha *bn256.G1
13	Beta  *bn256.G2
14	Gamma *bn256.G2
15	Delta *bn256.G2
16	IC    []*bn256.G1
17}
18
19func Verify(vk *Vk, proof *Proof, inputs []*big.Int) bool {
20	if len(inputs)+1 != len(vk.IC) {
21		fmt.Println("len(inputs)+1 != len(vk.IC)")
22		return false
23	}
24	vkX := new(bn256.G1).ScalarBaseMult(big.NewInt(0))
25	for i := 0; i < len(inputs); i++ {
26		// check input inside field
27		if inputs[0].Cmp(R) != -1 {
28			return false
29		}
30		vkX = new(bn256.G1).Add(vkX, new(bn256.G1).ScalarMult(vk.IC[i+1], inputs[i]))
31	}
32	vkX = new(bn256.G1).Add(vkX, vk.IC[0])
33
34	g1 := []*bn256.G1{proof.A, vk.Alpha.Neg(vk.Alpha), vkX.Neg(vkX), proof.C.Neg(proof.C)}
35	g2 := []*bn256.G2{proof.B, vk.Beta, vk.Gamma, vk.Delta}
36	return bn256.PairingCheck(g1, g2)
37}