1package babyjub
  2
  3import (
  4	"crypto/rand"
  5	"encoding/hex"
  6	"fmt"
  7	"math/big"
  8	"testing"
  9
 10	"github.com/iden3/go-iden3-crypto/constants"
 11	"github.com/iden3/go-iden3-crypto/utils"
 12	"github.com/stretchr/testify/assert"
 13)
 14
 15func genInputs() (*PrivateKey, *big.Int) {
 16	k := NewRandPrivKey()
 17	fmt.Println("k", hex.EncodeToString(k[:]))
 18
 19	msgBuf := [32]byte{}
 20	rand.Read(msgBuf[:])
 21	msg := utils.SetBigIntFromLEBytes(new(big.Int), msgBuf[:])
 22	msg.Mod(msg, constants.Q)
 23	fmt.Println("msg", msg)
 24
 25	return &k, msg
 26}
 27
 28func TestPublicKey(t *testing.T) {
 29	var k PrivateKey
 30	for i := 0; i < 256; i++ {
 31		hex.Decode(k[:], []byte{byte(i)})
 32	}
 33	pk := k.Public()
 34	assert.True(t, pk.X.Cmp(constants.Q) == -1)
 35	assert.True(t, pk.Y.Cmp(constants.Q) == -1)
 36}
 37
 38func TestSignVerifyMimc7(t *testing.T) {
 39	var k PrivateKey
 40	hex.Decode(k[:], []byte("0001020304050607080900010203040506070809000102030405060708090001"))
 41	msgBuf, err := hex.DecodeString("00010203040506070809")
 42	if err != nil {
 43		panic(err)
 44	}
 45	msg := utils.SetBigIntFromLEBytes(new(big.Int), msgBuf)
 46
 47	pk := k.Public()
 48	assert.Equal(t,
 49		"13277427435165878497778222415993513565335242147425444199013288855685581939618",
 50		pk.X.String())
 51	assert.Equal(t,
 52		"13622229784656158136036771217484571176836296686641868549125388198837476602820",
 53		pk.Y.String())
 54
 55	sig := k.SignMimc7(msg)
 56	assert.Equal(t,
 57		"11384336176656855268977457483345535180380036354188103142384839473266348197733",
 58		sig.R8.X.String())
 59	assert.Equal(t,
 60		"15383486972088797283337779941324724402501462225528836549661220478783371668959",
 61		sig.R8.Y.String())
 62	assert.Equal(t,
 63		"2523202440825208709475937830811065542425109372212752003460238913256192595070",
 64		sig.S.String())
 65
 66	ok := pk.VerifyMimc7(msg, sig)
 67	assert.Equal(t, true, ok)
 68
 69	sigBuf := sig.Compress()
 70	sig2, err := new(Signature).Decompress(sigBuf)
 71	assert.Equal(t, nil, err)
 72
 73	assert.Equal(t, ""+
 74		"dfedb4315d3f2eb4de2d3c510d7a987dcab67089c8ace06308827bf5bcbe02a2"+
 75		"7ed40dab29bf993c928e789d007387998901a24913d44fddb64b1f21fc149405",
 76		hex.EncodeToString(sigBuf[:]))
 77
 78	ok = pk.VerifyMimc7(msg, sig2)
 79	assert.Equal(t, true, ok)
 80}
 81
 82func TestSignVerifyPoseidon(t *testing.T) {
 83	var k PrivateKey
 84	hex.Decode(k[:], []byte("0001020304050607080900010203040506070809000102030405060708090001"))
 85	msgBuf, err := hex.DecodeString("00010203040506070809")
 86	if err != nil {
 87		panic(err)
 88	}
 89	msg := utils.SetBigIntFromLEBytes(new(big.Int), msgBuf)
 90
 91	pk := k.Public()
 92	assert.Equal(t,
 93		"13277427435165878497778222415993513565335242147425444199013288855685581939618",
 94		pk.X.String())
 95	assert.Equal(t,
 96		"13622229784656158136036771217484571176836296686641868549125388198837476602820",
 97		pk.Y.String())
 98
 99	sig := k.SignPoseidon(msg)
100	assert.Equal(t,
101		"11384336176656855268977457483345535180380036354188103142384839473266348197733",
102		sig.R8.X.String())
103	assert.Equal(t,
104		"15383486972088797283337779941324724402501462225528836549661220478783371668959",
105		sig.R8.Y.String())
106	assert.Equal(t,
107		"707916534780195227251279867700047344876009454172122484896943904789217159950",
108		sig.S.String())
109
110	ok := pk.VerifyPoseidon(msg, sig)
111	assert.Equal(t, true, ok)
112
113	sigBuf := sig.Compress()
114	sig2, err := new(Signature).Decompress(sigBuf)
115	assert.Equal(t, nil, err)
116
117	assert.Equal(t, ""+
118		"dfedb4315d3f2eb4de2d3c510d7a987dcab67089c8ace06308827bf5bcbe02a2"+
119		"0e2b947dfc400d2e9c78b5b625fd36dee8dbcfddc9a0baa6514f59a6a3aa9001",
120		hex.EncodeToString(sigBuf[:]))
121
122	ok = pk.VerifyPoseidon(msg, sig2)
123	assert.Equal(t, true, ok)
124}
125
126func TestCompressDecompress(t *testing.T) {
127	var k PrivateKey
128	hex.Decode(k[:], []byte("0001020304050607080900010203040506070809000102030405060708090001"))
129	pk := k.Public()
130	for i := 0; i < 64; i++ {
131		msgBuf, err := hex.DecodeString(fmt.Sprintf("000102030405060708%02d", i))
132		if err != nil {
133			panic(err)
134		}
135		msg := utils.SetBigIntFromLEBytes(new(big.Int), msgBuf)
136		sig := k.SignMimc7(msg)
137		sigBuf := sig.Compress()
138		sig2, err := new(Signature).Decompress(sigBuf)
139		assert.Equal(t, nil, err)
140		ok := pk.VerifyMimc7(msg, sig2)
141		assert.Equal(t, true, ok)
142	}
143}
144
145func BenchmarkBabyjubEddsa(b *testing.B) {
146	var k PrivateKey
147	hex.Decode(k[:], []byte("0001020304050607080900010203040506070809000102030405060708090001"))
148	pk := k.Public()
149
150	const n = 256
151
152	msgBuf, err := hex.DecodeString("00010203040506070809")
153	if err != nil {
154		panic(err)
155	}
156	msg := utils.SetBigIntFromLEBytes(new(big.Int), msgBuf)
157	var msgs [n]*big.Int
158	for i := 0; i < n; i++ {
159		msgs[i] = new(big.Int).Add(msg, big.NewInt(int64(i)))
160	}
161	var sigs [n]*Signature
162
163	b.Run("SignMimc7", func(b *testing.B) {
164		for i := 0; i < b.N; i++ {
165			k.SignMimc7(msgs[i%n])
166		}
167	})
168
169	for i := 0; i < n; i++ {
170		sigs[i%n] = k.SignMimc7(msgs[i%n])
171	}
172
173	b.Run("VerifyMimc7", func(b *testing.B) {
174		for i := 0; i < b.N; i++ {
175			pk.VerifyMimc7(msgs[i%n], sigs[i%n])
176		}
177	})
178
179	b.Run("SignPoseidon", func(b *testing.B) {
180		for i := 0; i < b.N; i++ {
181			k.SignPoseidon(msgs[i%n])
182		}
183	})
184
185	for i := 0; i < n; i++ {
186		sigs[i%n] = k.SignPoseidon(msgs[i%n])
187	}
188
189	b.Run("VerifyPoseidon", func(b *testing.B) {
190		for i := 0; i < b.N; i++ {
191			pk.VerifyPoseidon(msgs[i%n], sigs[i%n])
192		}
193	})
194}