mirror of
https://github.com/tornadocash/tornado-nova
synced 2024-02-02 14:53:56 +01:00
add commitment to compliance signature
This commit is contained in:
parent
2a6fca70fa
commit
07a4d600f4
@ -12,11 +12,13 @@ template Keypair() {
|
||||
|
||||
template Signature() {
|
||||
signal input privateKey;
|
||||
signal input commitment;
|
||||
signal input merklePath;
|
||||
signal output out;
|
||||
|
||||
component hasher = Poseidon(2);
|
||||
component hasher = Poseidon(3);
|
||||
hasher.inputs[0] <== privateKey;
|
||||
hasher.inputs[1] <== merklePath;
|
||||
hasher.inputs[1] <== commitment;
|
||||
hasher.inputs[2] <== merklePath;
|
||||
out <== hasher.out;
|
||||
}
|
||||
|
@ -11,7 +11,7 @@ Utxo structure:
|
||||
}
|
||||
|
||||
commitment = hash(amount, pubKey, blinding)
|
||||
nullifier = hash(commitment, merklePath, sign(merklePath, privKey))
|
||||
nullifier = hash(commitment, merklePath, sign(privKey, commitment, merklePath))
|
||||
*/
|
||||
|
||||
// Universal JoinSplit transaction with nIns inputs and 2 outputs
|
||||
@ -39,7 +39,7 @@ template Transaction(levels, nIns, nOuts, zeroLeaf) {
|
||||
|
||||
component inKeypair[nIns];
|
||||
component inSignature[nIns];
|
||||
component inUtxoHasher[nIns];
|
||||
component commitmentHasher[nIns];
|
||||
component nullifierHasher[nIns];
|
||||
component tree[nIns];
|
||||
component checkRoot[nIns];
|
||||
@ -50,23 +50,24 @@ template Transaction(levels, nIns, nOuts, zeroLeaf) {
|
||||
inKeypair[tx] = Keypair();
|
||||
inKeypair[tx].privateKey <== inPrivateKey[tx];
|
||||
|
||||
inUtxoHasher[tx] = Poseidon(3);
|
||||
inUtxoHasher[tx].inputs[0] <== inAmount[tx];
|
||||
inUtxoHasher[tx].inputs[1] <== inKeypair[tx].publicKey;
|
||||
inUtxoHasher[tx].inputs[2] <== inBlinding[tx];
|
||||
commitmentHasher[tx] = Poseidon(3);
|
||||
commitmentHasher[tx].inputs[0] <== inAmount[tx];
|
||||
commitmentHasher[tx].inputs[1] <== inKeypair[tx].publicKey;
|
||||
commitmentHasher[tx].inputs[2] <== inBlinding[tx];
|
||||
|
||||
inSignature[tx] = Signature();
|
||||
inSignature[tx].privateKey <== inPrivateKey[tx];
|
||||
inSignature[tx].commitment <== commitmentHasher[tx].out;
|
||||
inSignature[tx].merklePath <== inPathIndices[tx];
|
||||
|
||||
nullifierHasher[tx] = Poseidon(3);
|
||||
nullifierHasher[tx].inputs[0] <== inUtxoHasher[tx].out;
|
||||
nullifierHasher[tx].inputs[0] <== commitmentHasher[tx].out;
|
||||
nullifierHasher[tx].inputs[1] <== inPathIndices[tx];
|
||||
nullifierHasher[tx].inputs[2] <== inSignature[tx].out;
|
||||
nullifierHasher[tx].out === inputNullifier[tx];
|
||||
|
||||
tree[tx] = MerkleProof(levels);
|
||||
tree[tx].leaf <== inUtxoHasher[tx].out;
|
||||
tree[tx].leaf <== commitmentHasher[tx].out;
|
||||
tree[tx].pathIndices <== inPathIndices[tx];
|
||||
for (var i = 0; i < levels; i++) {
|
||||
tree[tx].pathElements[i] <== inPathElements[tx][i];
|
||||
|
@ -85,8 +85,8 @@ class Keypair {
|
||||
* @param {string|number|BigNumber} merklePath a hex string with merkle path
|
||||
* @returns {BigNumber} a hex string with signature
|
||||
*/
|
||||
sign(merklePath) {
|
||||
return poseidonHash([this.privkey, merklePath])
|
||||
sign(commitment, merklePath) {
|
||||
return poseidonHash([this.privkey, commitment, merklePath])
|
||||
}
|
||||
|
||||
/**
|
||||
|
@ -46,7 +46,7 @@ class Utxo {
|
||||
) {
|
||||
throw new Error('Can not compute nullifier without utxo index or private key')
|
||||
}
|
||||
const signature = this.keypair.privkey ? this.keypair.sign(this.index || 0) : 0
|
||||
const signature = this.keypair.privkey ? this.keypair.sign(this.getCommitment(), this.index || 0) : 0
|
||||
this._nullifier = poseidonHash([this.getCommitment(), this.index || 0, signature])
|
||||
}
|
||||
return this._nullifier
|
||||
|
@ -377,8 +377,9 @@ describe('TornadoPool', function () {
|
||||
blinding: aliceDepositUtxo.blinding,
|
||||
},
|
||||
nullifier: {
|
||||
commitment,
|
||||
merklePath: index,
|
||||
signature: aliceDepositUtxo.keypair.sign(index),
|
||||
signature: aliceDepositUtxo.keypair.sign(commitment, index),
|
||||
},
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user