Bulletproofs (rangeproofs only)#23

Closed

apoelstra wants to merge 61 commits intoBlockstreamResearch:secp256k1-zkpfrom

apoelstra:bulletproofs-rangeonly

Commits on Dec 14, 2018

Add 64-bit integer utilities

gmaxwell
authored and
apoelstra
committed
Pedersen commitments, borromean ring signatures, and ZK range proofs.

gmaxwell
authored and
apoelstra
committed
Get rid of precomputed H tables (Pieter Wuille)
apoelstra
committed
[RANGEPROOF BREAK] Use quadratic residue for tie break and modularity cleanup
apoelstra
committed
rangeproof: expose sidechannel message field in the signing API
apoelstra
committed
Constant-time generator module

sipa
authored and
apoelstra
committed
Expose generator in pedersen/rangeproof API

sipa
authored and
apoelstra
committed
rangeproof: several API changes
apoelstra
committed
Implement ring-signature based whitelist delegation scheme
apoelstra
committed
add surjection proof module
apoelstra
committed
rangeproof: fix memory leak in unit tests
apoelstra
committed
surjectionproof: tests_impl.h s/assert/CHECK/g
apoelstra
committed
surjectionproof: add API unit tests
apoelstra
committed
surjectionproof: rename unit test functions to be more consistent with other modules
apoelstra
committed
rangeproof: add API tests
apoelstra
committed
Fix include/secp256k1_rangeproof.h function argument documentation.

jonasnick
authored and
apoelstra
committed
whitelist: fix serialize/parse API to take serialized length
apoelstra
committed
Fix checks of whitelist serialize/parse arguments

jonasnick
authored and
apoelstra
committed
Add n_keys argument to whitelist_verify

jonasnick
authored and
apoelstra
committed
Fix pedersen_blind_generator_blind_sum return value documentation

jonasnick
authored and
apoelstra
committed
Fix generator makefile

instagibbs
authored and
apoelstra
committed
generator: remove unnecessary ARG_CHECK from generate()
apoelstra
committed
generator: add API tests
apoelstra
committed
add whitelist_impl.h to include for dist

instagibbs
authored and
apoelstra
committed
Add whitelisting benchmark

jonasnick
authored and
apoelstra
committed
Minor bugfix. Wrong length due to NUL character.

datavetaren
authored and
apoelstra
committed
Reject surjection proofs with trailing garbage

real-or-random
authored and
apoelstra
committed
Test for rejection of trailing bytes in surjection proofs

real-or-random
authored and
apoelstra
committed
Test for rejection of trailing bytes in range proofs

real-or-random
authored and
apoelstra
committed
fix spelling in documentation

instagibbs
authored and
apoelstra
committed
Expose generator in shared library

FrankC01
authored and
apoelstra
committed
rangeproof: add fixed vector test case
apoelstra
committed
rangeproof: check that points deserialize correctly when verifying rangeproof
apoelstra
committed
generator: verify correctness of point when parsing
apoelstra
committed
rangeproof: verify correctness of pedersen commitments when parsing
apoelstra
committed
rangeproof: fix serialization of pedersen commintments
apoelstra
committed
add unit test for generator and pedersen commitment roundtripping
apoelstra
committed
Add comment to explain effect of max_n_iterations in surjectionproof_init

jonasnick
authored and
apoelstra
committed
Add explanation about how BIP32 unhardened derivation can be used to simplify whitelisting

jonasnick
authored and
apoelstra
committed

Commits on Dec 22, 2018

Add trivial ecmult_multi algorithm. It is selected when no scratch space is given and just multiplies and adds the points.
jonasnick
committed

Commits on Jan 29, 2019

add chacha20 function

apoelstra
authored and
jonasnick
committed
Add schnorrsig module which implements BIP-schnorr [0] compatible signing, verification and batch verification.

apoelstra
authored and
jonasnick
committed

Commits on Feb 6, 2019

Commits on Feb 8, 2019