add seraphis hash functions
This commit is contained in:
parent
35eb5c1174
commit
efd6288e39
|
@ -27,6 +27,7 @@
|
||||||
# THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
# THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
set(seraphis_crypto_sources
|
set(seraphis_crypto_sources
|
||||||
|
sp_hash_functions.cpp
|
||||||
dummy.cpp)
|
dummy.cpp)
|
||||||
|
|
||||||
monero_find_all_headers(seraphis_crypto_headers, "${CMAKE_CURRENT_SOURCE_DIR}")
|
monero_find_all_headers(seraphis_crypto_headers, "${CMAKE_CURRENT_SOURCE_DIR}")
|
||||||
|
|
|
@ -0,0 +1,150 @@
|
||||||
|
// Copyright (c) 2022, The Monero Project
|
||||||
|
//
|
||||||
|
// All rights reserved.
|
||||||
|
//
|
||||||
|
// Redistribution and use in source and binary forms, with or without modification, are
|
||||||
|
// permitted provided that the following conditions are met:
|
||||||
|
//
|
||||||
|
// 1. Redistributions of source code must retain the above copyright notice, this list of
|
||||||
|
// conditions and the following disclaimer.
|
||||||
|
//
|
||||||
|
// 2. Redistributions in binary form must reproduce the above copyright notice, this list
|
||||||
|
// of conditions and the following disclaimer in the documentation and/or other
|
||||||
|
// materials provided with the distribution.
|
||||||
|
//
|
||||||
|
// 3. Neither the name of the copyright holder nor the names of its contributors may be
|
||||||
|
// used to endorse or promote products derived from this software without specific
|
||||||
|
// prior written permission.
|
||||||
|
//
|
||||||
|
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY
|
||||||
|
// EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
// MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
|
||||||
|
// THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||||
|
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
||||||
|
// PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
||||||
|
// INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
||||||
|
// STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
|
||||||
|
// THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
//paired header
|
||||||
|
#include "sp_hash_functions.h"
|
||||||
|
|
||||||
|
//local headers
|
||||||
|
extern "C"
|
||||||
|
{
|
||||||
|
#include "crypto/crypto-ops.h"
|
||||||
|
}
|
||||||
|
#include "crypto/blake2b.h"
|
||||||
|
#include "misc_log_ex.h"
|
||||||
|
|
||||||
|
//third party headers
|
||||||
|
|
||||||
|
//standard headers
|
||||||
|
|
||||||
|
|
||||||
|
#undef MONERO_DEFAULT_LOG_CATEGORY
|
||||||
|
#define MONERO_DEFAULT_LOG_CATEGORY "seraphis"
|
||||||
|
|
||||||
|
namespace sp
|
||||||
|
{
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
// H_x[k](data)
|
||||||
|
// - if derivation_key == nullptr, then the hash is NOT keyed
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
static void hash_base(const void *derivation_key, //32 bytes
|
||||||
|
const void *data,
|
||||||
|
const std::size_t data_length,
|
||||||
|
void *hash_out,
|
||||||
|
const std::size_t out_length)
|
||||||
|
{
|
||||||
|
CHECK_AND_ASSERT_THROW_MES(blake2b(hash_out,
|
||||||
|
out_length,
|
||||||
|
data,
|
||||||
|
data_length,
|
||||||
|
derivation_key,
|
||||||
|
derivation_key ? 32 : 0) == 0,
|
||||||
|
"seraphis hash base: blake2b failed.");
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_1(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_1(x): 1-byte output
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 1);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_2(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_2(x): 2-byte output
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 2);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_8(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_8(x): 8-byte output
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 8);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_16(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_16(x): 16-byte output
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 16);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_32(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_32(x): 32-byte output
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 32);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_64(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_64(x): 64-byte output
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 64);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_scalar(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_n(x): Ed25519 group scalar output (32 bytes)
|
||||||
|
// note: hash to 64 bytes then mod l
|
||||||
|
unsigned char temp[64];
|
||||||
|
hash_base(nullptr, data, data_length, temp, 64);
|
||||||
|
sc_reduce(temp); //mod l
|
||||||
|
memcpy(hash_out, temp, 32);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_hash_to_x25519_scalar(const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_n_x25519(x): canonical X25519 group scalar output (32 bytes)
|
||||||
|
// - bits 0, 1, 2, 255 set to zero
|
||||||
|
hash_base(nullptr, data, data_length, hash_out, 32);
|
||||||
|
reinterpret_cast<unsigned char*>(hash_out)[0] &= 255 - 7;
|
||||||
|
reinterpret_cast<unsigned char*>(hash_out)[31] &= 127;
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_derive_key(const void *derivation_key, const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_n[k](x): Ed25519 group scalar output (32 bytes)
|
||||||
|
// note: hash to 64 bytes then mod l
|
||||||
|
unsigned char temp[64];
|
||||||
|
hash_base(derivation_key, data, data_length, temp, 64);
|
||||||
|
sc_reduce(temp); //mod l
|
||||||
|
memcpy(hash_out, temp, 32);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_derive_secret(const void *derivation_key, const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_32[k](x): 32-byte output
|
||||||
|
hash_base(derivation_key, data, data_length, hash_out, 32);
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
void sp_derive_x25519_key(const void *derivation_key, const void *data, const std::size_t data_length, void *hash_out)
|
||||||
|
{
|
||||||
|
// H_n_x25519[k](x): canonical X25519 group scalar output (32 bytes)
|
||||||
|
// - bits 0, 1, 2, 255 set to zero
|
||||||
|
hash_base(derivation_key, data, data_length, hash_out, 32);
|
||||||
|
reinterpret_cast<unsigned char*>(hash_out)[0] &= 255 - 7;
|
||||||
|
reinterpret_cast<unsigned char*>(hash_out)[31] &= 127;
|
||||||
|
}
|
||||||
|
//-------------------------------------------------------------------------------------------------------------------
|
||||||
|
} //namespace sp
|
|
@ -0,0 +1,69 @@
|
||||||
|
// Copyright (c) 2022, The Monero Project
|
||||||
|
//
|
||||||
|
// All rights reserved.
|
||||||
|
//
|
||||||
|
// Redistribution and use in source and binary forms, with or without modification, are
|
||||||
|
// permitted provided that the following conditions are met:
|
||||||
|
//
|
||||||
|
// 1. Redistributions of source code must retain the above copyright notice, this list of
|
||||||
|
// conditions and the following disclaimer.
|
||||||
|
//
|
||||||
|
// 2. Redistributions in binary form must reproduce the above copyright notice, this list
|
||||||
|
// of conditions and the following disclaimer in the documentation and/or other
|
||||||
|
// materials provided with the distribution.
|
||||||
|
//
|
||||||
|
// 3. Neither the name of the copyright holder nor the names of its contributors may be
|
||||||
|
// used to endorse or promote products derived from this software without specific
|
||||||
|
// prior written permission.
|
||||||
|
//
|
||||||
|
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY
|
||||||
|
// EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
// MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
|
||||||
|
// THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||||
|
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
||||||
|
// PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
||||||
|
// INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
||||||
|
// STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
|
||||||
|
// THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
// Core hash functions for Seraphis (note: this implementation satisfies the Jamtis specification).
|
||||||
|
|
||||||
|
#pragma once
|
||||||
|
|
||||||
|
//local headers
|
||||||
|
|
||||||
|
//third party headers
|
||||||
|
|
||||||
|
//standard headers
|
||||||
|
#include <cstddef>
|
||||||
|
|
||||||
|
//forward declarations
|
||||||
|
|
||||||
|
|
||||||
|
namespace sp
|
||||||
|
{
|
||||||
|
|
||||||
|
/// H_1(x): 1-byte output
|
||||||
|
void sp_hash_to_1(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_2(x): 2-byte output
|
||||||
|
void sp_hash_to_2(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_8(x): 8-byte output
|
||||||
|
void sp_hash_to_8(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_16(x): 16-byte output
|
||||||
|
void sp_hash_to_16(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_32(x): 32-byte output
|
||||||
|
void sp_hash_to_32(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_64(x): 64-byte output
|
||||||
|
void sp_hash_to_64(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_n(x): Ed25519 group scalar output (32 bytes)
|
||||||
|
void sp_hash_to_scalar(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_n_x25519(x): canonical X25519 group scalar output (32 bytes)
|
||||||
|
void sp_hash_to_x25519_scalar(const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_n[k](x): 32-byte key; Ed25519 group scalar output (32 bytes)
|
||||||
|
void sp_derive_key(const void *derivation_key, const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_32[k](x): 32-byte key; 32-byte output
|
||||||
|
void sp_derive_secret(const void *derivation_key, const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
/// H_n_x25519[k](x): 32-byte key; canonical X25519 group scalar output (32 bytes)
|
||||||
|
void sp_derive_x25519_key(const void *derivation_key, const void *data, const std::size_t data_length, void *hash_out);
|
||||||
|
|
||||||
|
} //namespace sp
|
Loading…
Reference in New Issue