mirror of
https://github.com/bitcoin/bips.git
synced 2025-03-04 11:08:05 +01:00
Add test vectors for DLEQ proof generation/verification
Squashed from the following commits: - Add skeleton for generating DLEQ proof test vectors - Add run_test_vectors.py counterpart for generated DLEQ proofs - Add DLEQ test vectors for proof verification
This commit is contained in:
Sebastian Falbesoner
parent
dab5571c37
commit
6b16952422
2 changed files with 196 additions and 0 deletions
122
bip-DLEQ/gen_test_vectors.py
Executable file
122
bip-DLEQ/gen_test_vectors.py
Executable file
|
|
@ -0,0 +1,122 @@
|
|||
#!/usr/bin/env python3
|
||||
"""Generate the BIP-DLEQ test vectors (limited to secp256k1 generator right now)."""
|
||||
import csv
|
||||
import os
|
||||
import sys
|
||||
from reference import (
|
||||
TaggedHash,
|
||||
dleq_generate_proof,
|
||||
dleq_verify_proof,
|
||||
)
|
||||
from secp256k1 import G, GE
|
||||
|
||||
|
||||
NUM_SUCCESS_TEST_VECTORS = 5
|
||||
DLEQ_TAG_TESTVECTORS_RNG = "BIP0???/testvectors_rng"
|
||||
|
||||
FILENAME_GENERATE_PROOF_TEST = os.path.join(sys.path[0], 'test_vectors_generate_proof.csv')
|
||||
FILENAME_VERIFY_PROOF_TEST = os.path.join(sys.path[0], 'test_vectors_verify_proof.csv')
|
||||
|
||||
|
||||
def random_scalar_int(vector_i, purpose):
|
||||
rng_out = TaggedHash(DLEQ_TAG_TESTVECTORS_RNG, purpose.encode() + vector_i.to_bytes(4, 'little'))
|
||||
return int.from_bytes(rng_out, 'big') % GE.ORDER
|
||||
|
||||
|
||||
def random_bytes(vector_i, purpose):
|
||||
rng_out = TaggedHash(DLEQ_TAG_TESTVECTORS_RNG, purpose.encode() + vector_i.to_bytes(4, 'little'))
|
||||
return rng_out
|
||||
|
||||
|
||||
def create_test_vector_data(vector_i):
|
||||
a = random_scalar_int(vector_i, "scalar_a")
|
||||
A = a * G
|
||||
b = random_scalar_int(vector_i, "scalar_b")
|
||||
B = b * G
|
||||
C = a * B # shared secret
|
||||
assert C.to_bytes_compressed() == (b * A).to_bytes_compressed()
|
||||
auxrand = random_bytes(vector_i, "auxrand")
|
||||
msg = random_bytes(vector_i, "message")
|
||||
proof = dleq_generate_proof(a, B, auxrand, m=msg)
|
||||
return (a, A, b, B, C, auxrand, msg, proof)
|
||||
|
||||
|
||||
TEST_VECTOR_DATA = [create_test_vector_data(i) for i in range(NUM_SUCCESS_TEST_VECTORS)]
|
||||
|
||||
|
||||
def gen_all_generate_proof_vectors(f):
|
||||
writer = csv.writer(f)
|
||||
writer.writerow(("index", "secret_a", "point_B", "auxrand_r", "message", "result_proof", "comment"))
|
||||
|
||||
# success cases with random values
|
||||
idx = 0
|
||||
for i in range(NUM_SUCCESS_TEST_VECTORS):
|
||||
a, A, b, B, C, auxrand, msg, proof = TEST_VECTOR_DATA[i]
|
||||
assert proof is not None and len(proof) == 64
|
||||
writer.writerow((idx, f"{a:02x}", B.to_bytes_compressed().hex(), auxrand.hex(), msg.hex(), proof.hex(), f"Success case {i+1}"))
|
||||
idx += 1
|
||||
|
||||
# failure cases: a is not within group order (a=0, a=N)
|
||||
a_invalid = 0
|
||||
assert dleq_generate_proof(a_invalid, B, auxrand, m=msg) is None
|
||||
writer.writerow((idx, f"{a_invalid:02x}", B.to_bytes_compressed().hex(), auxrand.hex(), msg.hex(), "INVALID", f"Failure case (a=0)"))
|
||||
idx += 1
|
||||
a_invalid = GE.ORDER
|
||||
assert dleq_generate_proof(a_invalid, B, auxrand, m=msg) is None
|
||||
writer.writerow((idx, f"{a_invalid:02x}", B.to_bytes_compressed().hex(), auxrand.hex(), msg.hex(), "INVALID", f"Failure case (a=N [group order])"))
|
||||
idx += 1
|
||||
|
||||
# failure case: B is point at infinity
|
||||
B_infinity = GE()
|
||||
B_infinity_str = "INFINITY"
|
||||
assert dleq_generate_proof(a, B_infinity, auxrand, m=msg) is None
|
||||
writer.writerow((idx, f"{a:02x}", B_infinity_str, auxrand.hex(), msg.hex(), "INVALID", f"Failure case (B is point at infinity)"))
|
||||
idx += 1
|
||||
|
||||
|
||||
def gen_all_verify_proof_vectors(f):
|
||||
writer = csv.writer(f)
|
||||
writer.writerow(("index", "point_A", "point_B", "point_C", "proof", "message", "result_success", "comment"))
|
||||
|
||||
# success cases (same as above)
|
||||
idx = 0
|
||||
for i in range(NUM_SUCCESS_TEST_VECTORS):
|
||||
_, A, _, B, C, _, msg, proof = TEST_VECTOR_DATA[i]
|
||||
assert dleq_verify_proof(A, B, C, proof, m=msg)
|
||||
writer.writerow((idx, A.to_bytes_compressed().hex(), B.to_bytes_compressed().hex(),
|
||||
C.to_bytes_compressed().hex(), proof.hex(), msg.hex(), "TRUE", f"Success case {i+1}"))
|
||||
idx += 1
|
||||
|
||||
# other permutations of A, B, C should always fail
|
||||
for i, points in enumerate(([A, C, B], [B, A, C], [B, C, A], [C, A, B], [C, B, A])):
|
||||
assert not dleq_verify_proof(points[0], points[1], points[2], proof, m=msg)
|
||||
writer.writerow((idx, points[0].to_bytes_compressed().hex(), points[1].to_bytes_compressed().hex(),
|
||||
points[2].to_bytes_compressed().hex(), proof.hex(), msg.hex(), "FALSE", f"Swapped points case {i+1}"))
|
||||
idx += 1
|
||||
|
||||
# modifying proof should fail (flip one bit)
|
||||
proof_damage_pos = random_scalar_int(idx, "damage_pos") % 256
|
||||
proof_damaged = list(proof)
|
||||
proof_damaged[proof_damage_pos // 8] ^= (1 << (proof_damage_pos % 8))
|
||||
proof_damaged = bytes(proof_damaged)
|
||||
writer.writerow((idx, A.to_bytes_compressed().hex(), B.to_bytes_compressed().hex(),
|
||||
C.to_bytes_compressed().hex(), proof_damaged.hex(), msg.hex(), "FALSE", f"Tampered proof (random bit-flip)"))
|
||||
idx += 1
|
||||
|
||||
# modifying message should fail (flip one bit)
|
||||
msg_damage_pos = random_scalar_int(idx, "damage_pos") % 256
|
||||
msg_damaged = list(msg)
|
||||
msg_damaged[proof_damage_pos // 8] ^= (1 << (msg_damage_pos % 8))
|
||||
msg_damaged = bytes(msg_damaged)
|
||||
writer.writerow((idx, A.to_bytes_compressed().hex(), B.to_bytes_compressed().hex(),
|
||||
C.to_bytes_compressed().hex(), proof.hex(), msg_damaged.hex(), "FALSE", f"Tampered message (random bit-flip)"))
|
||||
idx += 1
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
print(f"Generating {FILENAME_GENERATE_PROOF_TEST}...")
|
||||
with open(FILENAME_GENERATE_PROOF_TEST, "w", encoding="utf-8") as fil_generate_proof:
|
||||
gen_all_generate_proof_vectors(fil_generate_proof)
|
||||
print(f"Generating {FILENAME_VERIFY_PROOF_TEST}...")
|
||||
with open(FILENAME_VERIFY_PROOF_TEST, "w", encoding="utf-8") as fil_verify_proof:
|
||||
gen_all_verify_proof_vectors(fil_verify_proof)
|
||||
74
bip-DLEQ/run_test_vectors.py
Executable file
74
bip-DLEQ/run_test_vectors.py
Executable file
|
|
@ -0,0 +1,74 @@
|
|||
#!/usr/bin/env python3
|
||||
"""Run the BIP-DLEQ test vectors."""
|
||||
import csv
|
||||
import os
|
||||
import sys
|
||||
from reference import (
|
||||
dleq_generate_proof,
|
||||
dleq_verify_proof,
|
||||
)
|
||||
from secp256k1 import GE
|
||||
|
||||
|
||||
FILENAME_GENERATE_PROOF_TEST = os.path.join(sys.path[0], 'test_vectors_generate_proof.csv')
|
||||
FILENAME_VERIFY_PROOF_TEST = os.path.join(sys.path[0], 'test_vectors_verify_proof.csv')
|
||||
|
||||
|
||||
all_passed = True
|
||||
print("-----------------------------------------")
|
||||
print("----- Proof generation test vectors -----")
|
||||
print("-----------------------------------------")
|
||||
with open(FILENAME_GENERATE_PROOF_TEST, newline='') as csvfile:
|
||||
reader = csv.reader(csvfile)
|
||||
reader.__next__()
|
||||
for row in reader:
|
||||
(index, seckey_a_hex, point_B_hex, aux_rand_hex, msg_hex, result_str, comment) = row
|
||||
a = int.from_bytes(bytes.fromhex(seckey_a_hex), 'big')
|
||||
B = GE() if point_B_hex == 'INFINITY' else GE.from_bytes(bytes.fromhex(point_B_hex))
|
||||
aux_rand = bytes.fromhex(aux_rand_hex)
|
||||
msg = bytes.fromhex(msg_hex)
|
||||
print('Test vector', ('#' + index).rjust(3, ' ') + ':' + f' ({comment})')
|
||||
expected_result = None if result_str == 'INVALID' else bytes.fromhex(result_str)
|
||||
actual_result = dleq_generate_proof(a, B, aux_rand, m=msg)
|
||||
if expected_result == actual_result:
|
||||
print(' * Passed proof generation test.')
|
||||
else:
|
||||
print(' * Failed proof generation test.')
|
||||
print(' Expected proof: ', expected_result.hex() if expected_result is not None else 'INVALID')
|
||||
print(' Actual proof: ', actual_result.hex() if actual_result is not None else 'INVALID')
|
||||
all_passed = False
|
||||
print()
|
||||
|
||||
|
||||
print("-------------------------------------------")
|
||||
print("----- Proof verification test vectors -----")
|
||||
print("-------------------------------------------")
|
||||
with open(FILENAME_VERIFY_PROOF_TEST, newline='') as csvfile:
|
||||
reader = csv.reader(csvfile)
|
||||
reader.__next__()
|
||||
for row in reader:
|
||||
(index, point_A_hex, point_B_hex, point_C_hex, proof_hex, msg_hex, result_success, comment) = row
|
||||
A = GE() if point_A_hex == 'INFINITY' else GE.from_bytes(bytes.fromhex(point_A_hex))
|
||||
B = GE() if point_B_hex == 'INFINITY' else GE.from_bytes(bytes.fromhex(point_B_hex))
|
||||
C = GE() if point_C_hex == 'INFINITY' else GE.from_bytes(bytes.fromhex(point_C_hex))
|
||||
proof = bytes.fromhex(proof_hex)
|
||||
msg = bytes.fromhex(msg_hex)
|
||||
print('Test vector', ('#' + index).rjust(3, ' ') + ':' + f' ({comment})')
|
||||
expected_result = result_success == 'TRUE'
|
||||
actual_result = dleq_verify_proof(A, B, C, proof, m=msg)
|
||||
if expected_result == actual_result:
|
||||
print(' * Passed proof verification test.')
|
||||
else:
|
||||
print(' * Failed proof verification test.')
|
||||
print(' Expected verification result: ', expected_result)
|
||||
print(' Actual verification result: ', actual_result)
|
||||
all_passed = False
|
||||
|
||||
|
||||
print()
|
||||
if all_passed:
|
||||
print('All test vectors passed.')
|
||||
sys.exit(0)
|
||||
else:
|
||||
print('Some test vectors failed.')
|
||||
sys.exit(1)
|
||||
Loading…
Add table
Reference in a new issue