141 lines
4.4 KiB
C
141 lines
4.4 KiB
C
/* This file is part of libbrandt.
|
|
* Copyright (C) 2016 GNUnet e.V.
|
|
*
|
|
* libbrandt is free software: you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License as published by the Free Software
|
|
* Foundation, either version 3 of the License, or (at your option) any later
|
|
* version.
|
|
*
|
|
* libbrandt is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
* WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
|
* A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along with
|
|
* libbrandt. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
/**
|
|
* @file crypto.h
|
|
* @brief Interface of the crypto primitives.
|
|
* @author Markus Teich
|
|
*/
|
|
|
|
#ifndef _BRANDT_CRYPTO_H
|
|
#define _BRANDT_CRYPTO_H
|
|
|
|
#include <gcrypt.h>
|
|
#include <stdint.h>
|
|
|
|
#include "internals.h"
|
|
|
|
void brandt_crypto_init ();
|
|
|
|
|
|
/* --- HASHING --- */
|
|
|
|
struct brandt_hash_code {
|
|
uint32_t bits[512 / 8 / sizeof (uint32_t)]; /* = 16 */
|
|
};
|
|
|
|
void brandt_hash (const void *block, size_t size, struct brandt_hash_code *ret);
|
|
|
|
|
|
/* --- EC --- */
|
|
|
|
/* used for serialized mpis and serialized curve points (they are the same size
|
|
* when compressed) */
|
|
struct ec_mpi {
|
|
unsigned char data[256 / 8];
|
|
};
|
|
|
|
int ec_point_cmp (const gcry_mpi_point_t a, const gcry_mpi_point_t b);
|
|
void ec_skey_create (gcry_mpi_t skey);
|
|
void ec_keypair_create (gcry_mpi_point_t pkey, gcry_mpi_t skey);
|
|
void ec_keypair_create_base (gcry_mpi_point_t pkey,
|
|
gcry_mpi_t skey,
|
|
const gcry_mpi_point_t base);
|
|
|
|
|
|
/* --- Zero knowledge proofs --- */
|
|
|
|
struct proof_dl {
|
|
struct ec_mpi r;
|
|
struct ec_mpi a;
|
|
};
|
|
|
|
struct proof_2dle {
|
|
struct ec_mpi r;
|
|
struct ec_mpi a;
|
|
struct ec_mpi b;
|
|
};
|
|
|
|
struct proof_0og {
|
|
struct ec_mpi a1;
|
|
struct ec_mpi a2;
|
|
struct ec_mpi b1;
|
|
struct ec_mpi b2;
|
|
struct ec_mpi d1;
|
|
struct ec_mpi d2;
|
|
struct ec_mpi r1;
|
|
struct ec_mpi r2;
|
|
};
|
|
|
|
void smc_zkp_dl (gcry_mpi_point_t v,
|
|
const gcry_mpi_t x,
|
|
struct proof_dl *proof);
|
|
int smc_zkp_dl_check (const gcry_mpi_point_t v,
|
|
const struct proof_dl *proof);
|
|
|
|
void smc_zkp_2dle (const gcry_mpi_point_t v,
|
|
const gcry_mpi_point_t w,
|
|
const gcry_mpi_point_t g1,
|
|
const gcry_mpi_point_t g2,
|
|
const gcry_mpi_t x,
|
|
struct proof_2dle *proof);
|
|
int smc_zkp_2dle_check (const gcry_mpi_point_t v,
|
|
const gcry_mpi_point_t w,
|
|
const gcry_mpi_point_t g1,
|
|
const gcry_mpi_point_t g2,
|
|
const struct proof_2dle *proof);
|
|
|
|
void smc_zkp_0og (int m_is_gen,
|
|
const gcry_mpi_point_t y,
|
|
gcry_mpi_t r,
|
|
gcry_mpi_point_t alpha,
|
|
gcry_mpi_point_t beta,
|
|
struct proof_0og *proof);
|
|
int smc_zkp_0og_check (const gcry_mpi_point_t y,
|
|
const gcry_mpi_point_t alpha,
|
|
const gcry_mpi_point_t beta,
|
|
const struct proof_0og *proof);
|
|
|
|
/* --- Protocol implementation --- */
|
|
|
|
unsigned char *smc_gen_keyshare (struct AuctionData *ad, size_t *buflen);
|
|
int smc_recv_keyshare (struct AuctionData *ad,
|
|
unsigned char *buf,
|
|
size_t buflen,
|
|
uint16_t sender_index);
|
|
|
|
unsigned char *smc_encrypt_bid (struct AuctionData *ad, size_t *buflen);
|
|
int smc_recv_encrypted_bid (struct AuctionData *ad,
|
|
unsigned char *buf,
|
|
size_t buflen,
|
|
uint16_t sender_index);
|
|
|
|
unsigned char *smc_compute_outcome (struct AuctionData *ad, size_t *buflen);
|
|
int smc_recv_outcome (struct AuctionData *ad,
|
|
unsigned char *buf,
|
|
size_t buflen,
|
|
uint16_t sender);
|
|
|
|
unsigned char *smc_decrypt_outcome (struct AuctionData *ad, size_t *buflen);
|
|
int smc_recv_decryption (struct AuctionData *ad,
|
|
unsigned char *buf,
|
|
size_t buflen,
|
|
uint16_t sender);
|
|
|
|
int32_t smc_determine_outcome (struct AuctionData *ad);
|
|
|
|
#endif /* ifndef _BRANDT_CRYPTO_H */
|