[crypto/leadcoin] created lead coin for lead transaction

src/crypto/leadcoin.rs

@@ -0,0 +1,116 @@
+use incrementalmerkletree::{bridgetree::BridgeTree, Frontier, Tree};
+
+use halo2_gadgets::primitives::{
+    poseidon,
+    poseidon::{ConstantLength, P128Pow5T3},
+};
+
+use halo2_proofs::dev::MockProver;
+
+use rand::{thread_rng, Rng};
+
+use pasta_curves::{pallas, Fp};
+
+use crate::{
+    crypto::{
+        constants::{
+            NullifierK, OrchardFixedBases, OrchardFixedBasesFull, ValueCommitV,
+            MERKLE_DEPTH_ORCHARD,
+        },
+        keypair::{Keypair, PublicKey, SecretKey},
+        merkle_node::MerkleNode,
+        types::{DrkCoinBlind, DrkSerial, DrkTokenId, DrkValue, DrkValueBlind, DrkValueCommit},
+        nullifier::Nullifier,
+        proof::{Proof, ProvingKey, VerifyingKey},
+        types::*,
+        util::{mod_r_p, pedersen_commitment_scalar, pedersen_commitment_u64},
+    },
+    zk::circuit::lead_contract::LeadContract,
+};
+
+use incrementalmerkletree::Hashable;
+
+use pasta_curves::{
+    arithmetic::CurveAffine,
+    group::{ff::PrimeField, Curve, GroupEncoding},
+};
+
+
+//use halo2_proofs::arithmetic::CurveAffine;
+#[derive(Debug, Default, Clone, Copy)]
+pub struct LeadCoin {
+    pub value: Option<pallas::Base>, //stake
+    pub cm: Option<pallas::Point>,
+    pub cm2: Option<pallas::Point>,
+    pub idx: u32,
+    pub sl: Option<pallas::Base>, //slot id
+    pub tau: Option<pallas::Base>,
+    pub nonce: Option<pallas::Base>,
+    pub nonce_cm: Option<pallas::Point>,
+    pub sn: Option<pallas::Point>, // coin's serial number
+    //sk : Option<SecretKey>,
+    pub pk: Option<pallas::Point>,
+    pub pk_x: Option<pallas::Base>,
+    pub pk_y: Option<pallas::Base>,
+    pub root_cm: Option<pallas::Scalar>,
+    pub root_sk: Option<pallas::Base>,
+    pub path: Option<[MerkleNode; MERKLE_DEPTH_ORCHARD]>,
+    pub path_sk: Option<[MerkleNode; MERKLE_DEPTH_ORCHARD]>,
+    pub opening1: Option<pallas::Base>,
+    pub opening2: Option<pallas::Base>,
+}
+
+impl LeadCoin {
+    pub fn public_inputs(&self) -> Vec<pallas::Base>
+    {
+        let po_nonce = self.nonce_cm.unwrap().to_affine().coordinates().unwrap();
+
+        let po_tau = pedersen_commitment_scalar(mod_r_p(self.tau.unwrap()), self.root_cm.unwrap())
+            .to_affine()
+            .coordinates()
+            .unwrap();
+
+        let po_cm = self.cm.unwrap().to_affine().coordinates().unwrap();
+        let po_cm2 = self.cm2.unwrap().to_affine().coordinates().unwrap();
+
+        let po_pk = self.pk.unwrap().to_affine().coordinates().unwrap();
+        let po_sn = self.sn.unwrap().to_affine().coordinates().unwrap();
+
+        let po_cmp = pallas::Base::from(0);
+        let zero = pallas::Base::from(0);
+        // ===============
+
+        let cm_pos = self.idx;
+        let cm_root = {
+            let pos: u32 = cm_pos;
+            let c_cm_coordinates = self.cm.unwrap().to_affine().coordinates().unwrap();
+            let c_cm_base: pallas::Base = c_cm_coordinates.x() * c_cm_coordinates.y();
+            let mut current = MerkleNode(c_cm_base);
+            for (level, sibling) in self.path.unwrap().iter().enumerate() {
+                let level = level as u8;
+                current = if pos & (1 << level) == 0 {
+                    MerkleNode::combine(level.into(), &current, sibling)
+                } else {
+                    MerkleNode::combine(level.into(), sibling, &current)
+                };
+            }
+            current
+        };
+        let mut public_inputs: Vec<pallas::Base> = vec![
+            *po_nonce.x(),
+            *po_nonce.y(),
+            *po_pk.x(),
+            *po_pk.y(),
+            *po_sn.x(),
+            *po_sn.y(),
+            *po_cm.x(),
+            *po_cm.y(),
+            *po_cm2.x(),
+            *po_cm2.y(),
+            cm_root.0,
+            po_cmp,
+        ];
+        public_inputs
+
+    }
+}