ec_msm.sage 3.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. load('beaver.sage')
  2. import random
  3. N = 2
  4. def sum_shares(shares, source, party_id):
  5. zero_share = AuthenticatedShare(0, source, party_id)
  6. for share in shares:
  7. zero_share += share
  8. return zero_share
  9. source = Source(p)
  10. points = [CurvePoint.random() for _ in range(0, N)]
  11. scalars = [random.randint(0,p) for i in range(0, N)]
  12. expected_msm = sum([p*s for p, s in zip(points, scalars)])
  13. lhs_points = [pt - CurvePoint.random() for pt in points]
  14. rhs_points = [point - lhs for (point, lhs) in zip(points, lhs_points)]
  15. lhs_points_shares = [ECAuthenticatedShare(pt) for pt in lhs_points]
  16. rhs_points_shares = [ECAuthenticatedShare(pt) for pt in rhs_points]
  17. assert [lhs_pt_share.authenticated_open(rhs_pt_share) for lhs_pt_share, rhs_pt_share in zip(lhs_points_shares, rhs_points_shares)] == points
  18. lhs_scalars = [s - random.randint(0,p) for s in scalars]
  19. rhs_scalars = [s - lhs for (s, lhs) in zip(scalars, lhs_scalars)]
  20. lhs_scalars_shares = [AuthenticatedShare(s, source, 0) for s in lhs_scalars]
  21. rhs_scalars_shares = [AuthenticatedShare(s, source, 1) for s in rhs_scalars]
  22. assert [lhs_scalar_share.authenticated_open(rhs_scalar_share) for lhs_scalar_share, rhs_scalar_share in zip(lhs_scalars_shares, rhs_scalars_shares)] == scalars
  23. ## sas
  24. #print('lhs sas')
  25. lhs_sas_shares = [ScalingECAuthenticatedShares(lhs_points_share, rhs_scalars_share, source.triplet(0), 0) for lhs_points_share, rhs_scalars_share in zip(lhs_points_shares, lhs_scalars_shares)]
  26. #print('rhs sas')
  27. rhs_sas_shares = [ScalingECAuthenticatedShares(rhs_points_share, rhs_scalars_share, source.triplet(1), 1) for rhs_points_share, rhs_scalars_share in zip(rhs_points_shares, rhs_scalars_shares)]
  28. #
  29. lhs_sas_de = [[lhs_sas_i.d.copy(), lhs_sas_i.e.copy()] for lhs_sas_i in lhs_sas_shares]
  30. print("lhs_sas_de: {}".format(lhs_sas_de))
  31. rhs_sas_de = [[rhs_sas_i.d.copy(), rhs_sas_i.e.copy()] for rhs_sas_i in rhs_sas_shares]
  32. lhs_sas = [lhs_sas_i.mul(rhs_sas_de_i[0], rhs_sas_de_i[1]) for lhs_sas_i, rhs_sas_de_i in zip(lhs_sas_shares, rhs_sas_de)]
  33. rhs_sas = [rhs_sas_i.mul(lhs_sas_de_i[0], lhs_sas_de_i[1]) for rhs_sas_i, lhs_sas_de_i in zip(rhs_sas_shares, lhs_sas_de)]
  34. mul_sas = [lhs_i.authenticated_open(rhs_i) for lhs_i, rhs_i in zip(lhs_sas, rhs_sas)]
  35. assert sum(mul_sas) == expected_msm
  36. ## msm
  37. #print('lhs msm')
  38. lhs_msm = MSM(lhs_points_shares, lhs_scalars_shares, source, 0)
  39. #print('rhs msm')
  40. rhs_msm = MSM(rhs_points_shares, rhs_scalars_shares, source, 1)
  41. lhs_msm_de = [[point_scalar.d, point_scalar.e] for point_scalar in lhs_msm.point_scalars]
  42. print("lhs_msm_de: {}".format(lhs_msm_de))
  43. rhs_msm_de = [[point_scalar.d, point_scalar.e] for point_scalar in rhs_msm.point_scalars]
  44. res = []
  45. lhs = lhs_msm.msm(rhs_msm_de)
  46. rhs = rhs_msm.msm(lhs_msm_de)
  47. #assert lhs_sas == lhs_msm.point_scalars, print('sas: {}, msm: {}'.format(lhs_sas, lhs_msm.point_scalars))
  48. #assert rhs_sas == rhs_msm.point_scalars, print('sas: {}, msm: {}'.format(rhs_sas, rhs_msm.point_scalars))
  49. print('msm: {}'.format(lhs_msm.point_scalars))
  50. print('sas: {}'.format(lhs_sas))
  51. result = sum([lhs_pt_scalar.authenticated_open(rhs_pt_scalar) for lhs_pt_scalar, rhs_pt_scalar in zip (lhs_msm.point_scalars , rhs_msm.point_scalars)])
  52. res = lhs.authenticated_open(rhs)
  53. assert result == res
  54. assert res == expected_msm, 'res: {}, expected: {}'.format(res, expected_msm)