ec_spdz.sage 1.8 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859
  1. load('beaver.sage')
  2. load('curve.sage')
  3. load('ec_share.sage')
  4. party0_val = CurvePoint.random()
  5. party1_val = CurvePoint.random()
  6. public_scalar = 2
  7. source = Source(p)
  8. # additive share distribution, and communication of private values
  9. party0_random = CurvePoint.random()
  10. alpha1 = ECAuthenticatedShare(party0_random)
  11. alpha2 = ECAuthenticatedShare(party0_val - party0_random)
  12. assert (alpha1.authenticated_open(alpha2) == party0_val)
  13. party1_random = CurvePoint.random()
  14. beta1 = ECAuthenticatedShare(party1_random)
  15. beta2 = ECAuthenticatedShare(party1_val - party1_random)
  16. assert (beta1.authenticated_open(beta2) == party1_val)
  17. # mul_scalar by public scalar
  18. mul_left_share = alpha1.mul_scalar(public_scalar)
  19. mul_right_share = alpha2.mul_scalar(public_scalar)
  20. assert (mul_left_share.authenticated_open(mul_right_share) == (public_scalar * party0_val))
  21. # add authenticated shares
  22. add_party0_share = alpha1 + beta2
  23. add_party1_share = alpha2 + beta1
  24. lhs = add_party0_share.authenticated_open(add_party1_share)
  25. assert (lhs == (party0_val + party1_val))
  26. # sub authenticated shares
  27. sub_party0_share = alpha1 - beta2
  28. sub_party1_share = alpha2 - beta1
  29. lhs = sub_party0_share.authenticated_open(sub_party1_share)
  30. assert (lhs == (party0_val - party1_val))
  31. # authenticated ec point scaled with authenticated scalar
  32. party1_val = random.randint(0,p)
  33. party1_random = random.randint(0,p)
  34. beta1 = AuthenticatedShare(party1_random, source, 0)
  35. beta2 = AuthenticatedShare(party1_val - party1_random, source, 0)
  36. a1b1 = ScalingECAuthenticatedShares(alpha1, beta1, source.triplet(0), 0)
  37. a2b2 = ScalingECAuthenticatedShares(alpha2, beta2, source.triplet(1), 1)
  38. lhs = a1b1.mul(a2b2.d, a2b2.e)
  39. rhs = a2b2.mul(a1b1.d, a1b1.e)
  40. res = lhs.authenticated_open(rhs)
  41. mul_res = party0_val * party1_val
  42. assert (res == (party0_val * party1_val)), 'lhs: {}, rhs: {}'.format(res, party0_val * party1_val)