mirror of
https://github.com/QuilibriumNetwork/ceremonyclient.git
synced 2026-02-21 10:27:26 +08:00
dbd95bd9e9
* v2.1.0 [omit consensus and adjacent] - this commit will be amended with the full release after the file copy is complete * 2.1.0 main node rollup
103 lines
3.9 KiB
Go
103 lines
3.9 KiB
Go
// -*- go -*-
|
|
|
|
// This example shows how a key can be imported to MCP peers garbler
|
|
// and evaluator so that after the import operation both peers hold a
|
|
// random share of the key, and shareG^shareE=key.
|
|
//
|
|
// The garbler provides three arguments:
|
|
//
|
|
// key [64]byte: the key to import
|
|
// split [64]byte: random input for the key split value
|
|
// mask [64]byte: random mask to mask garbler's key share result
|
|
//
|
|
// The evaluator provides two arguments: the split and the mask values.
|
|
//
|
|
// The MPC program splits the key into two random shares:
|
|
//
|
|
// garbler's share : keyG = g.Split ^ e.Split
|
|
// evaluator's share: keyE = keyG ^ g.Key
|
|
//
|
|
// The result shares are masked with respective masks and returned as
|
|
// the result of the computation:
|
|
//
|
|
// keyGM = keyG ^ g.Mask
|
|
// keyEM = keyE ^ e.Mask
|
|
//
|
|
// Finally, both parties can extract their key shares because the know
|
|
// their mask values:
|
|
//
|
|
// keyG = keyGM ^ g.Mask
|
|
// keyE = keyEM ^ e.Mask
|
|
//
|
|
// Using the example values:
|
|
//
|
|
// key: a968f050ebd5c4ed2ddf9717f0f0fd9325b07c68ff5d62094800f5b69464bab9
|
|
// 8dd886a7c49460503fafa75f5f7430f2cdda7bd5cb60c1cbd471e35d67432d58
|
|
// splitG: 7e1d9bb27838f5c8481b7194f07b5f3059f9471ae8e69ea3fe79c629a92588d9
|
|
// 524a6e4364e77d222210135f6c5435a8be52fc99ad8fc8280e8207cac91fc7b3
|
|
// maskG: bed1bc2a3e6089bd016ff0175c62346438a9eb7b741f41787e5f7aad1720ee08
|
|
// 233a89e81e3bbd5eef26d158750a0fdd47471ded518d781f23de6d4346ea68ad
|
|
//
|
|
// splitE: b2146ed7385d63a76f599b27f03e83971149208b0c41604eea010806460a3266
|
|
// 93820075bc25c485b2bfcb9226488ba961eeb07980f8ab374b38f793e41e5247
|
|
// maskE: a0698ff8e72f51bf3bff3895c80a8ba8a527abaa5a7603391545ed5dcebb22b5
|
|
// a2f191bcb3ac3a543cfdba99bded67a3ac6f5f254ff7e5c34520312c9b91f672
|
|
//
|
|
// we run the evaluator with two arguments:
|
|
//
|
|
// ./garbled -e -v -i 0xb2146ed7385d63a76f599b27f03e83971149208b0c41604eea010806460a326693820075bc25c485b2bfcb9226488ba961eeb07980f8ab374b38f793e41e5247,0xa0698ff8e72f51bf3bff3895c80a8ba8a527abaa5a7603391545ed5dcebb22b5a2f191bcb3ac3a543cfdba99bded67a3ac6f5f254ff7e5c34520312c9b91f672 examples/key-import.qcl
|
|
//
|
|
// and the garbler with three arguments:
|
|
//
|
|
// ./garbled -v -i 0xa968f050ebd5c4ed2ddf9717f0f0fd9325b07c68ff5d62094800f5b69464bab98dd886a7c49460503fafa75f5f7430f2cdda7bd5cb60c1cbd471e35d67432d58,0x7e1d9bb27838f5c8481b7194f07b5f3059f9471ae8e69ea3fe79c629a92588d9524a6e4364e77d222210135f6c5435a8be52fc99ad8fc8280e8207cac91fc7b3,0xbed1bc2a3e6089bd016ff0175c62346438a9eb7b741f41787e5f7aad1720ee08233a89e81e3bbd5eef26d158750a0fdd47471ded518d781f23de6d4346ea68ad examples/key-import.qcl
|
|
//
|
|
// The program returns two values: garbler's and evaluator's masked
|
|
// key shares:
|
|
//
|
|
// Result[0]: 72d8494f7e051fd2262d1aa45c27e8c370198cea90b8bf956a27b482f80f54b7e2f2e7dec6f904f97f8909953f16b1dc98fb510d7cfa1b0066649d1a6bebfd59
|
|
// Result[1]: c5088acd4c9f033d3162453138bfaa9cc827b053418c9fdd493dd6c4b5f022b3eee1792daffae3a393fdc50ba885e950be096810a9e04717d4eb2228d1d34ede
|
|
//
|
|
// and both peers can extract their key shares by XOR:ing their result
|
|
// with their mask value:
|
|
//
|
|
// shareG: cc09f5654065966f2742eab30045dca748b06791e4a7feed1478ce2fef2fbabf
|
|
// c1c86e36d8c2b9a790afd8cd4a1cbe01dfbc4ce02d77631f45baf0592d0195f4
|
|
// shareE: 65610535abb052820a9d7da4f0b521346d001bf91bfa9ce45c783b997b4b0006
|
|
// 4c10e8911c56d9f7af007f9215688ef312663735e617a2d491cb13044a42b8ac
|
|
//
|
|
// and we see that shareG^shareE = key
|
|
package main
|
|
|
|
type Garbler struct {
|
|
Key [64]byte
|
|
Split [64]byte
|
|
Mask [64]byte
|
|
}
|
|
|
|
type Evaluator struct {
|
|
Split [64]byte
|
|
Mask [64]byte
|
|
}
|
|
|
|
func main(g Garbler, e Evaluator) ([]byte, []byte) {
|
|
var keyG [64]byte
|
|
var keyE [64]byte
|
|
var keyGM [64]byte
|
|
var keyEM [64]byte
|
|
|
|
for i := 0; i < len(keyG); i++ {
|
|
keyG[i] = g.Split[i] ^ e.Split[i]
|
|
}
|
|
for i := 0; i < len(keyE); i++ {
|
|
keyE[i] = keyG[i] ^ g.Key[i]
|
|
}
|
|
|
|
for i := 0; i < len(keyGM); i++ {
|
|
keyGM[i] = keyG[i] ^ g.Mask[i]
|
|
}
|
|
for i := 0; i < len(keyEM); i++ {
|
|
keyEM[i] = keyE[i] ^ e.Mask[i]
|
|
}
|
|
return keyGM, keyEM
|
|
}
|