Enum Protocol

pub enum Protocol<G: Group + GroupEncoding> {
    Simple(SchnorrProof<G>),
    And(Vec<Protocol<G>>),
    Or(Vec<Protocol<G>>),
}

A protocol proving knowledge of a witness for a composition of SchnorrProof’s.

This implementation generalizes SchnorrProof by using AND/OR links.

Type Parameters

• G: A cryptographic group implementing Group and GroupEncoding.

Variants

Simple(SchnorrProof<G>)

And(Vec<Protocol<G>>)

Or(Vec<Protocol<G>>)

Trait Implementations

impl<G: Clone + Group + GroupEncoding> Clone for Protocol<G>

fn clone(&self) -> Protocol<G>

Returns a duplicate of the value.

const fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<G> From<LinearRelation<G>> for Protocol<G>

where G: Group + GroupEncoding,

fn from(value: LinearRelation<G>) -> Self

Converts to this type from the input type.

impl<G> From<SchnorrProof<G>> for Protocol<G>

where G: Group + GroupEncoding,

fn from(value: SchnorrProof<G>) -> Self

Converts to this type from the input type.

impl<G: Group + GroupEncoding> SigmaProtocol for Protocol<G>

type Commitment = ProtocolCommitment<G>

type ProverState = ProtocolProverState<G>

type Response = ProtocolResponse<G>

type Witness = ProtocolWitness<G>

type Challenge = <SchnorrProof<G> as SigmaProtocol>::Challenge

fn prover_commit( &self, witness: &Self::Witness, rng: &mut (impl Rng + CryptoRng), ) -> Result<(Self::Commitment, Self::ProverState), Error>

First step of the protocol. Given the witness and RNG, this generates:

fn prover_response( &self, state: Self::ProverState, challenge: &Self::Challenge, ) -> Result<Self::Response, Error>

Computes the prover’s response to a challenge based on the prover state.

fn verifier( &self, commitment: &Self::Commitment, challenge: &Self::Challenge, response: &Self::Response, ) -> Result<(), Error>

Final step of the protocol: checks that the commitment, challenge, and response form a valid transcript.

fn serialize_commitment(&self, commitment: &Self::Commitment) -> Vec<u8>

Serializes a commitment to bytes.

fn serialize_challenge(&self, challenge: &Self::Challenge) -> Vec<u8>

Serializes a challenge to bytes.

fn instance_label(&self) -> impl AsRef<[u8]>

fn protocol_identifier(&self) -> impl AsRef<[u8]>

fn serialize_response(&self, response: &Self::Response) -> Vec<u8>

Serializes a response to bytes.

fn deserialize_commitment(&self, data: &[u8]) -> Result<Self::Commitment, Error>

Deserializes a commitment from bytes.

fn deserialize_challenge(&self, data: &[u8]) -> Result<Self::Challenge, Error>

Deserializes a challenge from bytes.

fn deserialize_response(&self, data: &[u8]) -> Result<Self::Response, Error>

Deserializes a response from bytes.

impl<G: Group + GroupEncoding> SigmaProtocolSimulator for Protocol<G>

fn simulate_commitment( &self, challenge: &Self::Challenge, response: &Self::Response, ) -> Result<Self::Commitment, Error>

Simulates a commitment for which (‘commitment’, ‘challenge’, ‘response’) is a valid transcript.

fn simulate_response<R: Rng + CryptoRng>(&self, rng: &mut R) -> Self::Response

Generates a random response (e.g. for simulation or OR composition).

fn simulate_transcript<R: Rng + CryptoRng>( &self, rng: &mut R, ) -> Result<(Self::Commitment, Self::Challenge, Self::Response), Error>

Generates a full simulated proof transcript (commitment, challenge, response) without requiring knowledge of a witness.