PoS_EVM
/
mcl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[she] modify pairing instead of miller loop

Browse Source
dev
MITSUNARI Shigeo 7 years ago
parent f7e7aa9126
commit ef2fd069db
1 changed files with 20 additions and 31 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 51
      include/mcl/she.hpp

51
include/mcl/she.hpp
Unescape View File

@ -336,12 +336,10 @@ struct SHET {
static G1 P_; static G1 P_;
static G2 Q_; static G2 Q_;
static GT ePQ_; // e(P, Q) static GT ePQ_; // e(P, Q)
static GT mPQ_; // millerLoop(P, Q)
static std::vector<bn_current::Fp6> Qcoeff_; static std::vector<bn_current::Fp6> Qcoeff_;
static local::HashTable<G1> PhashTbl_; static local::HashTable<G1> PhashTbl_;
static mcl::fp::WindowMethod<G2> Qwm_; static mcl::fp::WindowMethod<G2> Qwm_;
typedef local::InterfaceForHashTable<GT, false> GTasEC; typedef local::InterfaceForHashTable<GT, false> GTasEC;
static mcl::fp::WindowMethod<GTasEC> mPQwm_;
static local::HashTable<GT, false> ePQhashTbl_; static local::HashTable<GT, false> ePQhashTbl_;
private: private:
template<class G> template<class G>
@ -427,16 +425,18 @@ private:
g1 = millerLoop(P1, Q) g1 = millerLoop(P1, Q)
g2 = millerLoop(P2, Q) g2 = millerLoop(P2, Q)
*/ */
static void doubleMillerLoop(GT& g1, GT& g2, const G1& P1, const G1& P2, const G2& Q) static void doublePairing(GT& g1, GT& g2, const G1& P1, const G1& P2, const G2& Q)
{ {
#if 1 #if 1
std::vector<bn_current::Fp6> Qcoeff; std::vector<bn_current::Fp6> Qcoeff;
BN::precomputeG2(Qcoeff, Q); BN::precomputeG2(Qcoeff, Q);
BN::precomputedMillerLoop(g1, P1, Qcoeff); BN::precomputedMillerLoop(g1, P1, Qcoeff);
BN::finalExp(g1, g1);
BN::precomputedMillerLoop(g2, P2, Qcoeff); BN::precomputedMillerLoop(g2, P2, Qcoeff);
BN::finalExp(g2, g2);
#else #else
BN::millerLoop(g1, P1, Q); BN::pairing(g1, P1, Q);
BN::millerLoop(g2, P2, Q); BN::pairing(g2, P2, Q);
#endif #endif
} }
static void tensorProduct(GT g[4], const G1& S1, const G1& T1, const G2& S2, const G2& T2) static void tensorProduct(GT g[4], const G1& S1, const G1& T1, const G2& S2, const G2& T2)
@ -444,8 +444,8 @@ private:
/* /*
(S1, T1) x (S2, T2) = (e(S1, S2), e(S1, T2), e(T1, S2), e(T1, T2)) (S1, T1) x (S2, T2) = (e(S1, S2), e(S1, T2), e(T1, S2), e(T1, T2))
*/ */
doubleMillerLoop(g[0], g[2], S1, T1, S2); doublePairing(g[0], g[2], S1, T1, S2);
doubleMillerLoop(g[1], g[3], S1, T1, T2); doublePairing(g[1], g[3], S1, T1, T2);
} }
public: public:
@ -457,12 +457,10 @@ public:
bn_current::initPairing(cp); bn_current::initPairing(cp);
BN::hashAndMapToG1(P_, "0"); BN::hashAndMapToG1(P_, "0");
BN::hashAndMapToG2(Q_, "0"); BN::hashAndMapToG2(Q_, "0");
BN::millerLoop(mPQ_, P_, Q_); BN::pairing(ePQ_, P_, Q_);
BN::finalExp(ePQ_, mPQ_);
BN::precomputeG2(Qcoeff_, Q_); BN::precomputeG2(Qcoeff_, Q_);
const size_t bitSize = Fr::getBitSize(); const size_t bitSize = Fr::getBitSize();
Qwm_.init(Q_, bitSize, local::winSize); Qwm_.init(Q_, bitSize, local::winSize);
mPQwm_.init(static_cast<const GTasEC&>(mPQ_), bitSize, local::winSize);
} }
/* /*
set range for G1-DLP set range for G1-DLP
@ -562,7 +560,6 @@ public:
GT::pow(u, u, x_); GT::pow(u, u, x_);
v *= u; v *= u;
v *= c.g_[0]; v *= c.g_[0];
BN::finalExp(v, v);
return ePQhashTbl_.log(v); return ePQhashTbl_.log(v);
// return log(g, v); // return log(g, v);
} }
@ -668,7 +665,7 @@ public:
rb.setRand(rg); rb.setRand(rg);
rc.setRand(rg); rc.setRand(rg);
GT e; GT e;
#if 1
G1 P1, P2; G1 P1, P2;
G1::mul(P1, xP_, ra); G1::mul(P1, xP_, ra);
if (m) { if (m) {
@ -684,23 +681,15 @@ public:
P1 -= P2; P1 -= P2;
BN::millerLoop(e, P1, yQ_); BN::millerLoop(e, P1, yQ_);
c.g_[0] *= e; c.g_[0] *= e;
#else BN::finalExp(c.g_[0], c.g_[0]);
GT::pow(c.g_[0], mxPQ, ra);
GT::pow(e, myPQ, rb);
c.g_[0] *= e;
GT::pow(e, mxyPQ, -rc);
c.g_[0] *= e;
GT::pow(e, mPQ_, m);
c.g_[0] *= e;
#endif
#if 1 #if 1
mPQwm_.mul(static_cast<GTasEC&>(c.g_[1]), rb); ePQhashTbl_.mulByWindowMethod(c.g_[1], rb);
mPQwm_.mul(static_cast<GTasEC&>(c.g_[2]), ra); ePQhashTbl_.mulByWindowMethod(c.g_[2], ra);
mPQwm_.mul(static_cast<GTasEC&>(c.g_[3]), rc); ePQhashTbl_.mulByWindowMethod(c.g_[3], rc);
#else #else
GT::pow(c.g_[1], mPQ_, rb); GT::pow(c.g_[1], ePQ_, rb);
GT::pow(c.g_[2], mPQ_, ra); GT::pow(c.g_[2], ePQ_, ra);
GT::pow(c.g_[3], mPQ_, rc); GT::pow(c.g_[3], ePQ_, rc);
#endif #endif
} }
template<class RG> template<class RG>
@ -727,9 +716,12 @@ public:
Enc(1) = (S, T) = (Q + r yQ, rQ) = (Q, 0) if r = 0 Enc(1) = (S, T) = (Q + r yQ, rQ) = (Q, 0) if r = 0
cm = c1 * (Q, 0) = (S, T) * (Q, 0) = (e(S, Q), 1, e(T, Q), 1) cm = c1 * (Q, 0) = (S, T) * (Q, 0) = (e(S, Q), 1, e(T, Q), 1)
*/ */
// doubleMillerLoop(cm.g_[0], cm.g_[2], c1.S, c1.T, Q); // doublePairing(cm.g_[0], cm.g_[2], c1.S, c1.T, Q);
BN::precomputedMillerLoop(cm.g_[0], c1.S_, Qcoeff_); BN::precomputedMillerLoop(cm.g_[0], c1.S_, Qcoeff_);
BN::finalExp(cm.g_[0], cm.g_[0]);
BN::precomputedMillerLoop(cm.g_[2], c1.T_, Qcoeff_); BN::precomputedMillerLoop(cm.g_[2], c1.T_, Qcoeff_);
BN::finalExp(cm.g_[2], cm.g_[2]);
cm.g_[1] = 1; cm.g_[1] = 1;
cm.g_[3] = 1; cm.g_[3] = 1;
} }
@ -968,7 +960,6 @@ public:
{ {
/* /*
(S1, T1) * (S2, T2) = (e(S1, S2), e(S1, T2), e(T1, S2), e(T1, T2)) (S1, T1) * (S2, T2) = (e(S1, S2), e(S1, T2), e(T1, S2), e(T1, T2))
call finalExp at once in decrypting c
*/ */
tensorProduct(z.g_, x.S_, x.T_, y.S_, y.T_); tensorProduct(z.g_, x.S_, x.T_, y.S_, y.T_);
} }
@ -1150,11 +1141,9 @@ public:
template<class BN, class Fr> typename BN::G1 SHET<BN, Fr>::P_; template<class BN, class Fr> typename BN::G1 SHET<BN, Fr>::P_;
template<class BN, class Fr> typename BN::G2 SHET<BN, Fr>::Q_; template<class BN, class Fr> typename BN::G2 SHET<BN, Fr>::Q_;
template<class BN, class Fr> typename BN::Fp12 SHET<BN, Fr>::ePQ_; template<class BN, class Fr> typename BN::Fp12 SHET<BN, Fr>::ePQ_;
template<class BN, class Fr> typename BN::Fp12 SHET<BN, Fr>::mPQ_;
template<class BN, class Fr> std::vector<bn_current::Fp6> SHET<BN, Fr>::Qcoeff_; template<class BN, class Fr> std::vector<bn_current::Fp6> SHET<BN, Fr>::Qcoeff_;
template<class BN, class Fr> local::HashTable<typename BN::G1> SHET<BN, Fr>::PhashTbl_; template<class BN, class Fr> local::HashTable<typename BN::G1> SHET<BN, Fr>::PhashTbl_;
template<class BN, class Fr> mcl::fp::WindowMethod<typename BN::G2> SHET<BN, Fr>::Qwm_; template<class BN, class Fr> mcl::fp::WindowMethod<typename BN::G2> SHET<BN, Fr>::Qwm_;
template<class BN, class Fr> mcl::fp::WindowMethod<mcl::she::local::InterfaceForHashTable<typename BN::Fp12, false> > SHET<BN, Fr>::mPQwm_;
template<class BN, class Fr> local::HashTable<typename BN::Fp12, false> SHET<BN, Fr>::ePQhashTbl_; template<class BN, class Fr> local::HashTable<typename BN::Fp12, false> SHET<BN, Fr>::ePQhashTbl_;
typedef mcl::she::SHET<bn_current::BN, bn_current::Fr> SHE; typedef mcl::she::SHET<bn_current::BN, bn_current::Fr> SHE;
typedef SHE::SecretKey SecretKey; typedef SHE::SecretKey SecretKey;

Write Preview
Loading…
Cancel
Save