bulletproofs-0.2.0

Bulletproofs.InnerProductProof

Synopsis

# Documentation

Arguments

 :: InnerProductBase Generators Gs, Hs, h -> Point Commitment P = A + xS − zG + (z*y^n + z^2 * 2^n) * hs' of vectors l and r whose inner product is t -> InnerProductWitness Vectors l and r that hide bit vectors aL and aR, respectively -> InnerProductProof

Generate proof that a witness l, r satisfies the inner product relation on public input (Gs, Hs, h)

Arguments

 :: Integer Range upper bound -> InnerProductBase Generators Gs, Hs, h -> Point Commitment P -> InnerProductProof Proof that a secret committed value lies in a certain interval -> Bool

Optimized non-interactive verifier using multi-exponentiation and batch verification

Constructors

 InnerProductProof FieldslCommits :: [Point]Vector of commitments of the elements in the original vector l whose size is the logarithm of base 2 of the size of vector lrCommits :: [Point]Vector of commitments of the elements in the original vector r whose size is the logarithm of base 2 of the size of vector rl :: FqRemaining element of vector l at the end of the recursive algorithm that generates the inner-product proofr :: FqRemaining element of vector r at the end of the recursive algorithm that generates the inner-product proof
Instances
 Source # Instance detailsDefined in Bulletproofs.InnerProductProof.Internal Methods Source # Instance detailsDefined in Bulletproofs.InnerProductProof.Internal MethodsshowList :: [InnerProductProof] -> ShowS #

Constructors

 InnerProductBase FieldsbGs :: [Point]Independent generator Gs ∈ G^nbHs :: [Point]Independent generator Hs ∈ G^nbH :: PointInternally fixed group element H ∈ G for which there is no known discrete-log relation among Gs, Hs, bG
Instances
 Source # Instance detailsDefined in Bulletproofs.InnerProductProof.Internal Methods Source # Instance detailsDefined in Bulletproofs.InnerProductProof.Internal MethodsshowList :: [InnerProductBase] -> ShowS #

Constructors

 InnerProductWitness Fieldsls :: [Fq]Vector of values l that the prover uses to compute lCommits in the recursive inner product algorithmrs :: [Fq]Vector of values r that the prover uses to compute rCommits in the recursive inner product algorithm
Instances
 Source # Instance detailsDefined in Bulletproofs.InnerProductProof.Internal Methods Source # Instance detailsDefined in Bulletproofs.InnerProductProof.Internal Methods