Struct monero_wallet::ringct::clsag::ClsagMultisig

pub struct ClsagMultisig { /* private fields */ }

FROST-inspired algorithm for producing a CLSAG signature.

Before this has its process_addendum called, a mask must be set. Else this will panic.

The message signed is expected to be a 32-byte value. Per Monero, it’s the keccak256 hash of the transaction data which is signed. This will panic if the message is not a 32-byte value.

Implementations

impl ClsagMultisig

pub fn new( transcript: DigestTranscript<CoreWrapper<CtVariableCoreWrapper<Blake2bVarCore, UInt<UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, B0>>>>, context: ClsagContext, ) -> (ClsagMultisig, ClsagMultisigMaskSender)

Construct a new instance of multisignature CLSAG signing.

pub fn key_image_generator(&self) -> EdwardsPoint

The key image generator used by the signer.

Trait Implementations

impl Algorithm<Ed25519> for ClsagMultisig

type Transcript = DigestTranscript<CoreWrapper<CtVariableCoreWrapper<Blake2bVarCore, UInt<UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, B0>>>>

The transcript format this algorithm uses. This likely should NOT be the IETF-compatible transcript included in this crate.

type Addendum = ClsagAddendum

Serializable addendum, used in algorithms requiring more data than just the nonces.

type Signature = (Clsag, EdwardsPoint)

The resulting type of the signatures this algorithm will produce.

fn nonces(&self) -> Vec<Vec<EdwardsPoint>>

Obtain the list of nonces to generate, as specified by the generators to create commitments against per-nonce.

fn preprocess_addendum<R>( &mut self, _rng: &mut R, keys: &ThresholdKeys<Ed25519>, ) -> ClsagAddendum

where R: RngCore + CryptoRng,

Generate an addendum to FROST“s preprocessing stage.

fn read_addendum<R>(&self, reader: &mut R) -> Result<ClsagAddendum, Error>

where R: Read,

Read an addendum from a reader.

fn process_addendum( &mut self, view: &ThresholdView<Ed25519>, l: Participant, addendum: ClsagAddendum, ) -> Result<(), FrostError>

Process the addendum for the specified participant. Guaranteed to be called in order.

fn transcript( &mut self, ) -> &mut <ClsagMultisig as Algorithm<Ed25519>>::Transcript

Obtain a mutable borrow of the underlying transcript.

fn sign_share( &mut self, view: &ThresholdView<Ed25519>, nonce_sums: &[Vec<EdwardsPoint>], nonces: Vec<Zeroizing<Scalar>>, msg: &[u8], ) -> Scalar

Sign a share with the given secret/nonce. The secret will already have been its lagrange coefficient applied so it is the necessary key share. The nonce will already have been processed into the combined form d + (e * p).

fn verify( &self, _: EdwardsPoint, _: &[Vec<EdwardsPoint>], sum: Scalar, ) -> Option<<ClsagMultisig as Algorithm<Ed25519>>::Signature>

Verify a signature.

fn verify_share( &self, verification_share: EdwardsPoint, nonces: &[Vec<EdwardsPoint>], share: Scalar, ) -> Result<Vec<(Scalar, EdwardsPoint)>, ()>

Verify a specific share given as a response. This function should return a series of pairs whose products should sum to zero for a valid share. Any error raised is treated as the share being invalid.

impl Clone for ClsagMultisig

fn clone(&self) -> ClsagMultisig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClsagMultisig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.