main_impl.h File Reference

#include "group.h"
#include "scalar.h"
#include "include/secp256k1_bulletproofs.h"
#include "modules/commitment/main_impl.h"
#include "modules/bulletproofs/parser_impl.h"
#include "modules/bulletproofs/inner_product_impl.h"
#include "modules/bulletproofs/circuit_compress_impl.h"
#include "modules/bulletproofs/circuit_impl.h"
#include "modules/bulletproofs/rangeproof_impl.h"
#include "modules/bulletproofs/util.h"

Include dependency graph for main_impl.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	secp256k1_fast_scalar
struct	secp256k1_bulletproof_wmatrix_entry
struct	secp256k1_bulletproof_wmatrix_row
struct	secp256k1_bulletproof_circuit
struct	secp256k1_bulletproof_circuit_assignment
struct	secp256k1_bulletproof_generators

Functions
secp256k1_bulletproof_generators *	secp256k1_bulletproof_generators_create_with_pregenerated (const secp256k1_context2 *ctx)
secp256k1_bulletproof_generators *	secp256k1_bulletproof_generators_create (const secp256k1_context2 *ctx, const secp256k1_generator *blinding_gen, size_t n)
	Allocates and initializes a list of NUMS generators, along with precomputation data Returns a list of generators, or NULL if allocation failed. More...
void	secp256k1_bulletproof_generators_destroy (const secp256k1_context2 *ctx, secp256k1_bulletproof_generators *gens)
	Destroys a list of NUMS generators, freeing allocated memory Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the generator set to be destroyed. More...
int	secp256k1_bulletproof_rangeproof_verify (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const unsigned char *proof, size_t plen, const uint64_t *min_value, const secp256k1_pedersen_commitment *commit, size_t n_commits, size_t nbits, const secp256k1_generator *value_gen, const unsigned char *extra_commit, size_t extra_commit_len)
	Verifies a single bulletproof (aggregate) rangeproof Returns: 1: rangeproof was valid 0: rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of the proof min_value: array of minimum values to prove ranges above, or NULL for all-zeroes commit: array of pedersen commitment that this rangeproof is over (cannot be NULL) n_commits: number of commitments in the above array (cannot be 0) nbits: number of bits proven for each range value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: length of additional data. More...
int	secp256k1_bulletproof_rangeproof_verify_multi (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const unsigned char *const *proof, size_t n_proofs, size_t plen, const uint64_t *const *min_value, const secp256k1_pedersen_commitment *const *commit, size_t n_commits, size_t nbits, const secp256k1_generator *value_gen, const unsigned char *const *extra_commit, size_t *extra_commit_len)
	Batch-verifies multiple bulletproof (aggregate) rangeproofs of the same size using same generator Returns: 1: all rangeproofs were valid 0: some rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: array of byte-serialized rangeproofs (cannot be NULL) n_proofs: number of proofs in the above array, and number of arrays in the commit array plen: length of every individual proof min_value: array of arrays of minimum values to prove ranges above, or NULL for all-zeroes commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL) n_commits: number of commitments in each element of the above array (cannot be 0) nbits: number of bits in each proof value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: array of lengths of additional data. More...
int	secp256k1_bulletproof_rangeproof_rewind (const secp256k1_context2 *ctx, const secp256k1_bulletproof_generators *gens, uint64_t *value, unsigned char *blind, const unsigned char *proof, size_t plen, uint64_t min_value, const secp256k1_pedersen_commitment *commit, const secp256k1_generator *value_gen, const unsigned char *nonce, const unsigned char *extra_commit, size_t extra_commit_len)
	Extracts the value and blinding factor from a single-commit rangeproof given a secret nonce Returns: 1: value and blinding factor were extracted and matched the input commit 0: one of the above was not true, extraction failed Args: ctx: pointer to a context object (cannot be NULL) gens: generator set used to make original proof (cannot be NULL) Out: value: pointer to value that will be extracted blind: pointer to 32-byte array for blinding factor to be extracted In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of every individual proof min_value: minimum value that the proof ranges over commit: pedersen commitment that the rangeproof is over (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data. More...
int	secp256k1_bulletproof_rangeproof_prove (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, unsigned char *proof, size_t *plen, const uint64_t *value, const uint64_t *min_value, const unsigned char *const *blind, size_t n_commits, const secp256k1_generator *value_gen, size_t nbits, const unsigned char *nonce, const unsigned char *extra_commit, size_t extra_commit_len)
	Produces an aggregate Bulletproof rangeproof for a set of Pedersen commitments Returns: 1: rangeproof was successfully created 0: rangeproof could not be created, or out of memory Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/out: plen: pointer to size of proof, to be replaced with actual length of proof (cannot be NULL) In: value: array of values committed by the Pedersen commitments (cannot be NULL) min_value: array of minimum values to prove ranges above, or NULL for all-zeroes blind: array of blinding factors of the Pedersen commitments (cannot be NULL) n_commits: number of entries in the value and blind arrays value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nbits: number of bits proven for each range nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data. More...
secp256k1_bulletproof_circuit *	secp256k1_bulletproof_circuit_parse (const secp256k1_context2 *ctx, const char *description)
	Parses a circuit from an ad-hoc text string format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: description: description of the circuit. More...
int	secp256k1_bulletproof_circuit_prove (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const secp256k1_bulletproof_circuit *circ, unsigned char *proof, size_t *plen, const secp256k1_bulletproof_circuit_assignment *assn, const unsigned char **blind, size_t n_commits, const unsigned char *nonce, const secp256k1_generator *value_gen, const unsigned char *extra_commit, size_t extra_commit_len)
	Produces a bulletproof zero-knowledge proof (zkp) Returns: 1: proof was successfully created 0: proof failed to create Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/Out: plen: pointer to length of the proof, initially set to length of buffer (cannot be NULL) In: assn: wire assignment to prove in zero knowledge (cannot be NULL) blind: array of blinding factors of the Pedersen commitments (cannot be NULL unless n_commits is 0) n_commits: number of entries in the blind array nonce: seed used for random number generation (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data. More...
int	secp256k1_bulletproof_circuit_verify (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const secp256k1_bulletproof_circuit *circ, const unsigned char *proof, size_t plen, const secp256k1_pedersen_commitment *commit, size_t n_commits, const secp256k1_generator *value_gen, const unsigned char *extra_commit, size_t extra_commit_len)
	Verifies a single bulletproof zero-knowledge proof (zkp) Returns: 1: zkp accepted 0: zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) In: proof: byte-serialized proof (cannot be NULL) plen: length of the proof commit: array of pedersen commitment that this rangeproof is over (cannot be NULL unless n_commits is 0) n_commits: number of commitments in the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data. More...
int	secp256k1_bulletproof_circuit_verify_multi (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const secp256k1_bulletproof_circuit *const *circ, const unsigned char *const *proof, size_t n_proofs, size_t plen, const secp256k1_pedersen_commitment **commit, size_t *n_commits, const secp256k1_generator *value_gen, const unsigned char **extra_commit, size_t *extra_commit_len)
	Batch-verifies multiple bulletproof zero-knowledge proofs of equally-sized circuits (zkp) Returns: 1: all zkps accepted 0: some zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circs: array of circuits, one per proof In: proof: array of byte-serialized proofs (cannot be NULL) n_proofs: number of proofs in above array plen: length of the all proofs commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL unless n_commits is NULL) n_commits: array of number of commitments in each element of the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: array of additonal data committed to by the rangeproof extra_commit_len: array of lengths of additional data. More...
secp256k1_bulletproof_circuit *	secp256k1_bulletproof_circuit_decode (const secp256k1_context2 *ctx, const char *fname)
	Decodes a circuit which is serialized in an opaque binary format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit. More...
secp256k1_bulletproof_circuit_assignment *	secp256k1_bulletproof_circuit_assignment_decode (const secp256k1_context2 *ctx, const char *fname)
	Decodes an accepting wire assignment which is serialized in an opaque binary format Returns a circuit assignment, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit. More...
void	secp256k1_bulletproof_circuit_destroy (const secp256k1_context2 *ctx, secp256k1_bulletproof_circuit *circ)
	Destroys a circuit Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the circuit to be destroyed. More...
void	secp256k1_bulletproof_circuit_assignment_destroy (const secp256k1_context2 *ctx, secp256k1_bulletproof_circuit_assignment *assn)
	Destroys a circuit assignment Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the assignment to be destroyed. More...

Function Documentation

secp256k1_bulletproof_circuit_assignment_decode()

secp256k1_bulletproof_circuit_assignment* secp256k1_bulletproof_circuit_assignment_decode	(	const secp256k1_context2 *	ctx,
		const char *	fname
	)

Decodes an accepting wire assignment which is serialized in an opaque binary format Returns a circuit assignment, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit.

Definition at line 877 of file main_impl.h.

secp256k1_bulletproof_circuit_assignment_destroy()

void secp256k1_bulletproof_circuit_assignment_destroy	(	const secp256k1_context2 *	ctx,
		secp256k1_bulletproof_circuit_assignment *	assn
	)

Destroys a circuit assignment Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the assignment to be destroyed.

Definition at line 974 of file main_impl.h.

secp256k1_bulletproof_circuit_decode()

secp256k1_bulletproof_circuit* secp256k1_bulletproof_circuit_decode	(	const secp256k1_context2 *	ctx,
		const char *	fname
	)

Decodes a circuit which is serialized in an opaque binary format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit.

Definition at line 813 of file main_impl.h.

secp256k1_bulletproof_circuit_destroy()

void secp256k1_bulletproof_circuit_destroy	(	const secp256k1_context2 *	ctx,
		secp256k1_bulletproof_circuit *	circ
	)

Destroys a circuit Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the circuit to be destroyed.

Definition at line 964 of file main_impl.h.

secp256k1_bulletproof_circuit_parse()

secp256k1_bulletproof_circuit* secp256k1_bulletproof_circuit_parse	(	const secp256k1_context2 *	ctx,
		const char *	description
	)

Parses a circuit from an ad-hoc text string format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: description: description of the circuit.

Definition at line 633 of file main_impl.h.

secp256k1_bulletproof_circuit_prove()

int secp256k1_bulletproof_circuit_prove	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const secp256k1_bulletproof_circuit *	circ,
		unsigned char *	proof,
		size_t *	plen,
		const secp256k1_bulletproof_circuit_assignment *	assn,
		const unsigned char **	blind,
		size_t	n_commits,
		const unsigned char *	nonce,
		const secp256k1_generator *	value_gen,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Produces a bulletproof zero-knowledge proof (zkp) Returns: 1: proof was successfully created
0: proof failed to create Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/Out: plen: pointer to length of the proof, initially set to length of buffer (cannot be NULL) In: assn: wire assignment to prove in zero knowledge (cannot be NULL) blind: array of blinding factors of the Pedersen commitments (cannot be NULL unless n_commits is 0) n_commits: number of entries in the blind array nonce: seed used for random number generation (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data.

Definition at line 639 of file main_impl.h.

secp256k1_bulletproof_circuit_verify()

int secp256k1_bulletproof_circuit_verify	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const secp256k1_bulletproof_circuit *	circ,
		const unsigned char *	proof,
		size_t	plen,
		const secp256k1_pedersen_commitment *	commit,
		size_t	n_commits,
		const secp256k1_generator *	value_gen,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Verifies a single bulletproof zero-knowledge proof (zkp) Returns: 1: zkp accepted 0: zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) In: proof: byte-serialized proof (cannot be NULL) plen: length of the proof commit: array of pedersen commitment that this rangeproof is over (cannot be NULL unless n_commits is 0) n_commits: number of commitments in the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data.

Definition at line 705 of file main_impl.h.

secp256k1_bulletproof_circuit_verify_multi()

int secp256k1_bulletproof_circuit_verify_multi	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const secp256k1_bulletproof_circuit *const *	circ,
		const unsigned char *const *	proof,
		size_t	n_proofs,
		size_t	plen,
		const secp256k1_pedersen_commitment **	commit,
		size_t *	n_commits,
		const secp256k1_generator *	value_gen,
		const unsigned char **	extra_commit,
		size_t *	extra_commit_len
	)

Batch-verifies multiple bulletproof zero-knowledge proofs of equally-sized circuits (zkp) Returns: 1: all zkps accepted 0: some zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circs: array of circuits, one per proof In: proof: array of byte-serialized proofs (cannot be NULL) n_proofs: number of proofs in above array plen: length of the all proofs commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL unless n_commits is NULL) n_commits: array of number of commitments in each element of the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: array of additonal data committed to by the rangeproof extra_commit_len: array of lengths of additional data.

Definition at line 750 of file main_impl.h.

secp256k1_bulletproof_generators_create()

secp256k1_bulletproof_generators* secp256k1_bulletproof_generators_create	(	const secp256k1_context2 *	ctx,
		const secp256k1_generator *	blinding_gen,
		size_t	n
	)

Allocates and initializes a list of NUMS generators, along with precomputation data Returns a list of generators, or NULL if allocation failed.

Args: ctx: pointer to a context object (cannot be NULL) In: blinding_gen: generator that blinding factors will be multiplied by (cannot be NULL) n: number of NUMS generators to produce

Definition at line 427 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_generators_create_with_pregenerated()

secp256k1_bulletproof_generators* secp256k1_bulletproof_generators_create_with_pregenerated

(

const secp256k1_context2 *

ctx

)

Definition at line 72 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_generators_destroy()

void secp256k1_bulletproof_generators_destroy	(	const secp256k1_context2 *	ctx,
		secp256k1_bulletproof_generators *	gens
	)

Destroys a list of NUMS generators, freeing allocated memory Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the generator set to be destroyed.

Definition at line 469 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_rangeproof_prove()

int secp256k1_bulletproof_rangeproof_prove	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		unsigned char *	proof,
		size_t *	plen,
		const uint64_t *	value,
		const uint64_t *	min_value,
		const unsigned char *const *	blind,
		size_t	n_commits,
		const secp256k1_generator *	value_gen,
		size_t	nbits,
		const unsigned char *	nonce,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Produces an aggregate Bulletproof rangeproof for a set of Pedersen commitments Returns: 1: rangeproof was successfully created 0: rangeproof could not be created, or out of memory Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/out: plen: pointer to size of proof, to be replaced with actual length of proof (cannot be NULL) In: value: array of values committed by the Pedersen commitments (cannot be NULL) min_value: array of minimum values to prove ranges above, or NULL for all-zeroes blind: array of blinding factors of the Pedersen commitments (cannot be NULL) n_commits: number of entries in the value and blind arrays value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nbits: number of bits proven for each range nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data.

Definition at line 582 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_rangeproof_rewind()

int secp256k1_bulletproof_rangeproof_rewind	(	const secp256k1_context2 *	ctx,
		const secp256k1_bulletproof_generators *	gens,
		uint64_t *	value,
		unsigned char *	blind,
		const unsigned char *	proof,
		size_t	plen,
		uint64_t	min_value,
		const secp256k1_pedersen_commitment *	commit,
		const secp256k1_generator *	value_gen,
		const unsigned char *	nonce,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Extracts the value and blinding factor from a single-commit rangeproof given a secret nonce Returns: 1: value and blinding factor were extracted and matched the input commit 0: one of the above was not true, extraction failed Args: ctx: pointer to a context object (cannot be NULL) gens: generator set used to make original proof (cannot be NULL) Out: value: pointer to value that will be extracted blind: pointer to 32-byte array for blinding factor to be extracted In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of every individual proof min_value: minimum value that the proof ranges over commit: pedersen commitment that the rangeproof is over (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data.

Definition at line 561 of file main_impl.h.

secp256k1_bulletproof_rangeproof_verify()

int secp256k1_bulletproof_rangeproof_verify	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const unsigned char *	proof,
		size_t	plen,
		const uint64_t *	min_value,
		const secp256k1_pedersen_commitment *	commit,
		size_t	n_commits,
		size_t	nbits,
		const secp256k1_generator *	value_gen,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Verifies a single bulletproof (aggregate) rangeproof Returns: 1: rangeproof was valid 0: rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of the proof min_value: array of minimum values to prove ranges above, or NULL for all-zeroes commit: array of pedersen commitment that this rangeproof is over (cannot be NULL) n_commits: number of commitments in the above array (cannot be 0) nbits: number of bits proven for each range value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: length of additional data.

Definition at line 477 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_rangeproof_verify_multi()

int secp256k1_bulletproof_rangeproof_verify_multi	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const unsigned char *const *	proof,
		size_t	n_proofs,
		size_t	plen,
		const uint64_t *const *	min_value,
		const secp256k1_pedersen_commitment *const *	commit,
		size_t	n_commits,
		size_t	nbits,
		const secp256k1_generator *	value_gen,
		const unsigned char *const *	extra_commit,
		size_t *	extra_commit_len
	)

Batch-verifies multiple bulletproof (aggregate) rangeproofs of the same size using same generator Returns: 1: all rangeproofs were valid 0: some rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: array of byte-serialized rangeproofs (cannot be NULL) n_proofs: number of proofs in the above array, and number of arrays in the commit array plen: length of every individual proof min_value: array of arrays of minimum values to prove ranges above, or NULL for all-zeroes commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL) n_commits: number of commitments in each element of the above array (cannot be 0) nbits: number of bits in each proof value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: array of lengths of additional data.

Definition at line 516 of file main_impl.h.