secp256k1_bulletproofs.h File Reference

#include "secp256k1_2.h"
#include "secp256k1_generator.h"
#include "secp256k1_rangeproof.h"

Include dependency graph for secp256k1_bulletproofs.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Macros
#define	SECP256K1_BULLETPROOF_CIRCUIT_VERSION   1
	Version number used in header of circuit and circuit-assignment binary files. More...
#define	SECP256K1_BULLETPROOF_MAX_DEPTH   31
#define	SECP256K1_BULLETPROOF_MAX_CIRCUIT   (1024*1024*25)
#define	SECP256K1_BULLETPROOF_MAX_PROOF   (160 + 36*32 + 7)

Typedefs
typedef struct secp256k1_bulletproof_generators	secp256k1_bulletproof_generators
	Opaque structure representing a large number of NUMS generators. More...
typedef struct secp256k1_bulletproof_circuit	secp256k1_bulletproof_circuit
	Opaque type representing an arithmetic circuit. More...
typedef struct secp256k1_bulletproof_circuit_assignment	secp256k1_bulletproof_circuit_assignment
	Opaque type representing an assignment to the wires of an arithmetic circuit. More...

Functions
SECP256K1_API secp256k1_bulletproof_generators *	secp256k1_bulletproof_generators_create (const secp256k1_context2 *ctx, const secp256k1_generator *blinding_gen, size_t n) SECP256K1_ARG_NONNULL(1)
	Allocates and initializes a list of NUMS generators, along with precomputation data Returns a list of generators, or NULL if allocation failed. More...
SECP256K1_API secp256k1_bulletproof_generators *	secp256k1_bulletproof_generators_create_with_pregenerated (const secp256k1_context2 *ctx) SECP256K1_ARG_NONNULL(1)
SECP256K1_API void	secp256k1_bulletproof_generators_destroy (const secp256k1_context2 *ctx, secp256k1_bulletproof_generators *gen) SECP256K1_ARG_NONNULL(1)
	Destroys a list of NUMS generators, freeing allocated memory Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the generator set to be destroyed. More...
SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int	secp256k1_bulletproof_rangeproof_verify (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const unsigned char *proof, size_t plen, const uint64_t *min_value, const secp256k1_pedersen_commitment *commit, size_t n_commits, size_t nbits, const secp256k1_generator *value_gen, const unsigned char *extra_commit, size_t extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(7) SECP256K1_ARG_NONNULL(10)
	Verifies a single bulletproof (aggregate) rangeproof Returns: 1: rangeproof was valid 0: rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of the proof min_value: array of minimum values to prove ranges above, or NULL for all-zeroes commit: array of pedersen commitment that this rangeproof is over (cannot be NULL) n_commits: number of commitments in the above array (cannot be 0) nbits: number of bits proven for each range value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: length of additional data. More...
SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int	secp256k1_bulletproof_rangeproof_verify_multi (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const unsigned char *const *proof, size_t n_proofs, size_t plen, const uint64_t *const *min_value, const secp256k1_pedersen_commitment *const *commit, size_t n_commits, size_t nbits, const secp256k1_generator *value_gen, const unsigned char *const *extra_commit, size_t *extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(8)
	Batch-verifies multiple bulletproof (aggregate) rangeproofs of the same size using same generator Returns: 1: all rangeproofs were valid 0: some rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: array of byte-serialized rangeproofs (cannot be NULL) n_proofs: number of proofs in the above array, and number of arrays in the commit array plen: length of every individual proof min_value: array of arrays of minimum values to prove ranges above, or NULL for all-zeroes commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL) n_commits: number of commitments in each element of the above array (cannot be 0) nbits: number of bits in each proof value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: array of lengths of additional data. More...
SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int	secp256k1_bulletproof_rangeproof_rewind (const secp256k1_context2 *ctx, const secp256k1_bulletproof_generators *gens, uint64_t *value, unsigned char *blind, const unsigned char *proof, size_t plen, uint64_t min_value, const secp256k1_pedersen_commitment *commit, const secp256k1_generator *value_gen, const unsigned char *nonce, const unsigned char *extra_commit, size_t extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(5) SECP256K1_ARG_NONNULL(8) SECP256K1_ARG_NONNULL(9)
	Extracts the value and blinding factor from a single-commit rangeproof given a secret nonce Returns: 1: value and blinding factor were extracted and matched the input commit 0: one of the above was not true, extraction failed Args: ctx: pointer to a context object (cannot be NULL) gens: generator set used to make original proof (cannot be NULL) Out: value: pointer to value that will be extracted blind: pointer to 32-byte array for blinding factor to be extracted In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of every individual proof min_value: minimum value that the proof ranges over commit: pedersen commitment that the rangeproof is over (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data. More...
SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int	secp256k1_bulletproof_rangeproof_prove (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, unsigned char *proof, size_t *plen, const uint64_t *value, const uint64_t *min_value, const unsigned char *const *blind, size_t n_commits, const secp256k1_generator *value_gen, size_t nbits, const unsigned char *nonce, const unsigned char *extra_commit, size_t extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(5) SECP256K1_ARG_NONNULL(6) SECP256K1_ARG_NONNULL(8) SECP256K1_ARG_NONNULL(10) SECP256K1_ARG_NONNULL(12)
	Produces an aggregate Bulletproof rangeproof for a set of Pedersen commitments Returns: 1: rangeproof was successfully created 0: rangeproof could not be created, or out of memory Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/out: plen: pointer to size of proof, to be replaced with actual length of proof (cannot be NULL) In: value: array of values committed by the Pedersen commitments (cannot be NULL) min_value: array of minimum values to prove ranges above, or NULL for all-zeroes blind: array of blinding factors of the Pedersen commitments (cannot be NULL) n_commits: number of entries in the value and blind arrays value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nbits: number of bits proven for each range nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data. More...
SECP256K1_API secp256k1_bulletproof_circuit *	secp256k1_bulletproof_circuit_parse (const secp256k1_context2 *ctx, const char *description) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
	Parses a circuit from an ad-hoc text string format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: description: description of the circuit. More...
secp256k1_bulletproof_circuit *	secp256k1_bulletproof_circuit_decode (const secp256k1_context2 *ctx, const char *fname)
	Decodes a circuit which is serialized in an opaque binary format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit. More...
SECP256K1_API void	secp256k1_bulletproof_circuit_destroy (const secp256k1_context2 *ctx, secp256k1_bulletproof_circuit *circ) SECP256K1_ARG_NONNULL(1)
	Destroys a circuit Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the circuit to be destroyed. More...
SECP256K1_API secp256k1_bulletproof_circuit_assignment *	secp256k1_bulletproof_circuit_assignment_decode (const secp256k1_context2 *ctx, const char *fname) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
	Decodes an accepting wire assignment which is serialized in an opaque binary format Returns a circuit assignment, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit. More...
SECP256K1_API void	secp256k1_bulletproof_circuit_assignment_destroy (const secp256k1_context2 *ctx, secp256k1_bulletproof_circuit_assignment *assn) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)
	Destroys a circuit assignment Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the assignment to be destroyed. More...
SECP256K1_API int	secp256k1_bulletproof_circuit_verify (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const secp256k1_bulletproof_circuit *circ, const unsigned char *proof, size_t plen, const secp256k1_pedersen_commitment *commit, size_t n_commits, const secp256k1_generator *value_gen, const unsigned char *extra_commit, size_t extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(5) SECP256K1_ARG_NONNULL(9)
	Verifies a single bulletproof zero-knowledge proof (zkp) Returns: 1: zkp accepted 0: zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) In: proof: byte-serialized proof (cannot be NULL) plen: length of the proof commit: array of pedersen commitment that this rangeproof is over (cannot be NULL unless n_commits is 0) n_commits: number of commitments in the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data. More...
SECP256K1_API int	secp256k1_bulletproof_circuit_verify_multi (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const secp256k1_bulletproof_circuit *const *circ, const unsigned char *const *proof, size_t n_proofs, size_t plen, const secp256k1_pedersen_commitment **commit, size_t *n_commits, const secp256k1_generator *value_gen, const unsigned char **extra_commit, size_t *extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(5) SECP256K1_ARG_NONNULL(10)
	Batch-verifies multiple bulletproof zero-knowledge proofs of equally-sized circuits (zkp) Returns: 1: all zkps accepted 0: some zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circs: array of circuits, one per proof In: proof: array of byte-serialized proofs (cannot be NULL) n_proofs: number of proofs in above array plen: length of the all proofs commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL unless n_commits is NULL) n_commits: array of number of commitments in each element of the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: array of additonal data committed to by the rangeproof extra_commit_len: array of lengths of additional data. More...
SECP256K1_API int	secp256k1_bulletproof_circuit_prove (const secp256k1_context2 *ctx, secp256k1_scratch_space2 *scratch, const secp256k1_bulletproof_generators *gens, const secp256k1_bulletproof_circuit *circ, unsigned char *proof, size_t *plen, const secp256k1_bulletproof_circuit_assignment *assn, const unsigned char **blind, size_t n_commits, const unsigned char *nonce, const secp256k1_generator *value_gen, const unsigned char *extra_commit, size_t extra_commit_len) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4) SECP256K1_ARG_NONNULL(5) SECP256K1_ARG_NONNULL(6) SECP256K1_ARG_NONNULL(7) SECP256K1_ARG_NONNULL(10) SECP256K1_ARG_NONNULL(11)
	Produces a bulletproof zero-knowledge proof (zkp) Returns: 1: proof was successfully created 0: proof failed to create Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/Out: plen: pointer to length of the proof, initially set to length of buffer (cannot be NULL) In: assn: wire assignment to prove in zero knowledge (cannot be NULL) blind: array of blinding factors of the Pedersen commitments (cannot be NULL unless n_commits is 0) n_commits: number of entries in the blind array nonce: seed used for random number generation (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data. More...

Macro Definition Documentation

SECP256K1_BULLETPROOF_CIRCUIT_VERSION

#define SECP256K1_BULLETPROOF_CIRCUIT_VERSION   1

Version number used in header of circuit and circuit-assignment binary files.

Definition at line 22 of file secp256k1_bulletproofs.h.

SECP256K1_BULLETPROOF_MAX_CIRCUIT

#define SECP256K1_BULLETPROOF_MAX_CIRCUIT   (1024*1024*25)

Definition at line 28 of file secp256k1_bulletproofs.h.

SECP256K1_BULLETPROOF_MAX_DEPTH

#define SECP256K1_BULLETPROOF_MAX_DEPTH   31

Definition at line 25 of file secp256k1_bulletproofs.h.

SECP256K1_BULLETPROOF_MAX_PROOF

#define SECP256K1_BULLETPROOF_MAX_PROOF   (160 + 36*32 + 7)

Definition at line 31 of file secp256k1_bulletproofs.h.

Typedef Documentation

secp256k1_bulletproof_circuit

typedef struct secp256k1_bulletproof_circuit secp256k1_bulletproof_circuit

Opaque type representing an arithmetic circuit.

Definition at line 16 of file secp256k1_bulletproofs.h.

secp256k1_bulletproof_circuit_assignment

typedef struct secp256k1_bulletproof_circuit_assignment secp256k1_bulletproof_circuit_assignment

Opaque type representing an assignment to the wires of an arithmetic circuit.

Definition at line 19 of file secp256k1_bulletproofs.h.

secp256k1_bulletproof_generators

typedef struct secp256k1_bulletproof_generators secp256k1_bulletproof_generators

Opaque structure representing a large number of NUMS generators.

Definition at line 13 of file secp256k1_bulletproofs.h.

Function Documentation

secp256k1_bulletproof_circuit_assignment_decode()

SECP256K1_API secp256k1_bulletproof_circuit_assignment* secp256k1_bulletproof_circuit_assignment_decode	(	const secp256k1_context2 *	ctx,
		const char *	fname
	)

Decodes an accepting wire assignment which is serialized in an opaque binary format Returns a circuit assignment, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit.

Definition at line 877 of file main_impl.h.

secp256k1_bulletproof_circuit_assignment_destroy()

SECP256K1_API void secp256k1_bulletproof_circuit_assignment_destroy	(	const secp256k1_context2 *	ctx,
		secp256k1_bulletproof_circuit_assignment *	assn
	)

Destroys a circuit assignment Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the assignment to be destroyed.

Definition at line 974 of file main_impl.h.

secp256k1_bulletproof_circuit_decode()

secp256k1_bulletproof_circuit* secp256k1_bulletproof_circuit_decode	(	const secp256k1_context2 *	ctx,
		const char *	fname
	)

Decodes a circuit which is serialized in an opaque binary format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: fname: path to a file containing the circuit.

Definition at line 813 of file main_impl.h.

secp256k1_bulletproof_circuit_destroy()

SECP256K1_API void secp256k1_bulletproof_circuit_destroy	(	const secp256k1_context2 *	ctx,
		secp256k1_bulletproof_circuit *	circ
	)

Destroys a circuit Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the circuit to be destroyed.

Definition at line 964 of file main_impl.h.

secp256k1_bulletproof_circuit_parse()

SECP256K1_API secp256k1_bulletproof_circuit* secp256k1_bulletproof_circuit_parse	(	const secp256k1_context2 *	ctx,
		const char *	description
	)

Parses a circuit from an ad-hoc text string format Returns a circuit, or NULL on failure Args: ctx: pointer to a context object (cannot be NULL) In: description: description of the circuit.

Definition at line 633 of file main_impl.h.

secp256k1_bulletproof_circuit_prove()

SECP256K1_API int secp256k1_bulletproof_circuit_prove	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const secp256k1_bulletproof_circuit *	circ,
		unsigned char *	proof,
		size_t *	plen,
		const secp256k1_bulletproof_circuit_assignment *	assn,
		const unsigned char **	blind,
		size_t	n_commits,
		const unsigned char *	nonce,
		const secp256k1_generator *	value_gen,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Produces a bulletproof zero-knowledge proof (zkp) Returns: 1: proof was successfully created
0: proof failed to create Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/Out: plen: pointer to length of the proof, initially set to length of buffer (cannot be NULL) In: assn: wire assignment to prove in zero knowledge (cannot be NULL) blind: array of blinding factors of the Pedersen commitments (cannot be NULL unless n_commits is 0) n_commits: number of entries in the blind array nonce: seed used for random number generation (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data.

Definition at line 639 of file main_impl.h.

secp256k1_bulletproof_circuit_verify()

SECP256K1_API int secp256k1_bulletproof_circuit_verify	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const secp256k1_bulletproof_circuit *	circ,
		const unsigned char *	proof,
		size_t	plen,
		const secp256k1_pedersen_commitment *	commit,
		size_t	n_commits,
		const secp256k1_generator *	value_gen,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Verifies a single bulletproof zero-knowledge proof (zkp) Returns: 1: zkp accepted 0: zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circ: circuit that the zkp is over (cannot be NULL) In: proof: byte-serialized proof (cannot be NULL) plen: length of the proof commit: array of pedersen commitment that this rangeproof is over (cannot be NULL unless n_commits is 0) n_commits: number of commitments in the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the zkp extra_commit_len: length of additional data.

Definition at line 705 of file main_impl.h.

secp256k1_bulletproof_circuit_verify_multi()

SECP256K1_API int secp256k1_bulletproof_circuit_verify_multi	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const secp256k1_bulletproof_circuit *const *	circ,
		const unsigned char *const *	proof,
		size_t	n_proofs,
		size_t	plen,
		const secp256k1_pedersen_commitment **	commit,
		size_t *	n_commits,
		const secp256k1_generator *	value_gen,
		const unsigned char **	extra_commit,
		size_t *	extra_commit_len
	)

Batch-verifies multiple bulletproof zero-knowledge proofs of equally-sized circuits (zkp) Returns: 1: all zkps accepted 0: some zkp did not accept, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*n_gates many generators (cannot be NULL) circs: array of circuits, one per proof In: proof: array of byte-serialized proofs (cannot be NULL) n_proofs: number of proofs in above array plen: length of the all proofs commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL unless n_commits is NULL) n_commits: array of number of commitments in each element of the above array value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: array of additonal data committed to by the rangeproof extra_commit_len: array of lengths of additional data.

Definition at line 750 of file main_impl.h.

secp256k1_bulletproof_generators_create()

SECP256K1_API secp256k1_bulletproof_generators* secp256k1_bulletproof_generators_create	(	const secp256k1_context2 *	ctx,
		const secp256k1_generator *	blinding_gen,
		size_t	n
	)

Allocates and initializes a list of NUMS generators, along with precomputation data Returns a list of generators, or NULL if allocation failed.

Args: ctx: pointer to a context object (cannot be NULL) In: blinding_gen: generator that blinding factors will be multiplied by (cannot be NULL) n: number of NUMS generators to produce

Definition at line 427 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_generators_create_with_pregenerated()

SECP256K1_API secp256k1_bulletproof_generators* secp256k1_bulletproof_generators_create_with_pregenerated

(

const secp256k1_context2 *

ctx

)

Definition at line 72 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_generators_destroy()

SECP256K1_API void secp256k1_bulletproof_generators_destroy	(	const secp256k1_context2 *	ctx,
		secp256k1_bulletproof_generators *	gen
	)

Destroys a list of NUMS generators, freeing allocated memory Args: ctx: pointer to a context object (cannot be NULL) gen: pointer to the generator set to be destroyed.

Definition at line 469 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_rangeproof_prove()

SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int secp256k1_bulletproof_rangeproof_prove	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		unsigned char *	proof,
		size_t *	plen,
		const uint64_t *	value,
		const uint64_t *	min_value,
		const unsigned char *const *	blind,
		size_t	n_commits,
		const secp256k1_generator *	value_gen,
		size_t	nbits,
		const unsigned char *	nonce,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Produces an aggregate Bulletproof rangeproof for a set of Pedersen commitments Returns: 1: rangeproof was successfully created 0: rangeproof could not be created, or out of memory Args: ctx: pointer to a context object initialized for signing and verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) Out: proof: byte-serialized rangeproof (cannot be NULL) In/out: plen: pointer to size of proof, to be replaced with actual length of proof (cannot be NULL) In: value: array of values committed by the Pedersen commitments (cannot be NULL) min_value: array of minimum values to prove ranges above, or NULL for all-zeroes blind: array of blinding factors of the Pedersen commitments (cannot be NULL) n_commits: number of entries in the value and blind arrays value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nbits: number of bits proven for each range nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data.

Definition at line 582 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_rangeproof_rewind()

SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int secp256k1_bulletproof_rangeproof_rewind	(	const secp256k1_context2 *	ctx,
		const secp256k1_bulletproof_generators *	gens,
		uint64_t *	value,
		unsigned char *	blind,
		const unsigned char *	proof,
		size_t	plen,
		uint64_t	min_value,
		const secp256k1_pedersen_commitment *	commit,
		const secp256k1_generator *	value_gen,
		const unsigned char *	nonce,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Extracts the value and blinding factor from a single-commit rangeproof given a secret nonce Returns: 1: value and blinding factor were extracted and matched the input commit 0: one of the above was not true, extraction failed Args: ctx: pointer to a context object (cannot be NULL) gens: generator set used to make original proof (cannot be NULL) Out: value: pointer to value that will be extracted blind: pointer to 32-byte array for blinding factor to be extracted In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of every individual proof min_value: minimum value that the proof ranges over commit: pedersen commitment that the rangeproof is over (cannot be NULL) value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) nonce: random 32-byte seed used to derive blinding factors (cannot be NULL) extra_commit: additonal data committed to by the rangeproof extra_commit_len: length of additional data.

Definition at line 561 of file main_impl.h.

secp256k1_bulletproof_rangeproof_verify()

SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int secp256k1_bulletproof_rangeproof_verify	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const unsigned char *	proof,
		size_t	plen,
		const uint64_t *	min_value,
		const secp256k1_pedersen_commitment *	commit,
		size_t	n_commits,
		size_t	nbits,
		const secp256k1_generator *	value_gen,
		const unsigned char *	extra_commit,
		size_t	extra_commit_len
	)

Verifies a single bulletproof (aggregate) rangeproof Returns: 1: rangeproof was valid 0: rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: byte-serialized rangeproof (cannot be NULL) plen: length of the proof min_value: array of minimum values to prove ranges above, or NULL for all-zeroes commit: array of pedersen commitment that this rangeproof is over (cannot be NULL) n_commits: number of commitments in the above array (cannot be 0) nbits: number of bits proven for each range value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: length of additional data.

Definition at line 477 of file main_impl.h.

Here is the caller graph for this function:

secp256k1_bulletproof_rangeproof_verify_multi()

SECP256K1_WARN_UNUSED_RESULT SECP256K1_API int secp256k1_bulletproof_rangeproof_verify_multi	(	const secp256k1_context2 *	ctx,
		secp256k1_scratch_space2 *	scratch,
		const secp256k1_bulletproof_generators *	gens,
		const unsigned char *const *	proof,
		size_t	n_proofs,
		size_t	plen,
		const uint64_t *const *	min_value,
		const secp256k1_pedersen_commitment *const *	commit,
		size_t	n_commits,
		size_t	nbits,
		const secp256k1_generator *	value_gen,
		const unsigned char *const *	extra_commit,
		size_t *	extra_commit_len
	)

Batch-verifies multiple bulletproof (aggregate) rangeproofs of the same size using same generator Returns: 1: all rangeproofs were valid 0: some rangeproof was invalid, or out of memory Args: ctx: pointer to a context object initialized for verification (cannot be NULL) scratch: scratch space with enough memory for verification (cannot be NULL) gens: generator set with at least 2*nbits*n_commits many generators (cannot be NULL) In: proof: array of byte-serialized rangeproofs (cannot be NULL) n_proofs: number of proofs in the above array, and number of arrays in the commit array plen: length of every individual proof min_value: array of arrays of minimum values to prove ranges above, or NULL for all-zeroes commit: array of arrays of pedersen commitment that the rangeproofs is over (cannot be NULL) n_commits: number of commitments in each element of the above array (cannot be 0) nbits: number of bits in each proof value_gen: generator multiplied by value in pedersen commitments (cannot be NULL) extra_commit: additonal data committed to by the rangeproof (may be NULL if extra_commit_len is 0) extra_commit_len: array of lengths of additional data.

Definition at line 516 of file main_impl.h.