| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122 | /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */import { AffinePoint } from './curve.js';import { IField } from './modular.js';import { Hex, PrivKey, CHash } from './utils.js';import { MapToCurve, Opts as HTFOpts, htfBasicOpts, createHasher } from './hash-to-curve.js';import { CurvePointsType, ProjPointType as ProjPointType, CurvePointsRes } from './weierstrass.js';/** * BLS (Barreto-Lynn-Scott) family of pairing-friendly curves. * Implements BLS (Boneh-Lynn-Shacham) signatures. * Consists of two curves: G1 and G2: * - G1 is a subgroup of (x, y) E(Fq) over y² = x³ + 4. * - G2 is a subgroup of ((x₁, x₂+i), (y₁, y₂+i)) E(Fq²) over y² = x³ + 4(1 + i) where i is √-1 * - Gt, created by bilinear (ate) pairing e(G1, G2), consists of p-th roots of unity in *   Fq^k where k is embedding degree. Only degree 12 is currently supported, 24 is not. * Pairing is used to aggregate and verify signatures. * We are using Fp for private keys (shorter) and Fp₂ for signatures (longer). * Some projects may prefer to swap this relation, it is not supported for now. **/type Fp = bigint;export type ShortSignatureCoder<Fp> = {    fromHex(hex: Hex): ProjPointType<Fp>;    toRawBytes(point: ProjPointType<Fp>): Uint8Array;    toHex(point: ProjPointType<Fp>): string;};export type SignatureCoder<Fp2> = {    fromHex(hex: Hex): ProjPointType<Fp2>;    toRawBytes(point: ProjPointType<Fp2>): Uint8Array;    toHex(point: ProjPointType<Fp2>): string;};type Fp2Bls<Fp, Fp2> = IField<Fp2> & {    reim: (num: Fp2) => {        re: Fp;        im: Fp;    };    multiplyByB: (num: Fp2) => Fp2;    frobeniusMap(num: Fp2, power: number): Fp2;};type Fp12Bls<Fp2, Fp12> = IField<Fp12> & {    frobeniusMap(num: Fp12, power: number): Fp12;    multiplyBy014(num: Fp12, o0: Fp2, o1: Fp2, o4: Fp2): Fp12;    conjugate(num: Fp12): Fp12;    finalExponentiate(num: Fp12): Fp12;};export type CurveType<Fp, Fp2, Fp6, Fp12> = {    G1: Omit<CurvePointsType<Fp>, 'n'> & {        ShortSignature: SignatureCoder<Fp>;        mapToCurve: MapToCurve<Fp>;        htfDefaults: HTFOpts;    };    G2: Omit<CurvePointsType<Fp2>, 'n'> & {        Signature: SignatureCoder<Fp2>;        mapToCurve: MapToCurve<Fp2>;        htfDefaults: HTFOpts;    };    fields: {        Fp: IField<Fp>;        Fr: IField<bigint>;        Fp2: Fp2Bls<Fp, Fp2>;        Fp6: IField<Fp6>;        Fp12: Fp12Bls<Fp2, Fp12>;    };    params: {        x: bigint;        r: bigint;    };    htfDefaults: HTFOpts;    hash: CHash;    randomBytes: (bytesLength?: number) => Uint8Array;};export type CurveFn<Fp, Fp2, Fp6, Fp12> = {    getPublicKey: (privateKey: PrivKey) => Uint8Array;    getPublicKeyForShortSignatures: (privateKey: PrivKey) => Uint8Array;    sign: {        (message: Hex, privateKey: PrivKey, htfOpts?: htfBasicOpts): Uint8Array;        (message: ProjPointType<Fp2>, privateKey: PrivKey, htfOpts?: htfBasicOpts): ProjPointType<Fp2>;    };    signShortSignature: {        (message: Hex, privateKey: PrivKey, htfOpts?: htfBasicOpts): Uint8Array;        (message: ProjPointType<Fp>, privateKey: PrivKey, htfOpts?: htfBasicOpts): ProjPointType<Fp>;    };    verify: (signature: Hex | ProjPointType<Fp2>, message: Hex | ProjPointType<Fp2>, publicKey: Hex | ProjPointType<Fp>, htfOpts?: htfBasicOpts) => boolean;    verifyShortSignature: (signature: Hex | ProjPointType<Fp>, message: Hex | ProjPointType<Fp>, publicKey: Hex | ProjPointType<Fp2>, htfOpts?: htfBasicOpts) => boolean;    verifyBatch: (signature: Hex | ProjPointType<Fp2>, messages: (Hex | ProjPointType<Fp2>)[], publicKeys: (Hex | ProjPointType<Fp>)[], htfOpts?: htfBasicOpts) => boolean;    aggregatePublicKeys: {        (publicKeys: Hex[]): Uint8Array;        (publicKeys: ProjPointType<Fp>[]): ProjPointType<Fp>;    };    aggregateSignatures: {        (signatures: Hex[]): Uint8Array;        (signatures: ProjPointType<Fp2>[]): ProjPointType<Fp2>;    };    aggregateShortSignatures: {        (signatures: Hex[]): Uint8Array;        (signatures: ProjPointType<Fp>[]): ProjPointType<Fp>;    };    millerLoop: (ell: [Fp2, Fp2, Fp2][], g1: [Fp, Fp]) => Fp12;    pairing: (P: ProjPointType<Fp>, Q: ProjPointType<Fp2>, withFinalExponent?: boolean) => Fp12;    G1: CurvePointsRes<Fp> & ReturnType<typeof createHasher<Fp>>;    G2: CurvePointsRes<Fp2> & ReturnType<typeof createHasher<Fp2>>;    Signature: SignatureCoder<Fp2>;    ShortSignature: ShortSignatureCoder<Fp>;    params: {        x: bigint;        r: bigint;        G1b: bigint;        G2b: Fp2;    };    fields: {        Fp: IField<Fp>;        Fp2: Fp2Bls<Fp, Fp2>;        Fp6: IField<Fp6>;        Fp12: Fp12Bls<Fp2, Fp12>;        Fr: IField<bigint>;    };    utils: {        randomPrivateKey: () => Uint8Array;        calcPairingPrecomputes: (p: AffinePoint<Fp2>) => [Fp2, Fp2, Fp2][];    };};export declare function bls<Fp2, Fp6, Fp12>(CURVE: CurveType<Fp, Fp2, Fp6, Fp12>): CurveFn<Fp, Fp2, Fp6, Fp12>;export {};//# sourceMappingURL=bls.d.ts.map
 |