-
Notifications
You must be signed in to change notification settings - Fork 61
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Data Integrity
bbs-2023 Cryptosuite (#550)
* Add bbs2023 suite. * Factorize tests, ensure JSON canonicalization. * Upgrade `uuid`to 1.9 * Lazy `Multikey` decoding. * Unification of the signature options and verification options interface. * Add `SelectiveCryptographicSuite` trait, providing a nice interface to SD suites. * Add `DataIntegrity::select` method. * Add `Bbs2023` variant to `AnySuite`. * Upgrade `json-ld` to version 0.21.1. * Remove feature gates on `Multikey`. --------- Co-authored-by: Simon Bihel <[email protected]>
- Loading branch information
1 parent
dbd3c5c
commit 0e87bfe
Showing
138 changed files
with
6,842 additions
and
1,308 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| [package] | ||
| name = "ssi-bbs" | ||
| version = "0.1.0" | ||
| edition = "2021" | ||
| authors = ["Spruce Systems, Inc."] | ||
| license = "Apache-2.0" | ||
| description = "The BBS Signature Scheme implementation for SSI" | ||
| repository = "https://github.com/spruceid/ssi/" | ||
| documentation = "https://docs.rs/ssi-bbs/" | ||
|
|
||
| [dependencies] | ||
| ssi-crypto.workspace = true | ||
| ssi-claims-core.workspace = true | ||
| zkryptium = "0.2.2" | ||
| rand.workspace = true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,112 @@ | ||
| use ssi_claims_core::{InvalidProof, MessageSignatureError, ProofValidationError, ProofValidity}; | ||
| use ssi_crypto::algorithm::BbsParameters; | ||
| pub use zkryptium::{ | ||
| bbsplus::keys::{BBSplusPublicKey, BBSplusSecretKey}, | ||
| errors::Error, | ||
| }; | ||
| use zkryptium::{ | ||
| bbsplus::{ | ||
| ciphersuites::{BbsCiphersuite, Bls12381Sha256}, | ||
| commitment::BlindFactor, | ||
| }, | ||
| keys::pair::KeyPair, | ||
| schemes::{ | ||
| algorithms::BBSplus, | ||
| generics::{BlindSignature, Signature}, | ||
| }, | ||
| }; | ||
|
|
||
| pub use ssi_crypto::algorithm::Bbs; | ||
|
|
||
| #[derive(Debug)] | ||
| pub struct ProofGenFailed; | ||
|
|
||
| pub fn proof_gen( | ||
| pk: &BBSplusPublicKey, | ||
| signature: &[u8], | ||
| header: &[u8], | ||
| ph: Option<&[u8]>, | ||
| messages: &[Vec<u8>], | ||
| disclosed_indexes: &[usize], | ||
| ) -> Result<Vec<u8>, ProofGenFailed> { | ||
| Ok( | ||
| zkryptium::schemes::generics::PoKSignature::<BBSplus<Bls12381Sha256>>::proof_gen( | ||
| pk, | ||
| signature, | ||
| Some(header), | ||
| ph, | ||
| Some(messages), | ||
| Some(disclosed_indexes), | ||
| ) | ||
| .map_err(|_| ProofGenFailed)? | ||
| .to_bytes(), | ||
| ) | ||
| } | ||
|
|
||
| pub fn proof_verify( | ||
| pk: &BBSplusPublicKey, | ||
| signature: &[u8], | ||
| header: &[u8], | ||
| ph: Option<&[u8]>, | ||
| disclosed_messages: &[Vec<u8>], | ||
| disclosed_indexes: &[usize], | ||
| ) -> Result<ProofValidity, ProofValidationError> { | ||
| let signature = | ||
| zkryptium::schemes::generics::PoKSignature::<BBSplus<Bls12381Sha256>>::from_bytes( | ||
| signature, | ||
| ) | ||
| .map_err(|_| ProofValidationError::InvalidSignature)?; | ||
|
|
||
| Ok(signature | ||
| .proof_verify( | ||
| pk, | ||
| Some(disclosed_messages), | ||
| Some(disclosed_indexes), | ||
| Some(header), | ||
| ph, | ||
| ) | ||
| .map_err(|_| InvalidProof::Signature)) | ||
| } | ||
|
|
||
| pub fn sign( | ||
| params: BbsParameters, | ||
| sk: &BBSplusSecretKey, | ||
| pk: &BBSplusPublicKey, | ||
| messages: &[Vec<u8>], | ||
| ) -> Result<Vec<u8>, MessageSignatureError> { | ||
| match params { | ||
| BbsParameters::Baseline { header } => { | ||
| Ok( | ||
| Signature::<BBSplus<Bls12381Sha256>>::sign(Some(messages), sk, pk, Some(&header)) | ||
| .map_err(MessageSignatureError::signature_failed)? | ||
| .to_bytes() | ||
| .to_vec(), | ||
| ) | ||
| } | ||
| BbsParameters::Blind { | ||
| header, | ||
| commitment_with_proof, | ||
| signer_blind, | ||
| } => { | ||
| let signer_blind = signer_blind.map(|b| BlindFactor::from_bytes(&b).unwrap()); | ||
| Ok(BlindSignature::<BBSplus<Bls12381Sha256>>::blind_sign( | ||
| sk, | ||
| pk, | ||
| commitment_with_proof.as_deref(), | ||
| Some(&header), | ||
| Some(messages), | ||
| signer_blind.as_ref(), | ||
| ) | ||
| .map_err(MessageSignatureError::signature_failed)? | ||
| .to_bytes() | ||
| .to_vec()) | ||
| } | ||
| } | ||
| } | ||
|
|
||
| pub fn generate_secret_key(rng: &mut impl rand::RngCore) -> BBSplusSecretKey { | ||
| let mut key_material = [0; Bls12381Sha256::IKM_LEN]; | ||
| rng.fill_bytes(&mut key_material); | ||
| let pair = KeyPair::<BBSplus<Bls12381Sha256>>::generate(&key_material, None, None).unwrap(); | ||
| pair.into_parts().0 | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.