pssign

type BlindSignRequest struct {
	// Pedersen commitment of a vector of messages
	Commitment *math.G1
	// Elgamal encryption of the committed messages
	Ciphertexts []*elgamal.Ciphertext
	// Proof of correctness of encryption and commitment
	Proof *EncProof
	// One-time Elgamal public key picked by the recipient
	EncPK *elgamal.PublicKey
}

type BlindSignResponse struct {
	// hash used in the  Pointcheval-Sanders signature
	Hash *math.Zr
	// this encrypts the Pointcheval-Sanders signature
	Ciphertext *elgamal.Ciphertext
}

type BlindSigner struct {
	// Signer is a Pointcheval-Sanders signer
	*Signer
	// PedersenParameters is the generators used to commit to the vector
	// of messages to be signed
	PedersenParameters []*math.G1
}

type EncProof struct {
	// ZKP of knowledge of committed/encrypted messages
	Messages []*math.Zr
	// ZKP of knowledge of randomness used in the encryption
	EncRandomness []*math.Zr
	// ZKP of knowledge of the randomness (blinding factor) used in the commitment
	ComBlindingFactor *math.Zr
	// ZKP challenge
	Challenge *math.Zr
}

type EncProofCommitments struct {
	C1         []*math.G1
	C2         []*math.G1
	Commitment *math.G1
}

type Recipient struct {
	*SignVerifier
	// Elgamal encryption secret key
	// This is used to decrypt the blind signature
	EncSK *elgamal.SecretKey
	// encWitness coresponds to the message and the randomness used to
	// encrypt the blind signature request
	Witness *encWitness
	// Elliptic curve
	Curve *math.Curve
	// contains filtered or unexported fields
}

type SignVerifier struct {
	PK    []*math.G2
	Q     *math.G2
	Curve *math.Curve
}

type Signature struct {
	R *math.G1
	S *math.G1
}

type Signer struct {
	*SignVerifier
	SK []*math.Zr
}