sigproof

type MembershipCommitment struct {
	CommitmentToValue *math.G1
	Signature         *math.Gt
}

type MembershipProof struct {
	// Challenge is the challenge computed for the ZK proof
	Challenge *math.Zr
	// Obfuscated Pointcheval-Sanders Signature
	Signature *pssign.Signature
	// Proof of knowledge of committed value
	Value *math.Zr
	// Proof of knowledge of the blinding factor in the Pedersen commitment
	ComBlindingFactor *math.Zr
	// Proof of knowledge of the blinding factor used to obfuscate Pointcheval-Sanders signature
	SigBlindingFactor *math.Zr
	// Proof of knowledge of the hash signed in Pointcheval-Sanders signature
	Hash *math.Zr
	// Pedersen commitment to Value
	Commitment *math.G1
}

type MembershipProver struct {
	*MembershipVerifier
	// contains filtered or unexported fields
}

type MembershipRandomness struct {
	// contains filtered or unexported fields
}

type MembershipVerifier struct {
	*POKVerifier
	PedersenParams    []*math.G1
	CommitmentToValue *math.G1
}

type MembershipWitness struct {
	// contains filtered or unexported fields
}

type POK struct {
	// Challenge is the challenge used in the proof
	Challenge *math.Zr
	// Signature is an obfuscated Pointcheval-Sanders signature
	Signature *pssign.Signature
	// Proof of signed messages
	Messages []*math.Zr
	// BlindingFactor is randomness used to obfuscate Pointcheval-Sadners signature
	BlindingFactor *math.Zr
	// Proof of hash (hash is computed as the hash of the signed messages)
	Hash *math.Zr
}

type POKProver struct {
	*POKVerifier
	Witness *POKWitness
	// contains filtered or unexported fields
}

type POKRandomness struct {
	// contains filtered or unexported fields
}

type POKVerifier struct {
	// PK is the public key under which the signature should be valid
	PK    []*math.G2
	Q     *math.G2
	P     *math.G1
	Curve *math.Curve
}

type POKWitness struct {
	// Messages corresponds to signed messages
	Messages []*math.Zr
	// Signature is Pointcheval-Sanders signature
	Signature *pssign.Signature
	// BlindingFactor is the randomness used to obfuscate Pointcheval-Sanders signature
	// for the POK proof
	BlindingFactor *math.Zr
}

type SigCommitment struct {
	CommitmentToMessages *math.G1
	Signature            *math.Gt
}

type SigProof struct {
	// Challenge is the challenge used in the proof
	Challenge *math.Zr
	// Hidden is an array that contains proofs of knowledge of hidden messages
	Hidden []*math.Zr
	// Hash is the proof of knowledge of the hash signed in Pointcheval-Sanders signature
	// If hash is computed as a function of the signed messages, it should never be disclosed
	// Hash cannot be nil
	Hash *math.Zr
	// Signature is an obfuscated Pointcheval-Sanders signature
	Signature *pssign.Signature
	// SigBlindingFactor is the proof of knowledge of the randomness used to obfuscate
	// Pointcheval-Sanders signature
	SigBlindingFactor *math.Zr
	// ComBlindingFactor is a proof of knowledge of the randomness used to compute
	// the Pedersen commitment
	ComBlindingFactor *math.Zr
	// Commitment is a Pedersen commitment of to the hidden messages
	Commitment *math.G1 // for hidden values
}

type SigProver struct {
	*SigVerifier

	Commitment *SigCommitment
	// contains filtered or unexported fields
}

type SigRandomness struct {
	// contains filtered or unexported fields
}

type SigVerifier struct {
	*POKVerifier
	// indices of messages to be hidden in the signed vector
	HiddenIndices []int
	// indices of messages to be disclosed
	DisclosedIndices []int
	// Disclosed contains the content of the disclosed messages
	Disclosed []*math.Zr
	// PedersenParams corresponds to Pedersen commitment generators
	PedersenParams []*math.G1
	// CommitmentToMessages is a Pedersen commitment to the signed messages
	CommitmentToMessages *math.G1
}

type SigWitness struct {
	// contains filtered or unexported fields
}