constants.go 2.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. // Copyright 2012 The Go Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style
  3. // license that can be found in the LICENSE file.
  4. package bn256
  5. import (
  6. "math/big"
  7. )
  8. func bigFromBase10(s string) *big.Int {
  9. n, _ := new(big.Int).SetString(s, 10)
  10. return n
  11. }
  12. // u is the BN parameter that determines the prime.
  13. var u = bigFromBase10("4965661367192848881")
  14. // P is a prime over which we form a basic field: 36u⁴+36u³+24u²+6u+1.
  15. var P = bigFromBase10("21888242871839275222246405745257275088696311157297823662689037894645226208583")
  16. // Order is the number of elements in both G₁ and G₂: 36u⁴+36u³+18u²+6u+1.
  17. // Needs to be highly 2-adic for efficient SNARK key and proof generation.
  18. // Order - 1 = 2^28 * 3^2 * 13 * 29 * 983 * 11003 * 237073 * 405928799 * 1670836401704629 * 13818364434197438864469338081.
  19. // Refer to https://eprint.iacr.org/2013/879.pdf and https://eprint.iacr.org/2013/507.pdf for more information on these parameters.
  20. var Order = bigFromBase10("21888242871839275222246405745257275088548364400416034343698204186575808495617")
  21. // xiToPMinus1Over6 is ξ^((p-1)/6) where ξ = i+9.
  22. var xiToPMinus1Over6 = &gfP2{bigFromBase10("16469823323077808223889137241176536799009286646108169935659301613961712198316"), bigFromBase10("8376118865763821496583973867626364092589906065868298776909617916018768340080")}
  23. // xiToPMinus1Over3 is ξ^((p-1)/3) where ξ = i+9.
  24. var xiToPMinus1Over3 = &gfP2{bigFromBase10("10307601595873709700152284273816112264069230130616436755625194854815875713954"), bigFromBase10("21575463638280843010398324269430826099269044274347216827212613867836435027261")}
  25. // xiToPMinus1Over2 is ξ^((p-1)/2) where ξ = i+9.
  26. var xiToPMinus1Over2 = &gfP2{bigFromBase10("3505843767911556378687030309984248845540243509899259641013678093033130930403"), bigFromBase10("2821565182194536844548159561693502659359617185244120367078079554186484126554")}
  27. // xiToPSquaredMinus1Over3 is ξ^((p²-1)/3) where ξ = i+9.
  28. var xiToPSquaredMinus1Over3 = bigFromBase10("21888242871839275220042445260109153167277707414472061641714758635765020556616")
  29. // xiTo2PSquaredMinus2Over3 is ξ^((2p²-2)/3) where ξ = i+9 (a cubic root of unity, mod p).
  30. var xiTo2PSquaredMinus2Over3 = bigFromBase10("2203960485148121921418603742825762020974279258880205651966")
  31. // xiToPSquaredMinus1Over6 is ξ^((1p²-1)/6) where ξ = i+9 (a cubic root of -1, mod p).
  32. var xiToPSquaredMinus1Over6 = bigFromBase10("21888242871839275220042445260109153167277707414472061641714758635765020556617")
  33. // xiTo2PMinus2Over3 is ξ^((2p-2)/3) where ξ = i+9.
  34. var xiTo2PMinus2Over3 = &gfP2{bigFromBase10("19937756971775647987995932169929341994314640652964949448313374472400716661030"), bigFromBase10("2581911344467009335267311115468803099551665605076196740867805258568234346338")}