kms

type BitSlice []byte

type CiphertextPair struct {
	C1 *big.Int
	C2 *big.Int
}

type Commitments [32]byte

type DLogProof struct {
	PublicShare       []byte   `json:"publicshare"`
	PkRandComm        []byte   `json:"pkrandcomm"`
	ChallengeResponse *big.Int `json:"challengeresp"`
}

type KenGenParams struct {
	Curve         elliptic.Curve
	Q             *big.Int
	Q3            *big.Int
	QSquared      *big.Int
	NPaillierBits int
	RangeSecBits  int
}

type KeyGenCommWitness struct {
	PkCommitNonce Nonce
	ZkPokNonce    Nonce
	PublicShare   []byte // Party1 publicKey
	Proof         *DLogProof
}

type KeyGenParty1FirstMsg struct {
	PkCommit    Commitments `json:"pkcommit"`
	ZkPokCommit Commitments `json:"zkpokcommit"`
}

type KeyGenParty1FourthMsg struct {
	PdlDecommit *Party1PDLDecommit `json:"pdldecommit"`
}

type KeyGenParty1SecondMsg struct {
	Witness     *KeyGenCommWitness `json:"witness"`
	Ckey        *big.Int           `json:"ckey"`
	CKProof     *NICorrectKeyProof `json:"ckproof"`
	RPCtxtPairs []CiphertextPair   `json:"rpctx"`
}

type KeyGenParty1ThirdMsg struct {
	Party1PdlMsg1 *Party1PDLFirstMsg `json:"pdlmsg1"`
	RPProofPairs  []ProofPair        `json:"rpproof"`
}

type KeyGenParty2FirstMsg struct {
	Proof      *DLogProof  `json:"dlogproof"`
	RPChalComm Commitments `json:"rpchalcomm"`
}

type KeyGenParty2SThirdMsg struct {
	PdlDecomm *Party2PDLDecommit `json:"pdldecomm"`
}

type KeyGenParty2SecondMsg struct {
	Pdl1stMsg   *Party2PDLFirstMsg `json:"pdlmsg1"`
	RPChallenge BitSlice           `json:"rpchallenge"`
	RPChalNonce Nonce              `json:"rpchalnonce"`
}

type MasterKey1 struct {
	Sk1 *ecdsa.PrivateKey //
	Pk  *ecdsa.PublicKey
	Pk2 *ecdsa.PublicKey
	PSk *paillier.PrivateKey // the privateKey for paillier
}

type MasterKey2 struct {
	Sk2 *ecdsa.PrivateKey // ecdsa privateKey

	Pk *ecdsa.PublicKey

	Pk1  *ecdsa.PublicKey
	Ckey *big.Int

	PPK *paillier.PublicKey // the publicKey for paillier
}

type NICorrectKeyProof struct {
	PPk   *paillier.PublicKey `json:"paillier"`
	Sigma []*big.Int          `json:"sigma"`
}

type Nonce [32]byte

type PDLChallenge struct {
	CPrime  []byte
	ABComm  Commitments
	A       *big.Int
	B       *big.Int
	ABNonce Nonce
	Q       []byte
}

type Party1Generator struct {
	Sk1Puk ecdsa.PublicKey

	X2 *ecdsa.PublicKey

	// Range Proof
	RPProver *RangeProofProver
	// contains filtered or unexported fields
}

type Party1PDLDecommit struct {
	AlphaNonce Nonce  `json:"alphanonce"`
	AlphaPk    []byte `json:"alphapk"`
}

type Party1PDLFirstMsg struct {
	AlphaComm Commitments `json:"alphacomm"`
}

type Party1Paillier struct {
	// contains filtered or unexported fields
}

type Party1SignCtx struct {
	// contains filtered or unexported fields
}

type Party2Generator struct {
	Sk2Puk ecdsa.PublicKey

	// Party2 公钥
	X1 *ecdsa.PublicKey
	// contains filtered or unexported fields
}

type Party2PDLDecommit struct {
	A       *big.Int `json:"a"`
	B       *big.Int `json:"b"`
	ABNonce Nonce    `json:"abnonce"`
}

type Party2PDLFirstMsg struct {
	CPrime []byte      `json:"cprime"`
	ABComm Commitments `json:"abcomm"`
}

type Party2Paillier struct {
	// contains filtered or unexported fields
}

type Party2SignCtx struct {
	// contains filtered or unexported fields
}

type ProofPair struct {
	J  byte     `json:"j"`
	W1 *big.Int `json:"w1,omitempty"`
	R1 *big.Int `json:"k1,omitempty"`
	W2 *big.Int `json:"w2,omitempty"`
	R2 *big.Int `json:"r2,omitempty"`
}

type RangeProof struct {
	CtxtPairs  []CiphertextPair
	ProofPairs []ProofPair
}

type RangeProofProver struct {
	X   *big.Int
	R   *big.Int
	PSK *paillier.PrivateKey
	Q   *big.Int
	Q3  *big.Int

	ChallengeComm Commitments
	Accuracy      int

	SecPairs  []SecretPair
	CtxtPairs []CiphertextPair
}

type RangeProofVerifier struct {
	C         *big.Int
	PPK       *paillier.PublicKey
	Q3        *big.Int
	Challenge BitSlice
	Comm      Commitments
	Nonce     Nonce
	Accuracy  int

	CtxtPairs []CiphertextPair
}

type SecretPair struct {
	W1 *big.Int
	R1 *big.Int
	W2 *big.Int
	R2 *big.Int
}

type SignParty1FirstMsg struct {
	R1Proof *DLogProof `json:"r1proof"`
}

type SignParty1SecondMsg struct {
	S *big.Int
}

type SignParty2FirstMsg struct {
	R2Commit    Commitments `json:"r2commit"`
	R2PokCommit Commitments `json:"r2pokcomm"`
	Hash        []byte      `json:"hash"`
}

type SignParty2SecondMsg struct {
	Witness *SignRCommWitness `json:"witness"`
	S1      *big.Int          `json:"s1"`
}

type SignRCommWitness struct {
	R2CommNonce Nonce
	R2PokNonce  Nonce
	R2Share     []byte
	Proof       *DLogProof
}