• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
    • Debugging
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
      • Kestrel-books
        • Crypto-hdwallet
        • Apt
        • Error-checking
        • Fty-extensions
        • Isar
        • Kestrel-utilities
        • Set
        • Soft
        • C
        • Bv
        • Imp-language
        • Event-macros
        • Java
        • Bitcoin
        • Ethereum
        • Yul
        • Zcash
          • Jubjub
          • Verify-zcash-r1cs
          • Lift-zcash-r1cs
          • Pedersen-hash
            • Pedersen-segment-scalar
            • Pedersen-segment-point
            • Find-group-hash
            • Pedersen-point
            • Pedersen-enc
            • Group-hash
            • Coordinate-extract
              • Pedersen-segment-addend
              • Pedersen
              • Pedersen-pad
              • Pedersen-hash-injectivity-properties
              • Pedersen-hash-bound-properties
              • Pedersen-hash-image-properties
              • *pedersen-c*
            • Zcash-gadgets
            • Bit/byte/integer-conversions
            • Constants
            • Blake2-hash
            • Randomness-beacon
          • ACL2-programming-language
          • Prime-fields
          • Json
          • Syntheto
          • File-io-light
          • Cryptography
          • Number-theory
          • Lists-light
          • Axe
          • Builtins
          • Solidity
          • Helpers
          • Htclient
          • Typed-lists-light
          • Arithmetic-light
        • X86isa
        • Axe
        • Execloader
      • Math
      • Testing-utilities
    • Pedersen-hash

    Coordinate-extract

    The function \mathsf{Extract}_{\mathbb{J}^{(r)}} [ZPS:5.4.9.4].

    Signature
    (coordinate-extract point) → bits
    Arguments
    point — Guard (jubjub-pointp point).
    Returns
    bits — Type (bit-listp bits).

    [ZPS] defines this on \mathbb{J}^{(r)}, not all of \mathbb{J}, but for now we define it on all of \mathbb{J} because we do not have an ACL2 definition of \mathbb{J}^{(r)} yet, and in fact the function is well-defined on all of \mathbb{J}.

    Definitions and Theorems

    Function: coordinate-extract

    (defun coordinate-extract (point)
      (declare (xargs :guard (jubjub-pointp point)))
      (let ((__function__ 'coordinate-extract))
        (declare (ignorable __function__))
        (i2lebsp *l-merkle-sapling*
                 (jubjub-point->u point))))

    Theorem: bit-listp-of-coordinate-extract

    (defthm bit-listp-of-coordinate-extract
      (b* ((bits (coordinate-extract point)))
        (bit-listp bits))
      :rule-classes :rewrite)

    Theorem: len-of-coordinate-extract

    (defthm len-of-coordinate-extract
      (b* ((?bits (coordinate-extract point)))
        (equal (len bits) *l-merkle-sapling*)))