• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Java
      • Taspi
      • Bitcoin
      • Riscv
      • Des
      • Ethereum
      • X86isa
      • Sha-2
      • Yul
      • Zcash
        • Jubjub
        • Verify-zcash-r1cs
        • Lift-zcash-r1cs
        • Pedersen-hash
          • Pedersen-segment-scalar
            • Pedersen-segment-point
            • Find-group-hash
            • Pedersen-point
            • Pedersen-enc
            • Group-hash
            • Coordinate-extract
            • Pedersen-segment-addend
            • Pedersen
            • Pedersen-pad
            • Pedersen-hash-injectivity-properties
            • Pedersen-hash-bound-properties
            • Pedersen-hash-image-properties
            • *pedersen-c*
          • Zcash-gadgets
          • Bit/byte/integer-conversions
          • Constants
          • Blake2-hash
          • Randomness-beacon
        • Proof-checker-itp13
        • Regex
        • ACL2-programming-language
        • Json
        • Jfkr
        • Equational
        • Cryptography
        • Poseidon
        • Where-do-i-place-my-book
        • Axe
        • Bigmems
        • Builtins
        • Execloader
        • Aleo
        • Solidity
        • Paco
        • Concurrent-programs
        • Bls12-377-curves
      • Debugging
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Pedersen-hash

    Pedersen-segment-scalar

    The function \langle\cdot\rangle in [ZPS:5.4.1.7].

    Signature
    (pedersen-segment-scalar segment) → i
    Arguments
    segment — Guard (bit-listp segment).
    Returns
    i — Type (integerp i).

    This returns the scalar that is used in the Jubjub multiplication, i.e. \langle M_i \rangle for the segment M_i.

    Definitions and Theorems

    Function: pedersen-segment-scalar-loop

    (defun pedersen-segment-scalar-loop (j segment)
      (declare (xargs :guard (and (posp j) (bit-listp segment))))
      (declare (xargs :guard (integerp (/ (len segment) 3))))
      (let ((__function__ 'pedersen-segment-scalar-loop))
        (declare (ignorable __function__))
        (if (consp segment)
            (+ (* (pedersen-enc (take 3 segment))
                  (expt 2 (* 4 (1- j))))
               (pedersen-segment-scalar-loop (1+ j)
                                             (nthcdr 3 segment)))
          0)))

    Theorem: integerp-of-pedersen-segment-scalar-loop

    (defthm integerp-of-pedersen-segment-scalar-loop
      (implies (posp j)
               (b* ((i (pedersen-segment-scalar-loop j segment)))
                 (integerp i)))
      :rule-classes (:type-prescription :rewrite))

    Function: pedersen-segment-scalar

    (defun pedersen-segment-scalar (segment)
      (declare (xargs :guard (bit-listp segment)))
      (declare (xargs :guard (integerp (/ (len segment) 3))))
      (let ((__function__ 'pedersen-segment-scalar))
        (declare (ignorable __function__))
        (pedersen-segment-scalar-loop 1 segment)))

    Theorem: integerp-of-pedersen-segment-scalar

    (defthm integerp-of-pedersen-segment-scalar
      (b* ((i (pedersen-segment-scalar segment)))
        (integerp i))
      :rule-classes (:type-prescription :rewrite))