• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Java
      • Taspi
      • Bitcoin
      • Riscv
      • Des
      • Ethereum
      • X86isa
      • Sha-2
      • Yul
      • Zcash
        • Jubjub
        • Verify-zcash-r1cs
        • Lift-zcash-r1cs
        • Pedersen-hash
          • Pedersen-segment-scalar
          • Pedersen-segment-point
          • Find-group-hash
          • Pedersen-point
          • Pedersen-enc
          • Group-hash
          • Coordinate-extract
            • Pedersen-segment-addend
            • Pedersen
            • Pedersen-pad
            • Pedersen-hash-injectivity-properties
            • Pedersen-hash-bound-properties
            • Pedersen-hash-image-properties
            • *pedersen-c*
          • Zcash-gadgets
          • Bit/byte/integer-conversions
          • Constants
          • Blake2-hash
          • Randomness-beacon
        • Proof-checker-itp13
        • Regex
        • ACL2-programming-language
        • Json
        • Jfkr
        • Equational
        • Cryptography
        • Poseidon
        • Where-do-i-place-my-book
        • Axe
        • Bigmems
        • Builtins
        • Execloader
        • Aleo
        • Solidity
        • Paco
        • Concurrent-programs
        • Bls12-377-curves
      • Debugging
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Pedersen-hash

    Coordinate-extract

    The function \mathsf{Extract}_{\mathbb{J}^{(r)}} [ZPS:5.4.9.4].

    Signature
    (coordinate-extract point) → bits
    Arguments
    point — Guard (jubjub-pointp point).
    Returns
    bits — Type (bit-listp bits).

    [ZPS] defines this on \mathbb{J}^{(r)}, not all of \mathbb{J}, but for now we define it on all of \mathbb{J} because we do not have an ACL2 definition of \mathbb{J}^{(r)} yet, and in fact the function is well-defined on all of \mathbb{J}.

    Definitions and Theorems

    Function: coordinate-extract

    (defun coordinate-extract (point)
      (declare (xargs :guard (jubjub-pointp point)))
      (let ((__function__ 'coordinate-extract))
        (declare (ignorable __function__))
        (i2lebsp *l-merkle-sapling*
                 (jubjub-point->u point))))

    Theorem: bit-listp-of-coordinate-extract

    (defthm bit-listp-of-coordinate-extract
      (b* ((bits (coordinate-extract point)))
        (bit-listp bits))
      :rule-classes :rewrite)

    Theorem: len-of-coordinate-extract

    (defthm len-of-coordinate-extract
      (b* ((?bits (coordinate-extract point)))
        (equal (len bits) *l-merkle-sapling*)))