Add zkp - Groth16 (neo-project#2691)

src/Neo/Neo.csproj

@@ -14,6 +14,7 @@
     <PackageReference Include="BouncyCastle.NetCore" Version="1.9.0" />
     <PackageReference Include="K4os.Compression.LZ4" Version="1.2.16" />
     <PackageReference Include="Neo.VM" Version="3.5.0" />
+    <PackageReference Include="Neo.Cryptography.BLS12_381" Version="0.2.0" />
   </ItemGroup>
 
   <ItemGroup>

src/Neo/SmartContract/Native/CryptoLib.BLS12_381.cs

@@ -0,0 +1,134 @@
+using Neo.Cryptography.BLS12_381;
+using Neo.VM.Types;
+using System;
+
+namespace Neo.SmartContract.Native;
+
+partial class CryptoLib
+{
+    /// <summary>
+    /// Serialize a bls12381 point.
+    /// </summary>
+    /// <param name="g">The point to be serialized.</param>
+    /// <returns></returns>
+    [ContractMethod(CpuFee = 1 << 19)]
+    public static byte[] Bls12381Serialize(InteropInterface g)
+    {
+        return g.GetInterface<object>() switch
+        {
+            G1Affine p => p.ToCompressed(),
+            G1Projective p => new G1Affine(p).ToCompressed(),
+            G2Affine p => p.ToCompressed(),
+            G2Projective p => new G2Affine(p).ToCompressed(),
+            Gt p => p.ToArray(),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:type mismatch")
+        };
+    }
+
+    /// <summary>
+    /// Deserialize a bls12381 point.
+    /// </summary>
+    /// <param name="data">The point as byte array.</param>
+    /// <returns></returns>
+    [ContractMethod(CpuFee = 1 << 19)]
+    public static InteropInterface Bls12381Deserialize(byte[] data)
+    {
+        return data.Length switch
+        {
+            48 => new InteropInterface(G1Affine.FromCompressed(data)),
+            96 => new InteropInterface(G2Affine.FromCompressed(data)),
+            576 => new InteropInterface(Gt.FromBytes(data)),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:valid point length"),
+        };
+    }
+
+    /// <summary>
+    /// Determines whether the specified points are equal.
+    /// </summary>
+    /// <param name="x">The first point.</param>
+    /// <param name="y">Teh second point.</param>
+    /// <returns><c>true</c> if the specified points are equal; otherwise, <c>false</c>.</returns>
+    [ContractMethod(CpuFee = 1 << 5)]
+    public static bool Bls12381Equal(InteropInterface x, InteropInterface y)
+    {
+        return (x.GetInterface<object>(), y.GetInterface<object>()) switch
+        {
+            (G1Affine p1, G1Affine p2) => p1.Equals(p2),
+            (G1Projective p1, G1Projective p2) => p1.Equals(p2),
+            (G2Affine p1, G2Affine p2) => p1.Equals(p2),
+            (G2Projective p1, G2Projective p2) => p1.Equals(p2),
+            (Gt p1, Gt p2) => p1.Equals(p2),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:type mismatch")
+        };
+    }
+
+    /// <summary>
+    /// Add operation of two points.
+    /// </summary>
+    /// <param name="x">The first point.</param>
+    /// <param name="y">The second point.</param>
+    /// <returns></returns>
+    [ContractMethod(CpuFee = 1 << 19)]
+    public static InteropInterface Bls12381Add(InteropInterface x, InteropInterface y)
+    {
+        return (x.GetInterface<object>(), y.GetInterface<object>()) switch
+        {
+            (G1Affine p1, G1Affine p2) => new(new G1Projective(p1) + p2),
+            (G1Affine p1, G1Projective p2) => new(p1 + p2),
+            (G1Projective p1, G1Affine p2) => new(p1 + p2),
+            (G1Projective p1, G1Projective p2) => new(p1 + p2),
+            (G2Affine p1, G2Affine p2) => new(new G2Projective(p1) + p2),
+            (G2Affine p1, G2Projective p2) => new(p1 + p2),
+            (G2Projective p1, G2Affine p2) => new(p1 + p2),
+            (G2Projective p1, G2Projective p2) => new(p1 + p2),
+            (Gt p1, Gt p2) => new(p1 + p2),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:type mismatch")
+        };
+    }
+
+    /// <summary>
+    /// Mul operation of gt point and multiplier
+    /// </summary>
+    /// <param name="x">The point</param>
+    /// <param name="mul">Multiplier,32 bytes,little-endian</param>
+    /// <param name="neg">negative number</param>
+    /// <returns></returns>
+    [ContractMethod(CpuFee = 1 << 21)]
+    public static InteropInterface Bls12381Mul(InteropInterface x, byte[] mul, bool neg)
+    {
+        Scalar X = neg ? -Scalar.FromBytes(mul) : Scalar.FromBytes(mul);
+        return x.GetInterface<object>() switch
+        {
+            G1Affine p => new(p * X),
+            G1Projective p => new(p * X),
+            G2Affine p => new(p * X),
+            G2Projective p => new(p * X),
+            Gt p => new(p * X),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:type mismatch")
+        };
+    }
+
+    /// <summary>
+    /// Pairing operation of g1 and g2
+    /// </summary>
+    /// <param name="g1">The g1 point.</param>
+    /// <param name="g2">The g2 point.</param>
+    /// <returns></returns>
+    [ContractMethod(CpuFee = 1 << 23)]
+    public static InteropInterface Bls12381Pairing(InteropInterface g1, InteropInterface g2)
+    {
+        G1Affine g1a = g1.GetInterface<object>() switch
+        {
+            G1Affine g => g,
+            G1Projective g => new(g),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:type mismatch")
+        };
+        G2Affine g2a = g2.GetInterface<object>() switch
+        {
+            G2Affine g => g,
+            G2Projective g => new(g),
+            _ => throw new ArgumentException($"Bls12381 operation fault, type:format, error:type mismatch")
+        };
+        return new(Bls12.Pairing(in g1a, in g2a));
+    }
+}

src/Neo/SmartContract/Native/CryptoLib.cs

@@ -18,7 +18,7 @@ namespace Neo.SmartContract.Native
     /// <summary>
     /// A native contract library that provides cryptographic algorithms.
     /// </summary>
-    public sealed class CryptoLib : NativeContract
+    public sealed partial class CryptoLib : NativeContract
     {
         private static readonly Dictionary<NamedCurve, ECCurve> curves = new()
         {