Struct bulletproofs::range_proof_mpc::dealer::DealerAwaitingProofShares

pub struct DealerAwaitingProofShares<'a, 'b> { /* fields omitted */ }

A dealer which has sent the PolyChallenge to the parties and is waiting to aggregate their ProofShares into a RangeProof.

Methods

impl<'a, 'b> DealerAwaitingProofShares<'a, 'b>

pub fn receive_shares(
    self,
    proof_shares: &[ProofShare]
) -> Result<RangeProof, MPCError>

Assemble the final aggregated RangeProof from the given proof_shares, then validate the proof to ensure that all ProofShares were well-formed.

This is a convenience wrapper around receive_shares_with_rng

pub fn receive_shares_with_rng<T: RngCore + CryptoRng>(
    self,
    proof_shares: &[ProofShare],
    rng: &mut T
) -> Result<RangeProof, MPCError>

Assemble the final aggregated RangeProof from the given proof_shares, then validate the proof to ensure that all ProofShares were well-formed.

If the aggregated proof fails to validate, this function audits the submitted shares to determine which shares were invalid. This information is returned as part of the MPCError.

If the proof shares are known to be trusted, for instance when performing local aggregation, receive_trusted_shares saves time by skipping verification of the aggregated proof.

pub fn receive_trusted_shares(
    self,
    proof_shares: &[ProofShare]
) -> Result<RangeProof, MPCError>

Assemble the final aggregated RangeProof from the given proof_shares, but skip validation of the proof.

WARNING

This function does NOT validate the proof shares. It is suitable for creating aggregated proofs when all parties are known by the dealer to be honest (for instance, when there's only one party playing all roles).

Otherwise, use receive_shares, which validates that all shares are well-formed, or else detects which party(ies) submitted malformed shares.