Switching to a fork allows us to leverage bulletproofs

Signed-off-by: Sam Stuewe <[email protected]>

Includes creating commitments directly as well as a facility for
automatically creating an “xonly” Pedersen Commitment.

xonly Pedersen Commitments are a work-around to avoid a larger code-
delta for this solution. In particular, it will allow us to avoid
changing the size of a UHS ID.

Signed-off-by: Sam Stuewe <[email protected]>

These data structures will be integrated into transactions and
leveraged to implement confidential transactions.

Signed-off-by: Sam Stuewe <[email protected]>

This implementation is mostly cribbed from what we already have
for std::unordered_map and is added only because it will be easier
for us to leverage in some places.

Signed-off-by: Sam Stuewe <[email protected]>

This is separated only so it doesn't muddy review of the other, more
substantial commits.

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

This method allows for the easy creation of valid blinding factors
(and the associated auxiliary Pedersen Commitments) for new outputs
to be created in a transaction.

Using this helper ensures that the auxiliary commitments in a
non-minting transaction will sum to 0, and those in a minting-
transaction will equal G^{minted_value}.

Signed-off-by: Sam Stuewe <[email protected]>

Only one is exposed as its easiest to use in most circumstances,
but the others can be exposed in the future if-needed (exposing
them for use shouldn't have any negative side-effects).

Signed-off-by: Sam Stuewe <[email protected]>

This is the largest commit in the series by-far; however, it's not
immediately clear to me how it could be broken down further and
leave the code functional (passing all tests) at each commit.

Included in this commit:

* Redefine `input`s and `output`s to contain all the proofs
* Modify `full_tx` and `compact_tx` to include the necessary proofs
* Add routines for creating and verifying all proof criteria
* Store the proofs in the UHS (both architectures)
* Modify clients and sentinels to actually prove and verify
* Update all tests for the new structures
* Remove a few tests which are now not possible cases
* Add tests for basic round-tripping of storage through the UHS

Signed-off-by: Sam Stuewe <[email protected]>

Co-authored-by: Sam Stuewe <[email protected]>
Signed-off-by: davidmag854 <[email protected]>
Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Rather than try to use a pedersen commitment as a UHS ID, prefer
a nested hash (almost identical to the values-in-UHS solution).

This simplifies a lot of the prove/verify procedures, reduces the
amount of code we need overall and makes the security argument
much simpler (because the transaction format is now largely
unchanged).

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: James Lovejoy <[email protected]>

…atomizer integration tests

Signed-off-by: James Lovejoy <[email protected]>
Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Includes:
* Pull in newest secp-zkp changes
* Fix a doxygen doc-comment problem
* remove a potentially-problematic header include

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

In the atomizer load-generator, several timestamps were not
initialized; their first use was with `operator+=`.

This simply initializes them to 0 making that first use valid.

Signed-off-by: Sam Stuewe <[email protected]>

Includes
* fixing all tests (locally, at least)
* correctly checking transaction balancing

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Alexander Jung <[email protected]>

Signed-off-by: Alexander Jung <[email protected]>

…eeded_transaction

Signed-off-by: Alexander Jung <[email protected]>

Signed-off-by: Alexander Jung <[email protected]>

Signed-off-by: Alexander Jung <[email protected]>

Signed-off-by: Alexander Jung <[email protected]>

… changes

Signed-off-by: Alexander Jung <[email protected]>

Set dummy rangeproof for outputs for unit tests where needed

Signed-off-by: Alexander Jung <[email protected]>

Signed-off-by: Alexander Jung <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Also includes modifying twophase mode's transaction-creation
to reuse pedersen-commitments/range-proofs

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>

Signed-off-by: Sam Stuewe <[email protected]>