Implement reveal for upgraded contexts only #1206
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Another piece of #1112. This modifies the reveal implementations so that reveal is implemented only for upgraded contexts, and not for any
C: Context
. The danger ofimpl Reveal<C: Context> for /* semi honest */ AdditiveShare<F>
is that it could accidentally be invoked by a protocol intending to have DZKP malicious security.This changes the
check_zero
protocol used for MAC-based malicious security to use a malicious reveal, however, there is still a problem with the zero check, see #1204 (comment).The reveals in PRF evaluation are changed to call
malicious_reveal
directly because the PRF doesn't yet take a context of an appropriate type. I've added a TODO, which can be cleaned up with the changes for malicious security in the PRF.