org.bouncycastle.crypto.hash2curve.test

Class BLS12_381Eth2KatTest

java.lang.Object

junit.framework.Assert

junit.framework.TestCase

org.bouncycastle.crypto.hash2curve.test.BLS12_381Eth2KatTest

All Implemented Interfaces:

junit.framework.Test

public class BLS12_381Eth2KatTest
extends junit.framework.TestCase

Cross-implementation conformance tests for BLS12-381 against the Ethereum BLS test vectors at github.com/ethereum/bls12-381-tests (release v0.1.2). These vectors are the same ones used by the Eth2 consensus client implementations (Lighthouse, Prysm, Teku, Nimbus, Lodestar) so a passing test here is direct evidence of byte-level interoperability.

The Eth2 BLS suite is the ProofOfPossession variant BLS_SIG_BLS12381G2_XMD:SHA-256_SSWU_RO_POP_, with public keys in G1 and signatures in G2, both encoded in Zcash compressed format.

Constructor Summary

Constructors

Constructor and Description
BLS12_381Eth2KatTest()

Method Summary

Modifier and Type	Method and Description
void	testAggregateByteCompatibilityWithEth2() Eth2 aggregate vector: aggregating three published Eth2 signatures must produce a specific compressed G2 byte string.
void	testEth2VectorRoundTripVerify()
void	testFastAggregateVerifyTamperedRejected() Eth2 fast_aggregate_verify tampered case: same pubkeys / message but with the trailing bytes of the signature flipped — verify must reject.
void	testFastAggregateVerifyValid() Eth2 fast_aggregate_verify valid case: three pubkeys and one aggregated signature over the same message must verify.
void	testSignByteCompatibilityWithEth2() Run all valid Eth2 sign vectors.
void	testZeroPrivkeyRejected() Eth2 zero-privkey sign vector: the spec mandates that signing with sk = 0 must fail.

Methods inherited from class junit.framework.TestCase

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, countTestCases, createResult, fail, fail, failNotEquals, failNotSame, failSame, format, getName, run, run, runBare, runTest, setName, setUp, tearDown, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

BLS12_381Eth2KatTest

public BLS12_381Eth2KatTest()

Method Detail

testSignByteCompatibilityWithEth2

public void testSignByteCompatibilityWithEth2()

Run all valid Eth2 sign vectors. For each (sk, msg, expected_sig) triple this asserts that compress(BLS12_381ProofOfPossession.sign(sk, msg)) == expected_sig byte-for-byte. A pass is direct interoperability evidence with Lighthouse / Prysm / Teku / Nimbus / Lodestar and any other Eth2 BLS implementation that uses these vectors.

testZeroPrivkeyRejected

public void testZeroPrivkeyRejected()

Eth2 zero-privkey sign vector: the spec mandates that signing with sk = 0 must fail. Our implementation rejects sk <= 0 in BLS12_381BasicScheme.skToPk(java.math.BigInteger) and the underlying scheme helpers, so we expect an exception.

testAggregateByteCompatibilityWithEth2

public void testAggregateByteCompatibilityWithEth2()

Eth2 aggregate vector: aggregating three published Eth2 signatures must produce a specific compressed G2 byte string.

testFastAggregateVerifyValid

public void testFastAggregateVerifyValid()

Eth2 fast_aggregate_verify valid case: three pubkeys and one aggregated signature over the same message must verify.

testFastAggregateVerifyTamperedRejected

public void testFastAggregateVerifyTamperedRejected()

Eth2 fast_aggregate_verify tampered case: same pubkeys / message but with the trailing bytes of the signature flipped — verify must reject.

testEth2VectorRoundTripVerify

public void testEth2VectorRoundTripVerify()