Latest ZSA demo version with asset state and multiple action groups support

Cargo.lock

@@ -441,7 +441,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "143f5327f23168716be068f8e1014ba2ea16a6c91e8777bc8927da7b51e1df1f"
 dependencies = [
  "bs58",
- "hmac",
+ "hmac 0.13.0-pre.4",
  "rand_core 0.6.4",
  "ripemd 0.2.0-pre.4",
  "secp256k1 0.29.1",
@@ -1247,6 +1247,7 @@ dependencies = [
  "block-buffer 0.10.4",
  "const-oid",
  "crypto-common 0.1.6",
+ "subtle",
 ]
 
 [[package]]
@@ -1305,7 +1306,9 @@ dependencies = [
  "der",
  "digest 0.10.7",
  "elliptic-curve",
+ "rfc6979",
  "signature",
+ "spki",
 ]
 
 [[package]]
@@ -1373,6 +1376,7 @@ dependencies = [
  "ff",
  "generic-array",
  "group",
+ "pkcs8",
  "rand_core 0.6.4",
  "sec1",
  "subtle",
@@ -1936,6 +1940,15 @@ version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6fe2267d4ed49bc07b63801559be28c718ea06c4738b7a03c94df7386d2cde46"
 
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest 0.10.7",
+]
+
 [[package]]
 name = "hmac"
 version = "0.13.0-pre.4"
@@ -2495,6 +2508,7 @@ dependencies = [
  "cfg-if 1.0.0",
  "ecdsa",
  "elliptic-curve",
+ "once_cell",
  "sha2 0.10.8",
  "signature",
 ]
@@ -3804,6 +3818,16 @@ dependencies = [
  "winreg",
 ]
 
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac 0.12.1",
+ "subtle",
+]
+
 [[package]]
 name = "rgb"
 version = "0.8.47"
@@ -4059,6 +4083,7 @@ dependencies = [
  "base16ct",
  "der",
  "generic-array",
+ "pkcs8",
  "subtle",
  "zeroize",
 ]
@@ -6195,6 +6220,7 @@ dependencies = [
  "incrementalmerkletree",
  "itertools 0.13.0",
  "jubjub",
+ "k256",
  "lazy_static",
  "nonempty 0.7.0",
  "num-integer",

zebra-chain/Cargo.toml

@@ -66,6 +66,9 @@ tx_v6 = [
     "nonempty"
 ]
 
+# Support for ZSA asset swaps
+zsa-swap = []
+
 [dependencies]
 
 # Cryptography
@@ -158,6 +161,8 @@ rand_chacha = { version = "0.3.1", optional = true }
 
 zebra-test = { path = "../zebra-test/", version = "1.0.0-beta.41", optional = true }
 
+k256 = "0.13.3"
+
 [dev-dependencies]
 # Benchmarks
 criterion = { version = "0.5.1", features = ["html_reports"] }

zebra-chain/src/orchard.rs

@@ -23,7 +23,7 @@ pub use address::Address;
 pub use commitment::{CommitmentRandomness, NoteCommitment, ValueCommitment};
 pub use keys::Diversifier;
 pub use note::{EncryptedNote, Note, Nullifier, WrappedNoteKey};
-pub use shielded_data::{AuthorizedAction, Flags, ShieldedData};
+pub use shielded_data::{ActionGroup, AuthorizedAction, Flags, ShieldedData};
 pub use shielded_data_flavor::{OrchardVanilla, ShieldedDataFlavor};
 
 #[cfg(feature = "tx_v6")]

zebra-chain/src/orchard/shielded_data.rs

@@ -28,7 +28,8 @@ use orchard::{note::AssetBase, value::ValueSum};
 
 use super::{OrchardVanilla, ShieldedDataFlavor};
 
-/// A bundle of [`Action`] descriptions and signature data.
+// FIXME: wrap all ActionGroup usages with tx_v6 feature flag?
+/// Action Group description.
 #[derive(Clone, Debug, PartialEq, Eq, Deserialize, Serialize)]
 #[cfg_attr(
     not(feature = "tx_v6"),
@@ -41,40 +42,77 @@ use super::{OrchardVanilla, ShieldedDataFlavor};
         deserialize = "Flavor::BurnType: serde::Deserialize<'de>"
     ))
 )]
-pub struct ShieldedData<Flavor: ShieldedDataFlavor> {
+pub struct ActionGroup<Flavor: ShieldedDataFlavor> {
     /// The orchard flags for this transaction.
     /// Denoted as `flagsOrchard` in the spec.
     pub flags: Flags,
-    /// The net value of Orchard spends minus outputs.
-    /// Denoted as `valueBalanceOrchard` in the spec.
-    pub value_balance: Amount,
     /// The shared anchor for all `Spend`s in this transaction.
     /// Denoted as `anchorOrchard` in the spec.
     pub shared_anchor: tree::Root,
+
+    /// Block height after which this Bundle's Actions are invalid by consensus.
+    /// Denoted as `nAGExpiryHeight` in the spec.
+    #[cfg(feature = "tx_v6")]
+    pub expiry_height: u32,
+
+    /// Assets intended for burning
+    /// Denoted as `vAssetBurn` in the spec (ZIP 230).
+    #[cfg(feature = "tx_v6")]
+    pub burn: Flavor::BurnType,
+
     /// The aggregated zk-SNARK proof for all the actions in this transaction.
     /// Denoted as `proofsOrchard` in the spec.
     pub proof: Halo2Proof,
     /// The Orchard Actions, in the order they appear in the transaction.
     /// Denoted as `vActionsOrchard` and `vSpendAuthSigsOrchard` in the spec.
     pub actions: AtLeastOne<AuthorizedAction<Flavor>>,
+}
+
+impl<Flavor: ShieldedDataFlavor> ActionGroup<Flavor> {
+    /// Iterate over the [`Action`]s for the [`AuthorizedAction`]s in this
+    /// action group, in the order they appear in it.
+    pub fn actions(&self) -> impl Iterator<Item = &Action<Flavor>> {
+        self.actions.actions()
+    }
+}
+
+/// A bundle of [`Action`] descriptions and signature data.
+#[derive(Clone, Debug, PartialEq, Eq, Deserialize, Serialize)]
+#[cfg_attr(
+    not(feature = "tx_v6"),
+    serde(bound(serialize = "Flavor::EncryptedNote: serde::Serialize"))
+)]
+#[cfg_attr(
+    feature = "tx_v6",
+    serde(bound(
+        serialize = "Flavor::EncryptedNote: serde::Serialize, Flavor::BurnType: serde::Serialize",
+        deserialize = "Flavor::BurnType: serde::Deserialize<'de>"
+    ))
+)]
+pub struct ShieldedData<Flavor: ShieldedDataFlavor> {
+    /// Action Group descriptions.
+    /// Denoted as `vActionGroupsOrchard` in the spec (ZIP 230).
+    pub action_groups: AtLeastOne<ActionGroup<Flavor>>,
+    /// Denoted as `valueBalanceOrchard` in the spec.
+    pub value_balance: Amount,
     /// A signature on the transaction `sighash`.
     /// Denoted as `bindingSigOrchard` in the spec.
     pub binding_sig: Signature<Binding>,
-
-    #[cfg(feature = "tx_v6")]
-    /// Assets intended for burning
-    /// Denoted as `vAssetBurn` in the spec (ZIP 230).
-    pub burn: Flavor::BurnType,
 }
 
-impl<Flavor: ShieldedDataFlavor> fmt::Display for ShieldedData<Flavor> {
+impl<Flavor: ShieldedDataFlavor> fmt::Display for ActionGroup<Flavor> {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        let mut fmter = f.debug_struct("orchard::ShieldedData");
+        let mut fmter = f.debug_struct("orchard::ActionGroup");
 
         fmter.field("actions", &self.actions.len());
-        fmter.field("value_balance", &self.value_balance);
         fmter.field("flags", &self.flags);
 
+        #[cfg(feature = "tx_v6")]
+        fmter.field("expiry_height", &self.expiry_height);
+
+        #[cfg(feature = "tx_v6")]
+        fmter.field("burn", &self.burn.as_ref().len());
+
         fmter.field("proof_len", &self.proof.zcash_serialized_size());
 
         fmter.field("shared_anchor", &self.shared_anchor);
@@ -83,11 +121,25 @@ impl<Flavor: ShieldedDataFlavor> fmt::Display for ShieldedData<Flavor> {
     }
 }
 
+impl<Flavor: ShieldedDataFlavor> fmt::Display for ShieldedData<Flavor> {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let mut fmter = f.debug_struct("orchard::ShieldedData");
+
+        fmter.field("action_groups", &self.action_groups);
+        fmter.field("value_balance", &self.value_balance);
+
+        // FIXME: format binding_sig as well?
+
+        fmter.finish()
+    }
+}
+
 impl<Flavor: ShieldedDataFlavor> ShieldedData<Flavor> {
     /// Iterate over the [`Action`]s for the [`AuthorizedAction`]s in this
     /// transaction, in the order they appear in it.
     pub fn actions(&self) -> impl Iterator<Item = &Action<Flavor>> {
-        self.actions.actions()
+        self.authorized_actions()
+            .map(|authorized_action| &authorized_action.action)
     }
 
     /// Collect the [`Nullifier`]s for this transaction.
@@ -139,7 +191,11 @@ impl<Flavor: ShieldedDataFlavor> ShieldedData<Flavor> {
                 (ValueSum::default() + i64::from(self.value_balance)).unwrap(),
                 AssetBase::native(),
             );
-            let burn_value_commitment = compute_burn_value_commitment(self.burn.as_ref());
+            let burn_value_commitment = self
+                .action_groups
+                .iter()
+                .map(|action_group| compute_burn_value_commitment(action_group.burn.as_ref()))
+                .sum::<ValueCommitment>();
             cv - cv_balance - burn_value_commitment
         };
 
@@ -160,6 +216,29 @@ impl<Flavor: ShieldedDataFlavor> ShieldedData<Flavor> {
     pub fn note_commitments(&self) -> impl Iterator<Item = &pallas::Base> {
         self.actions().map(|action| &action.cm_x)
     }
+
+    /// Makes a union of the flags for this transaction.
+    pub fn flags_union(&self) -> Flags {
+        self.action_groups
+            .iter()
+            .map(|action_group| &action_group.flags)
+            .fold(Flags::empty(), |result, flags| result.union(*flags))
+    }
+
+    /// Collect the shared anchors for this transaction.
+    pub fn shared_anchors(&self) -> impl Iterator<Item = tree::Root> + '_ {
+        self.action_groups
+            .iter()
+            .map(|action_group| action_group.shared_anchor)
+    }
+
+    /// Iterate over the [`AuthorizedAction`]s in this
+    /// transaction, in the order they appear in it.
+    pub fn authorized_actions(&self) -> impl Iterator<Item = &AuthorizedAction<Flavor>> {
+        self.action_groups
+            .iter()
+            .flat_map(|action_group| action_group.actions.iter())
+    }
 }
 
 impl<Flavor: ShieldedDataFlavor> AtLeastOne<AuthorizedAction<Flavor>> {

zebra-chain/src/orchard/shielded_data_flavor.rs

@@ -53,6 +53,8 @@ pub trait ShieldedDataFlavor: OrchardFlavor {
     #[cfg(feature = "tx_v6")]
     type BurnType: Clone
         + Debug
+        + PartialEq
+        + Eq
         + ZcashDeserialize
         + ZcashSerialize
         + AsRef<[BurnItem]>

zebra-chain/src/orchard_zsa.rs

@@ -3,8 +3,14 @@
 #[cfg(any(test, feature = "proptest-impl"))]
 mod arbitrary;
 
+pub mod asset_state;
 mod burn;
 mod issuance;
 
-pub(crate) use burn::{compute_burn_value_commitment, Burn, BurnItem, NoBurn};
+pub(crate) use burn::{compute_burn_value_commitment, Burn, NoBurn};
 pub(crate) use issuance::IssueData;
+
+pub use burn::BurnItem;
+
+// FIXME: should asset_state mod be pub and these structs be pub as well?
+pub use asset_state::{AssetBase, AssetState, AssetStateChange, IssuedAssets, IssuedAssetsChange};