swisspost-evoting-go-poc/pkg/zkp
saymrwulf bc43c3d3aa Instrument real crypto ops to emit live LaTeX events
The running cryptography now narrates itself. Each headline operation emits a
trace.Event carrying its LaTeX notation plus the actual runtime values, the
instant it executes:

- Ed25519 signature on every inter-party message (envelope.Seal)
- X25519 ECDH key agreement for confidential card delivery (NewSecureChannel)
- ElGamal ballot encryption E1 = (g^r, pk^r·m) with the real r (castBallot)
- Fiat-Shamir challenge e = H(...) mod q (Schnorr proof)
- Bayer-Groth verifiable shuffle C' = {ReEnc_pk(C_π(i))} with N (mix-net)

Ceremony phases set trace phase/party context so events are attributed to the
acting stakeholder and phase. Instrumentation is behind the enabled-check, so
normal runs pay nothing.

Test: a full traced ceremony captures 184 live events across all five headline
kinds, each with non-empty LaTeX and live values, correctly phase/party-tagged.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-07 14:06:08 +02:00
..
decryption.go Due-diligence hardening + Rust transport-security layer 2026-07-06 14:42:34 +02:00
exponentiation.go Due-diligence hardening + Rust transport-security layer 2026-07-06 14:42:34 +02:00
plaintext_equality.go Due-diligence hardening + Rust transport-security layer 2026-07-06 14:42:34 +02:00
plaintext_equality_test.go Pin plaintext-equality proof soundness with a correct-usage test 2026-07-06 15:42:29 +02:00
schnorr.go Instrument real crypto ops to emit live LaTeX events 2026-07-07 14:06:08 +02:00
types.go Due-diligence hardening + Rust transport-security layer 2026-07-06 14:42:34 +02:00
zkp_test.go Due-diligence hardening + Rust transport-security layer 2026-07-06 14:42:34 +02:00