PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Frozen Heart vulnerability in PlonK

blog.trailofbits.com | vulnerability | #cryptography | #vulnerability | #zero-knowledge-proofs | #fiat-shamir | #frozen-heart | #plonk
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part four of the Frozen Heart series shows how insecure Fiat-Shamir implementations break soundness in PlonK, a modern ZK-SNARK scheme, letting attackers forge proofs for arbitrary statements.
Published
Collected

Related coverage

vulnerability · blog.trailofbits.com
A mistake in the bulletproofs paper could have led to the theft of millions of dollars
Trail of Bits found a Frozen Heart flaw in Incognito Chain's bulletproofs: insecure Fiat-Shamir let attackers forge proofs, mint tokens, and drain shielded funds undetected.
vulnerability · blog.trailofbits.com
The Frozen Heart vulnerability in Bulletproofs
The Frozen Heart series demonstrates an exploit against Bulletproofs range proofs, where insecure Fiat-Shamir transformation lets attackers forge validity proofs without knowing secret values.
vulnerability · blog.trailofbits.com
The Frozen Heart vulnerability in Girault’s proof of knowledge
This Frozen Heart installment walks through exploiting the insecure Fiat-Shamir implementation in Girault's proof of knowledge, which proves discrete logarithms over composite moduli.
blog · blog.trailofbits.com
Coordinated disclosure of vulnerabilities affecting Girault, Bulletproofs, and PlonK
Trail of Bits coordinated disclosure of Frozen Heart, insecure Fiat-Shamir implementations enabling zero-knowledge proof forgery, affecting SnarkJS, gnark, Dusk Network's plonk, and others.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
vulnerability · blog.trailofbits.com
Reinventing Vulnerability Disclosure using Zero-knowledge Proofs
Trail of Bits is partnering with cryptographer Matthew Green on DARPA-funded research into zero-knowledge proofs of exploitability, letting researchers prove a bug exists without revealing it.
Back