Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Coordinated disclosure of vulnerabilities affecting Girault, Bulletproofs, and PlonK

blog.trailofbits.com | blog | #vulnerability-disclosure | #coordinated-disclosure | #zero-knowledge-proofs | #fiat-shamir | #frozen-heart | #snarkjs | #gnark

Summary

Trail of Bits coordinated disclosure of Frozen Heart, insecure Fiat-Shamir implementations enabling zero-knowledge proof forgery, affecting SnarkJS, gnark, Dusk Network's plonk, and others.
Published
Collected

original ↗

Related coverage

  1. A mistake in the bulletproofs paper could have led to the theft of millions of dollars (blog.trailofbits.com)
  2. The Frozen Heart vulnerability in PlonK (blog.trailofbits.com)
  3. The Frozen Heart vulnerability in Bulletproofs (blog.trailofbits.com)
  4. The Frozen Heart vulnerability in Girault’s proof of knowledge (blog.trailofbits.com)
  5. Our Approach to Coordinated Vulnerability Disclosure (depthfirst.com)
  6. Our crypto experts answer 10 key questions (blog.trailofbits.com)

back