Vulnerabilities affecting Girault, Bulletproofs, and PlonK (blog.trailofbits.com)
from nlfx@lemmy.ml to cryptography@lemmy.ml on 14 Apr 2022 07:19
https://lemmy.ml/post/230192

Trail of Bits is publicly disclosing critical vulnerabilities that break the soundness of multiple implementations of zero-knowledge proof systems, including PlonK and Bulletproofs. These vulnerabilities are caused by insecure implementations of the Fiat-Shamir transformation that allow malicious users to forge proofs for random statements.