Skip to content

Absorb full field elements rather than repacked field elements - #264

Merged
winderica merged 2 commits into
stagingfrom
fix/challenge-bits
Jun 1, 2026
Merged

Absorb full field elements rather than repacked field elements#264
winderica merged 2 commits into
stagingfrom
fix/challenge-bits

Conversation

@winderica

Copy link
Copy Markdown
Member

Previously we generate bit challenges in the following way:

  1. Squeeze field elements from the transcript
  2. Decompose field elements into bits
  3. Repack bits into field elements
  4. Absorb repacked field elements

Step 3 is suspicious because the repacked field elements have smaller ranges. Not sure if this has any impact on security, but with this PR, challenge bits are now generated as follows to avoid potential risks:

  1. Squeeze field elements from the transcript
  2. Absorb full field elements
  3. Decompose field elements into bits

@winderica
winderica merged commit a038427 into staging Jun 1, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant