sumcheck

Jun 12, 2025 GO-2025-3912

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

Jan 24, 2025 GO-2025-3912 +1 more

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

  GO-2025-3929: Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark

Sep 6, 2024 GO-2024-3244 +2 more

  GO-2024-3244: Gnark out-of-memory during deserialization with crafted inputs in github.com/consensys/gnark

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

  GO-2025-3929: Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark

Apr 22, 2024 GO-2024-3122 +4 more

  GO-2024-3122: Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark

  GO-2024-3123: Commitments to private witnesses in Groth16 as implemented break zero-knowledge property in github.com/consensys/gnark

  GO-2024-3244: Gnark out-of-memory during deserialization with crafted inputs in github.com/consensys/gnark

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

  GO-2025-3929: Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark

Changes in this version

+ type EvaluationProof any

+ type LazyClaims interface

+ AssertEvaluation func(r []*emulated.Element[FR], ...) error

+ CombinedSum func(coeff *emulated.Element[FR]) *emulated.Element[FR]

+ Degree func(i int) int

+ NbClaims func() int

+ NbVars func() int

+ type Option func(c *config) error

+ func WithClaimPrefix(prefix string) Option

+ type Proof struct

+ FinalEvalProof EvaluationProof

+ RoundPolyEvaluations []polynomial.Univariate[FR]

+ type Verifier struct

+ func NewVerifier[FR emulated.FieldParams](api frontend.API, opts ...Option) (*Verifier[FR], error)

+ func (v *Verifier[FR]) Verify(claims LazyClaims[FR], proof Proof[FR], opts ...VerifyOption[FR]) error

+ type VerifyOption func(c *verifyCfg[FR]) error

+ func WithBaseChallenges[FR emulated.FieldParams](baseChallenges []*emulated.Element[FR]) VerifyOption[FR]