pedersen

Jun 12, 2025 GO-2025-3912

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

Jan 24, 2025 GO-2025-3912 +1 more

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

  GO-2025-3929: Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark

Changes in this version

type VerifyingKey

+ GSigmaNeg G2El

Sep 6, 2024 GO-2024-3244 +2 more

  GO-2024-3244: Gnark out-of-memory during deserialization with crafted inputs in github.com/consensys/gnark

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

  GO-2025-3929: Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark

Changes in this version

type VerifyingKey

+ GSigma G2El

Apr 22, 2024 GO-2024-3122 +4 more

  GO-2024-3122: Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark

  GO-2024-3123: Commitments to private witnesses in Groth16 as implemented break zero-knowledge property in github.com/consensys/gnark

  GO-2024-3244: Gnark out-of-memory during deserialization with crafted inputs in github.com/consensys/gnark

  GO-2025-3912: Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

  GO-2025-3929: Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark

Changes in this version

+ type Commitment struct

+ G1El G1El

+ func ValueOfCommitment[G1El algebra.G1ElementT](cmt any) (Commitment[G1El], error)

+ type KnowledgeProof struct

+ G1El G1El

+ func ValueOfKnowledgeProof[G1El algebra.G1ElementT](kp any) (KnowledgeProof[G1El], error)

+ type Verifier struct

+ func NewVerifier[FR emulated.FieldParams, G1El algebra.G1ElementT, G2El algebra.G2ElementT, ...](api frontend.API) (*Verifier[FR, G1El, G2El, GtEl], error)

+ func (v *Verifier[FR, G1El, G2El, GtEl]) AssertCommitment(commitment Commitment[G1El], knowledgeProof KnowledgeProof[G1El], ...) error

+ func (v *Verifier[FR, G1El, G2El, GtEl]) FoldCommitments(commitments []Commitment[G1El], auxTranscript ...*emulated.Element[FR]) (Commitment[G1El], error)

+ type VerifierOption func(cfg *verifierCfg) error

+ func WithSubgroupCheck() VerifierOption

+ type VerifyingKey struct

+ G G2El

+ GRootSigmaNeg G2El

+ func ValueOfVerifyingKeyFixed[G2El algebra.G2ElementT](vk any) (VerifyingKey[G2El], error)

+ func ValueOfVerifyingKey[G2El algebra.G2ElementT](vk any) (VerifyingKey[G2El], error)