zirgen

Zirgen 电路编译器 Zirgen 是一种领域特定语言（也称作 "zirgen"）的编译器，用于为 RISC Zero 证明系统创建算术电路。 大多数情况下，RISC Zero 的用户应该使用 Rust 编写他们的 zkApp，并使用我们的 RISC-V zkVM，而不是直接用 Zirgen 构建它们。然而，有时有必要或希望将应用程序的一部分编写为算术电路，以直接集成到我们的证明系统中并获得更好的性能。事实上，我们即将推出一个用 Zirgen 编写的 zkVM 电路版本！Zirgen 将使得为应用程序的重要部分构建加速器成为可能，甚至构建整个其他虚拟机，通过证明组合集成到 RISC...

SP1 V6 Recursion Circuit Row-Count Binding Gap

Summary A soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof that the native verifier would reject. - Affected versions: = 6.0.0, = 6.0.2 - Not affected: SP1 V5 all versions - Severity: High Details Background...

GHSA-F77Q-R5QM-W4M8 sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic

The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...

sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic

The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...

PT-2024-40264 · Gnark · Gnark

Name of the Vulnerable Software and Affected Versions: Gnark versions prior to 1.2.0 Description: The issue concerns the Gnark recursion circuit, which has constraints on arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. The problem arises from improper...