Skip to content

fix: enforce end-of-transcript validation in WhirR1CS verifier [F]#355

Open
Bisht13 wants to merge 1 commit intov1from
px/fix-eof-validation
Open

fix: enforce end-of-transcript validation in WhirR1CS verifier [F]#355
Bisht13 wants to merge 1 commit intov1from
px/fix-eof-validation

Conversation

@Bisht13
Copy link
Collaborator

@Bisht13 Bisht13 commented Mar 20, 2026

Summary

  • Calls VerifierState::check_eof at the end of WhirR1CSScheme::verify to reject proofs with unparsed trailing bytes in narg_string or hints
  • Addresses audit Issue F: missing end-of-transcript validation causes proof malleability

Test plan

  • cargo check -p provekit-verifier passes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant