Skip to content

fix: enforce end-of-transcript validation in WhirR1CS verifier [LA - F]#356

Open
Bisht13 wants to merge 1 commit intomainfrom
px/fix-eof-validation
Open

fix: enforce end-of-transcript validation in WhirR1CS verifier [LA - F]#356
Bisht13 wants to merge 1 commit intomainfrom
px/fix-eof-validation

Conversation

@Bisht13
Copy link
Collaborator

@Bisht13 Bisht13 commented Mar 20, 2026

Summary

  • Calls VerifierState::check_eof at the end of WhirR1CSScheme::verify to reject proofs with unparsed trailing bytes in narg_string or hints
  • Addresses audit Issue F: missing end-of-transcript validation causes proof malleability

Test plan

  • cargo check -p provekit-verifier passes

@ashpect ashpect changed the title fix: enforce end-of-transcript validation in WhirR1CS verifier [F] fix: enforce end-of-transcript validation in WhirR1CS verifier [LA - F] Mar 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant