Skip to content

Avoid packing when there is only one proof - Fixes #158

Miguel Ambrona requested to merge no-pack-on-one-proof into master

Removing the "security" label: we initially thought that pack with 1 proof could be insecure, given that the pack commitments were not binding (since srs_s[0] = srs_t[0]), but they seem to be indeed binding, given that we need two coordinates to mount the attack to binding.

Edited by Miguel Ambrona

Merge request reports