You need to sign in or sign up before continuing.
Avoid packing when there is only one proof - Fixes #158
Removing the "security" label: we initially thought that pack with 1 proof could be insecure, given that the pack commitments were not binding (since srs_s[0] = srs_t[0]), but they seem to be indeed binding, given that we need two coordinates to mount the attack to binding.
Edited by Miguel Ambrona