Skip to content
Threat Feed

Tag

Challenge-Entropy

1 brief RSS
high advisory

Plonky3 Challenger Transcript Malleability and Challenge Entropy Loss

The p3-challenger rust package is vulnerable to transcript malleability and challenge entropy loss, allowing attackers to craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir due to partial-chunk aliasing, non-injective squeeze, and high-bit truncation.

p3-challenger transcript-malleability challenge-entropy cryptography rust
2r