mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekay
abf99d05fc
Restructured from flat .tex/.pdf files into per-paper subdirectories. Added Antje Worring as co-author on all papers. Synced PDFs to pdfs/ for download site.
24 lines
961 B
TeX
24 lines
961 B
TeX
\section{Security Considerations}
|
|
|
|
|
|
\subsection{Subgroup Checks}
|
|
|
|
For BLS12-381 and BN254, input points must be checked for subgroup membership.
|
|
Accepting points outside the prime-order subgroup enables small-subgroup attacks
|
|
that can forge signatures or break pairing assumptions.
|
|
|
|
\subsection{Gas Griefing}
|
|
|
|
If \texttt{RequiredGas} underestimates the true cost, an attacker can craft inputs
|
|
that consume more CPU time than the gas price reflects, slowing down validators.
|
|
We benchmark worst-case inputs (maximum-cost curve operations, maximum-length batch
|
|
operations) and set gas costs to the worst case.
|
|
|
|
\subsection{Timing Side Channels}
|
|
|
|
Precompile execution time must not depend on secret data. For verification precompiles,
|
|
this is straightforward: the input (public key, signature, message) is public. For FHE
|
|
precompiles that handle encrypted data, we use constant-time implementations.
|
|
|
|
%% ============================================================
|