Security fixes - #105

Merged

davxy merged 29 commits into

mainfrom

Sep 21, 2026

Commits on Sep 18, 2026

Commits on Sep 19, 2026

Revert RingSetup encoding breaking change
davxy
committed
750d56b
Reduce prover index modulo max ring size
davxy
committed
e7370a9
Apply canonical encoding rule on the unchecked path too
davxy
committed
bec4d4b
Docs
davxy
committed
40e4c89
dedicated module for canonical decoder
davxy
committed
dce747a
Make RingSetup fields private
davxy
committed
6a303e0
Make the RingContext field private
davxy
committed
f377087
Count a ring size of 0 as 1
davxy
committed
6fe40fd
Fix docs
davxy
committed
5b89d14
Run Valid::check on the checked decode path
davxy
committed
7bfc7a1
Reject a builder with more keys than slots
davxy
committed
bb04138
Input and VrfIo are not serializable
davxy
committed
cb5f528
Make the Serializable trait crate-private
davxy
committed
13d7a34
Return an error from VerifierKeyBuilder::new on a failed lookup
davxy
committed
0b82b52
docs
davxy
committed
6408303
Rename insecure setup constructor, wrap the ring index in constant time
davxy
committed
b4c8959
Reduce docs verbosity
davxy
committed
fe16b6c
More pruning
davxy
committed
26ed547
Reduce tests verbosity
davxy
committed
221b40b
Trim changelog
davxy
committed
512881c
fluff
davxy
committed
ce0de04

Commits on Sep 21, 2026

Make the security parameter a Suite constant
davxy
committed
6c48381
Merge branch 'main' into security-fixes
davxy
committed
7cd5b4f
Let the challenge len exceed the security level
davxy
committed
6fcfbde