Skip to content

Conversation

@AztecBot
Copy link
Collaborator

@AztecBot AztecBot commented Aug 28, 2025

BEGIN_COMMIT_OVERRIDE
chore!: Merge two ecdsa verification functions (#16509)
fix(bb): grumpkin_srs_gen debug-build linking
chore: remove no-longer-used lookup grand prod delta (#16543)
feat!: share transcript between pg and decider (#16642)
END_COMMIT_OVERRIDE

Audit part 3: merge the two verification functions into one and
restructuring.

* We merge the remaining two ecdsa verification functions into one. The
difference between the two was that one was computing the result of
ECDSA signature verification _and_ enforcing the verification to be
successful, while the other was simply computing the result of ECDSA
signature verification. We maintain only the function that performs the
verification but doesn't enforce the verification to be successful. The
rationale is that in Noir we expose signature verification, but we
always receive the supposed result: `true` or `false`, and then we
verify that the signature verification resulted in the expected result.
* We restructure the signature verification function to make the
constraints clearer.
* We restructure testing to use `gtest`. This is in preparation of more
thorough testing to be introduced in a follow-up PR.
Copy link
Collaborator

@ludamad ludamad left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Auto-approved

@AztecBot
Copy link
Collaborator Author

🤖 Auto-merge enabled after 4 hours of inactivity. This PR will be merged automatically once all checks pass.

@AztecBot AztecBot enabled auto-merge August 28, 2025 16:02
@AztecBot AztecBot added this pull request to the merge queue Aug 28, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Aug 28, 2025
AztecBot and others added 4 commits August 28, 2025 19:37
Closes AztecProtocol/barretenberg#1453.

Shares the transcript between PG/Merge and the Decider protocols for
hiding kernel soundness. We want to make sure that we can't pick the
accumulator that the Decider runs on without affecting the challenges in
the Decider. This mitigates an origin tag check failure as we had values
from two different transcripts interacting in Decider.
@AztecBot AztecBot added this pull request to the merge queue Aug 29, 2025
@AztecBot
Copy link
Collaborator Author

🤖 Auto-merge enabled after 4 hours of inactivity. This PR will be merged automatically once all checks pass.

Merged via the queue into next with commit 0738287 Aug 29, 2025
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants