zcash-hackworks
/
zcash-test-vectors
mirror of https://github.com/zcash-hackworks/zcash-test-vectors.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Reject encoded points with v not in the field

This commit is contained in:
Jack Grigg 2018-05-19 06:30:19 +12:00
parent d32ed1a957
commit ef17e5bc26
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sapling_jubjub.py
View File

@ -148,6 +148,8 @@ class Point(object):
u_sign = buf[31] >> 7 u_sign = buf[31] >> 7
buf = buf[:31] + bytes([buf[31] & 0b01111111]) buf = buf[:31] + bytes([buf[31] & 0b01111111])
v = Fq.from_bytes(buf) v = Fq.from_bytes(buf)
if bytes(v) != buf:
return None
vv = v * v vv = v * v
u2 = (vv - Fq.ONE) / (vv * JUBJUB_D - JUBJUB_A) u2 = (vv - Fq.ONE) / (vv * JUBJUB_D - JUBJUB_A)