plonky2
Activity
- Latest release
- 1y ago
- Total releases
- 12
- Cadence
- ~29 days
- Last 12 months
- 0
Details
- License
- MIT OR Apache-2.0
- First release
- Jan 30, 2023
| Version | Released | |
|---|---|---|
1.1.0
unknown
|
1.1.0
unknown
Dependencies (27)
+ 19 more |
|
1.0.2
unknown
|
1.0.2
unknown
Dependencies (27)
+ 19 more |
|
1.0.1
unknown
|
1.0.1
unknown
Dependencies (27)
+ 19 more |
|
1.0.0
unknown
1 CVE
CVE-2025-24802
GHSA-hj49-h7fq-px5h
Jan 30, 2025
Soundness issue with Plonky2 look up tables
8.6
/ 10
High
Network
Low
None
None
Changed
None
High
None
ImpactLookup tables, whose length is not divisible by The cause of problem is that the The fix is done by padding with an existing table pair, similarly to A workaround from the user side is to extend the table (by repeating some entries) so that its length becomes divisible by 26. Fortunately, the seemingly most common use case, namely, hash functions with table-based sbox-es, are not vulnerable:
A malicious prover exploiting this could cheat a circuit which statement is the following:
A malicious prover would be able to convince an honest verifier that they know an PatchesYes, upgrade to v1.0.1 WorkaroundsNo ReferencesAffected versions
1.0.0
Fixed in
1.0.1
References
Updated Jan 30, 2025 · Source: OSV.dev |
1.0.0
unknown
Dependencies (27)
+ 19 more |
|
0.2.2
unknown
|
0.2.2
unknown
Dependencies (27)
+ 19 more |
|
0.2.1
unknown
|
0.2.1
unknown
Dependencies (27)
+ 19 more |
|
0.2.0
unknown
|
0.2.0
unknown
Dependencies (27)
+ 19 more |
|
0.1.4
unknown
|
0.1.4
unknown
Dependencies (26)
+ 18 more |
|
0.1.3
unknown
|
0.1.3
unknown
Dependencies (24)
+ 16 more |
|
0.1.2
unknown
|
0.1.2
unknown
Dependencies (24)
+ 16 more |
|
0.1.1
unknown
|
0.1.1
unknown
Dependencies (24)
+ 16 more |
|
0.1.0
unknown
|
0.1.0
unknown
Dependencies (24)
+ 16 more |