Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(security): Bump gnark version #991

Merged
merged 11 commits into from
Sep 24, 2024
Merged

Conversation

PatStiles
Copy link
Contributor

@PatStiles PatStiles commented Sep 17, 2024

Bumps the gnark version from v.0.11.0 -> v.0.14.0 to address security concerns outlined by the gnark team here. Closes #967

Copy link
Contributor

@entropidelic entropidelic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

when testing, Go projects don't build. It seems there has been some API changes

make aggregator_start
Starting Aggregator...
# github.com/crate-crypto/go-kzg-4844/internal/kzg
../go/pkg/mod/github.com/crate-crypto/go-kzg-4844@v1.0.0/internal/kzg/kzg_verify.go:73:20: claimedValueG1Jac.ScalarMultiplicationAffine undefined (type bls12381.G1Jac has no field or method ScalarMultiplicationAffine)%

@PatStiles
Copy link
Contributor Author

go-kzg-4844 and c-kzg-4844 were updated to accommodate the changes with the gnark library.

@PatStiles
Copy link
Contributor Author

@entropidelic re-importing the gnark packages in the batcher resolved the verification error on my end.

@entropidelic
Copy link
Contributor

entropidelic commented Sep 23, 2024

after running go clean in the root folder, cargo clean in the batcher folder, and re-building everything, it worked

@MauroToscano
Copy link
Contributor

We should specify the new supported gnark version on the docs

@PatStiles
Copy link
Contributor Author

@MauroToscano Docs updated

@entropidelic entropidelic merged commit d70ac35 into staging Sep 24, 2024
1 check passed
@entropidelic entropidelic deleted the chore/bump_gnark_version branch September 24, 2024 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants