mirror of
https://github.com/ethereum/go-ethereum.git
synced 2026-08-19 18:32:23 +00:00
core/vm: add subgroup checks for mul/mulexp for G1/G2
This commit is contained in:
parent
5f3c58f1de
commit
e3e8eac891
1 changed files with 20 additions and 0 deletions
|
|
@ -734,6 +734,11 @@ func (c *bls12381G1Mul) Run(input []byte) ([]byte, error) {
|
|||
if p0, err = decodePointG1(input[:128]); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
// 'point is on curve' check already done,
|
||||
// Here we need to apply subgroup checks.
|
||||
if !p0.IsInSubGroup() {
|
||||
return nil, errBLS12381G1PointSubgroup
|
||||
}
|
||||
// Decode scalar value
|
||||
e := new(big.Int).SetBytes(input[128:])
|
||||
|
||||
|
|
@ -787,6 +792,11 @@ func (c *bls12381G1MultiExp) Run(input []byte) ([]byte, error) {
|
|||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
// 'point is on curve' check already done,
|
||||
// Here we need to apply subgroup checks.
|
||||
if !p.IsInSubGroup() {
|
||||
return nil, errBLS12381G1PointSubgroup
|
||||
}
|
||||
points[i] = *p
|
||||
// Decode scalar value
|
||||
scalars[i] = *new(fr.Element).SetBytes(input[t1:t2])
|
||||
|
|
@ -857,6 +867,11 @@ func (c *bls12381G2Mul) Run(input []byte) ([]byte, error) {
|
|||
if p0, err = decodePointG2(input[:256]); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
// 'point is on curve' check already done,
|
||||
// Here we need to apply subgroup checks.
|
||||
if !p0.IsInSubGroup() {
|
||||
return nil, errBLS12381G2PointSubgroup
|
||||
}
|
||||
// Decode scalar value
|
||||
e := new(big.Int).SetBytes(input[256:])
|
||||
|
||||
|
|
@ -910,6 +925,11 @@ func (c *bls12381G2MultiExp) Run(input []byte) ([]byte, error) {
|
|||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
// 'point is on curve' check already done,
|
||||
// Here we need to apply subgroup checks.
|
||||
if !p.IsInSubGroup() {
|
||||
return nil, errBLS12381G2PointSubgroup
|
||||
}
|
||||
points[i] = *p
|
||||
// Decode scalar value
|
||||
scalars[i] = *new(fr.Element).SetBytes(input[t1:t2])
|
||||
|
|
|
|||
Loading…
Reference in a new issue