crypto: validate BBS proof parameters (#1810)

2026-08-21 16:50:32 +00:00 · 2026-06-21 13:06:30 +01:00
parent 91cb297e9e
commit 84724bc03e
2 changed files with 24 additions and 0 deletions
@@ -287,8 +287,10 @@ bbsProofVerify ::
  [ByteString] ->
  IO Bool
 bbsProofVerify (BBSPublicKey pk) (BBSProof proof) (BBSHeader header) (BBSPresHeader ph) disclosedIdxs numMessages disclosedMsgs
+  | numMessages < 0 = pure False
  | length disclosedIdxs /= length disclosedMsgs = pure False
  | not (ascendingInRange disclosedIdxs numMessages) = pure False
+  | B.length proof /= bbsProofLen (numMessages - length disclosedIdxs) = pure False
  | otherwise =
  withBS pk $ \pkPtr _ ->
    withBS proof $ \proofPtr proofLen ->