Skip to content

Bind BFV proofs to exact supported parameter presets #1674

Closed

Description

@hmzakhalid

Audit reference: I30

What can go wrong

Unsupported BFV parameter combinations could select the wrong proof preset, and an invalid polynomial degree could panic during construction.

When it happens

This boundary is reached when clients build verifiable encryption inputs and when proof code resolves the requested BFV parameters.

What changed

Only exact supported parameter pairs resolve to a preset, and canonical parameter construction is fallible.

Why the change works

The encryption parameters and the circuit constants must now come from the same known tuple; malformed inputs return an error instead of diverging or panicking.

Checks

Noncanonical tuple, invalid degree, supported preset, and variance tests pass.

Activity

  1. added
    bugSomething isn't working
    ciphernodeRelated to the ciphernode package
    cryptographyConcerned with cryptography
    securityRelevant to security
    on Jul 11, 2026
  2. hmzakhalid commented on Jul 13, 2026

    @hmzakhalid
    CollaboratorAuthor

    Fixed in 073c44c74a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingciphernodeRelated to the ciphernode packagecryptographyConcerned with cryptographysecurityRelevant to security

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions