v0.18.0
Tl:dr
This version fixes a high risk vulnerability in multi scalar multiplications, which affects the whole library (zk proofs verifs, signatures).
Exploits today are unlikely, but you must update your garaga dependencies and generated contracts ASAP.
Details to follow.
What's Changed
- Honk verification error messages and cleanup by @shramee in #391
- Replace ECIP by GLV/FakeGLV by @feltroidprime in #387
- Release v0.18.0 by @feltroidprime in #392
garaga gennow prints useful information if detected noir versions are incorrect
New Noir recommended versions
Starknet Flavours are now fully integrated !
to use them, make sure to use bb with 0.86.0-starknet.1 version.
Nargo :
noirup --version 1.0.0-beta.3 # install
nargo --version # 1.0.0-beta.3
Barretenberg :
bbup --version 0.86.0-starknet.1
bb --version # 0.86.0Full Changelog: v0.17.0...v0.18.0