search

0xFableOrg / 0xFable

A fully on-chain trading card game. There will be elves, wizards & shit. Drama and broken friendships also.
https://twitter.com/0xFableGame
BSD 3-Clause Clear License
106 stars 39 forks source link

Draw Initial Hand Proof Integration #71

Closed norswap closed 11 months ago

norswap commented 11 months ago

Losing my absolute sanity on this.

The problem: I can generate a zk proof for drawing the initial hand locally, I can also verify it locally. However, on-chain the verification fails systematically.

I've setup an event that relays all the public inputs and the proof used on-chain. They are absolutely identical to the ones used off-chain.

It's to the point where I'm seriously suspecting some kind of snarkjs-side bug.

norswap commented 11 months ago

Fixed — I was sampling random values from [0, 256) instead of bounding them to the field prime. There probably is a bug in Snarkjs that makes it possible to prove & verify with values that are too large: https://github.com/iden3/snarkjs/issues/436