cfrg / draft-irtf-cfrg-bls-signature

32 stars 16 forks source link

Behaviour of `CoreAggregateVerify` and `FastAggregateVerify` with `length(PKs)==0` #16

Closed CarlBeek closed 4 years ago

CarlBeek commented 4 years ago

In the case that there are no PKs or no PK-message pairs as input to CoreAggregateVerify and FastAggregateVerify, the behaviour of the functions are undefined. They use indexing that goes out of bounds.

Should the functions return VALID or INVALID in such cases?

While conceptually, when using an accumulator the result is VALID, I think these functions should return INVALID when given no PKs because it is safer to default to INVALID in odd scenarios such as this one.