The main point of this PR is to restrict providing more messages to the blsVerifyProof than it was revealed originally. For now it is possible to provide all revealed + signed messages in the right order and then add to the messages array some additional, not signed, not revealed messages and receive a successful response result.verified === true. More details in the issue
Description
Motivation and Context
The main point of this PR is to restrict providing more messages to the
blsVerifyProof
than it was revealed originally. For now it is possible to provide all revealed + signed messages in the right order and then add to the messages array some additional, not signed, not revealed messages and receive a successful responseresult.verified === true
. More details in the issueDoes this PR introduce a breaking change?
Which merge strategy will you use?