pluto / aes-proof

Circom AES-GCM circuits
Apache License 2.0
20 stars 1 forks source link

feat: Investigate security of The AES components #88

Open 0xJepsen opened 3 days ago

0xJepsen commented 3 days ago

The may be some security considerations outlined in the crema labs work in this PR https://github.com/crema-labs/aes-circom/pull/7, we should pull the downstream changes and also investigate their constraints carefully.

0xJepsen commented 2 days ago

Looks like SBOX is not constrained at all https://github.com/pluto/aes-proof/blob/038453186a355d40520608c0d1f7b9140c40ecb5/circuits/aes-gcm/aes/sbox128.circom#L10-L29