search

zcash / halo2

The Halo2 zero-knowledge proving system
https://zcash.github.io/halo2/
Other
743 stars 499 forks source link

ensure extended_k <= S #791

Open zhiqiangxu opened 1 year ago

zhiqiangxu commented 1 year ago

If extended_k > S, the for loop will do nothing:

        for _ in extended_k..F::S {
            extended_omega = extended_omega.square();
        }

and extended_omega will be left as F::ROOT_OF_UNITY, which is incorrect.