Open Subway2023 opened 1 week ago
In my tests, when Tx and Ty are 0, regardless of the value of s, pubKeyX equals Ux and pubKeyY equals Uy. Therefore, I believe this bug is due to insufficient constraints on Tx and Ty, rather than the insufficient constraints on s mentioned in the audit report.
Bug report says that if we set s = 0 and (Ux, Uy) = pubKey, then (Tx, Ty) can be any pair of values.
My understanding is that if s=0, U is the same, and T is a different set of inputs, the same output should be obtained, but the result is not like this.
Test0
input.json
public.json
Test1
input.json
public.json
I think the above two sets of inputs should receive the same output