Weak Fiat-Shamir transform + insecure primality check vulnerability in `poanetwork/vdf`

Weak Fiat-Shamir transform + insecure primality check vulnerability in `poanetwork/vdf`

https://github.com/poanetwork/vdf/issues/25

Rust + decentralized databases. I have one goal in life: the ability to stop thinking at will

BDFL of Quilibrium, Eng @ Farcaster, ex-Coinbase, always opinionated, never hydrated

/quilibrium

Yeah I don't have my hope ups either, but it's useful to have the issue there for potential future users. I'll port a cleaned up version of the relevant code for verification to quilibirum-rs

I suspect they aren't going to address it – the repo was last touched three years ago, I don't think they even use it for anything themselves. Plus there's also a licensing issue: GMP is dual licensed LGPL/GPL, but it's directly linked (via classgroup crate), and the project is Apache.