Browser-based weak Fiat-Shamir demo — Frozen Heart, Trail of Bits 2022. Fiat-Shamir replaces the verifier's random challenge with a hash — sound only if it covers everything. Omit the public key and forge a Schnorr proof of a false statement that the real verifier accepts. No backends. No simulated math.
cryptography cryptanalysis fiat-shamir schnorr non-interactive-zero-knowledge ristretto255 crypto-lab sigma-protocol zero-knowledge-proof frozen-heart trail-of-bits proof-forgery
-
Updated
Aug 27, 2026 - TypeScript