agentsclimarketplace
Sign in

Fiat shamir auditor

Skill Yue-Zhou1/zkcrypto-audit/plugins/crypto-primitive-auditors/skills/fiat-shamir-auditor

Audit Fiat-Shamir transcript implementations for completeness, domain separation, challenge derivation order, and public input binding across interactive-to-non-interactive proof transforms.From its SKILL.md

Install
npx -y skills add Yue-Zhou1/zkcrypto-audit --skill fiat-shamir-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.5 KB, 461 tokens by cl100k_base, as published. Nobody here has run it

fiat-shamir-auditor

Domain auditor for transcript-binding and challenge-derivation correctness.

When to Use

  • Reviewing Fiat-Shamir transforms in proof systems and signature schemes
  • Auditing transcript absorb order and challenge derivation timing
  • Checking public input and domain separation binding to transcript state
  • Reviewing multi-round challenge dependencies in non-interactive protocols

When NOT to Use

  • Hash primitive internals when transcript behavior is not under review
  • Generic circuit checks with no transcript/challenge path
  • Marking suspected transcript flaws as confirmed without verification gates

Core Review Areas

  1. Transcript completeness for all prover and context messages
  2. Domain separation across protocol rounds and contexts
  3. Challenge derivation order and dependency correctness
  4. Public input and statement binding to challenges
  5. Multi-round transcript consistency and reset safety
  6. Hash primitive suitability for challenge derivation

Workflow

Phase 1: Transcript inventory

  • Read references/fiat-shamir-checklist.md
  • Identify all absorb/squeeze operations and transcript states
  • Enumerate every statement element expected to influence challenges

Phase 2: Binding review

  • Execute workflows/transcript-binding-review.md
  • Verify commitments are absorbed before challenge derivation
  • Ensure public inputs and domain labels are bound at correct points

Phase 3: Pattern hunt

  • Read references/finding-patterns.md
  • Prioritize frozen-heart style independence, missing absorbs, and reset bugs

Phase 4: Handoff

  • Send surviving findings to crypto-fp-check
  • Use zkbugs-index only after verification succeeds

Output Contract

Produce a transcript-audit handoff that includes:

  • The transcript states, labels, and challenge points involved
  • The exact missing binding, absorb-order, or reset-safety issue
  • Whether the issue affects soundness, replay resistance, or protocol context separation
  • The next verification or reporting route

Reference Index

What ships with it: 4 files

3.4 KB alongside SKILL.md

agents/

references/

workflows/

Keep looking

Skills are one crate of 326,852. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.