Is it worth noting under which circumstances weak FS transformation is safe to use and when it isn’t…
Or do the findings in Weak Fiat-Shamir Attacks on Modern Proof Systems not change any our assumptions?
2 Likes