$ cat writeup.md…
$ cat writeup.md…
kalmarctf
Task: forge a ternary-membership proof for Pedersen commitments on P-256 while later opening every commitment to a non-ternary value. Solution: turn each verifier equation into a quadratic with chosen roots {0, 2^i} for m=3, then split the random challenge by its bit decomposition.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar