[Breaking] Critical fixes

CHANGELOG.md

@@ -5,6 +5,29 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0] - 2026-02-25
+
+### Fixed
+
+- **Security**: Bind additional data (`ad`) to nonce derivation. Previously, nonces
+  depended only on the secret key and input point, allowing secret key recovery from
+  two proofs over the same input with different additional data. Affects all schemes.
+- **Security**: Pedersen VRF nonce derivation now cross-binds the blinding factor
+  into the `k` nonce and the secret key into the `kb` nonce, preventing recovery
+  of either scalar when the other varies across proofs.
+- Challenge serialization now validates that the value fits in `CHALLENGE_LEN`,
+  rejecting proofs with oversized challenge values.
+
+### Changed
+
+- `Suite::nonce` signature now takes an additional `ad: &[u8]` parameter.
+  This is a breaking change for custom `Suite` implementations that override `nonce`.
+- Reduce `CHALLENGE_LEN` from 32 to 16 for all built-in suites.
+  This matches the value prescribed by RFC-9381 for curves with comparable security
+  level (128 bits), and reduces proof size without affecting security.
+- Challenge and blinding factor decoding now use suite codec (`scalar_decode`)
+  instead of `from_be_bytes_mod_order`, so endianness follows the suite configuration.
+
 ## [0.2.1] - 2026-02-19
 
 ### Changed
@@ -66,6 +89,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `no_std` support.
 - `parallel` and `asm` optimization features.
 
+[0.3.0]: https://github.com/davxy/ark-vrf/compare/v0.2.1...v0.3.0
 [0.2.1]: https://github.com/davxy/ark-vrf/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/davxy/ark-vrf/compare/v0.1.1...v0.2.0
 [0.1.1]: https://github.com/davxy/ark-vrf/compare/v0.1.0...v0.1.1

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ark-vrf"
-version = "0.2.1"
+version = "0.3.0"
 edition = "2024"
 authors = [ "Davide Galassi <davxy@datawok.net>" ]
 license = "MIT"

benches/SUMMARY.md

@@ -32,22 +32,22 @@ Criterion: `--quick` mode
 
 | Benchmark              |     Time |
 |:-----------------------|---------:|
-| ietf_prove             | 168.7 us |
-| ietf_verify            | 344.4 us |
+| ietf_prove             | 169.5 us |
+| ietf_verify            | 258.1 us |
 
 ## Pedersen VRF Operations (`pedersen.rs`)
 
 | Benchmark              |     Time |
 |:-----------------------|---------:|
-| pedersen_prove         | 476.7 us |
-| pedersen_verify        | 460.1 us |
+| pedersen_prove         | 482.6 us |
+| pedersen_verify        | 358.1 us |
 
 ### Batch Verification
 
 | Benchmark            | n=1      | n=2      | n=4      | n=8      | n=16     | n=32     | n=64     | n=128    | n=256    |
 |:---------------------|----------|----------|----------|----------|----------|----------|----------|----------|----------|
-| batch_prepare        | 1.09 us  | 2.14 us  | 4.22 us  | 7.92 us  | 15.9 us  | 32.1 us  | 67.4 us  | 133.6 us | 269.7 us |
-| batch_verify         | 504.0 us | 598.1 us | 763.6 us | 1.74 ms  | 2.13 ms  | 3.61 ms  | 6.20 ms  | 8.46 ms  | 15.8 ms  |
+| batch_prepare        | 0.91 us  | 1.84 us  | 3.65 us  | 6.73 us  | 13.4 us  | 27.3 us  | 60.2 us  | 115.6 us | 229.6 us |
+| batch_verify         | 507.6 us | 600.2 us | 711.9 us | 1.63 ms  | 1.98 ms  | 3.36 ms  | 6.24 ms  | 8.41 ms  | 14.8 ms  |
 
 ## Ring VRF Operations (`ring.rs`)
 

benches/common.rs

@@ -76,7 +76,13 @@ fn bench_nonce<S: BenchInfo>(c: &mut Criterion) {
 
     let name = format!("{}/nonce[{}]", S::SUITE_NAME, S::NONCE_TAG);
     c.bench_function(&name, |b| {
-        b.iter(|| S::nonce(black_box(secret.scalar()), black_box(input)));
+        b.iter(|| {
+            S::nonce(
+                black_box(secret.scalar()),
+                black_box(input),
+                black_box(b"bench"),
+            )
+        });
     });
 }
 

data/vectors/baby-jubjub_sha-512_tai_ietf.json

@@ -9,8 +9,8 @@
     "h": "9934ed0d523de780958a399db20785f40b88bf02554d02d3f0cbf09d1229d8ae",
     "gamma": "6d6d84991e4270270bd3715bce82d16b4353cb4ef03399b03aec6aa35c51db95",
     "beta": "ca6f041756b6b06fe2219c3c2eee56b78518747195f220da55d1d4eb45705d36b0a46031303bb77c2592a548b228ad59a8ce935508272ad66f31ff7e3dcda63e",
-    "proof_c": "86dc1791372f9f5f49bbbf3366fdb09897208c7e4be37a741680e99bbc8b4400",
-    "proof_s": "2e593aaab04123e7c7524194750f74b0bf4110d81235838d0a9b1e0bc9586a04"
+    "proof_c": "248fc692c4ceb835beb717945fad22dd",
+    "proof_s": "7ca6fb052fa433bf16d05e99db2188b34667206464419da81eaeb712dddd0304"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_ietf - vector-2",
@@ -22,8 +22,8 @@
     "h": "0f40dcaeeb10fd155b2f466c14834050693d57c57488f36ff62bc8f69392c706",
     "gamma": "5bd19036f58b16e0d9ff81e105ac8d4135a13ca6d5727b97361deb015ed5fca8",
     "beta": "7cfdcd003ad38820afc0b3aeb2c351204a9ffa57bb80010c38b16b20c474bc8257d769d2709909b056446873b1eb0a39535b0fbdf4197a53dce8f9befa692af1",
-    "proof_c": "d555c4668e6b841a3e62bb1635a050fe45f3954e9bb21b6656d52e189bb17002",
-    "proof_s": "d97312a28daf602ad28f4dd7dc621cba39d5659ffb47c25b9b9087112b3caa01"
+    "proof_c": "0e89c537d07b3d60d42fc408eef6495d",
+    "proof_s": "1a1346aa0025beeea71bd283873164cd34b4350588bfcd0e344bf88195b41905"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_ietf - vector-3",
@@ -35,8 +35,8 @@
     "h": "9934ed0d523de780958a399db20785f40b88bf02554d02d3f0cbf09d1229d8ae",
     "gamma": "75ca617c6b6d0a29ad431da6e811f33ba5840b95418bfb4c980e97889fefd411",
     "beta": "215c240053c78553189bbb231635c5d4707168a0d13a828353bb44d67812f349a676cf0d1500e39e45a581551bb869153aa23e15387c22cd3b52b42892dbd6b9",
-    "proof_c": "a06dc9b2f64cda23cb7a8f210935bff809418245ca3f538c0380cf115bb8ec02",
-    "proof_s": "09a32f66c289180c3819c7b79d07e2e2bdf7da3f29ca2f6b612ffaf4a76ff305"
+    "proof_c": "dc08779b77b90655470a3e3ab8348053",
+    "proof_s": "5c85abf0acbdfe3f93dc988009c42ef306d020caeceb843c4b2a4d14efe57702"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_ietf - vector-4",
@@ -48,8 +48,8 @@
     "h": "271e2e54eecc269f5efdaabf7e85925defe8a47f4fad1fca840088dc20b5dd96",
     "gamma": "1cf923752ca1945378888fe158ae4e867a84fae7a40afb39792b77745e4b8203",
     "beta": "47afe056ab4a0847a279f8690ffb164ee40ff29ee3e8d011db241a39b7d2c2dff4a112765d82c479b65c7afc67c0b55417d0582e6122bc69692e1f7a2f4c2d5f",
-    "proof_c": "b976c5da83b95d742b5fa5b29d3746d5c24a23d48f221ad4f43afbac75156f05",
-    "proof_s": "d2b711e9e71c1ab8ee5483f9d2472c3a4104f9363501e291b4fa73be17d5ba00"
+    "proof_c": "5a1e9ebeb712133dd6a69c8f36c5a566",
+    "proof_s": "8abfd3ee25ead8897e30b6b41f5fd1fbe507756ffe408ea55075675e133fdd01"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_ietf - vector-5",
@@ -61,8 +61,8 @@
     "h": "6574f9a5ae548992b727b94b2c0d55065732333bdbb3cc4a1e832b0a14d554ab",
     "gamma": "a574e0585ee8bddf3af186a846954269ba3ab8bba10fda73b76e834340cfb11f",
     "beta": "29ef2add1558870a142c7af7fde01af8be1ba0add346cb1ac3b077871895f523966964a47e78c4d030928a66499f8a3170f5efd1597671eca528fd671e0148e8",
-    "proof_c": "a6514d50ee8665d8bc12b8312d3936a1ceded086a31a812d3b30ddf5990b5c04",
-    "proof_s": "d90c7645ad16c05e38b03123ec7aeb5df15bc3f959a611ba98ceb0a91eeb6c02"
+    "proof_c": "b3c7a7fa663114d269a417591c45bf21",
+    "proof_s": "c4c0e1a22dce5cbd8b76953d10264b9fd58405ab98a6db7a7beee078b6cf0405"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_ietf - vector-6",
@@ -74,8 +74,8 @@
     "h": "6574f9a5ae548992b727b94b2c0d55065732333bdbb3cc4a1e832b0a14d554ab",
     "gamma": "a574e0585ee8bddf3af186a846954269ba3ab8bba10fda73b76e834340cfb11f",
     "beta": "29ef2add1558870a142c7af7fde01af8be1ba0add346cb1ac3b077871895f523966964a47e78c4d030928a66499f8a3170f5efd1597671eca528fd671e0148e8",
-    "proof_c": "1819c2f6c4f95407a661da88643a78f8159a01d919af339d8a86019d447a4800",
-    "proof_s": "a4d0fb5e50563d4c0ea8e92725a4d8496b65aebd7ee94564e5ec5773adaad003"
+    "proof_c": "f85b73f49a339f509c9723630bf78003",
+    "proof_s": "50b7156f56793ca035ee783fa5363b735f12b947d5b627d8dd70ef05d65d6a03"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_ietf - vector-7",
@@ -87,7 +87,7 @@
     "h": "6574f9a5ae548992b727b94b2c0d55065732333bdbb3cc4a1e832b0a14d554ab",
     "gamma": "d0aa5ca83981f5065c9c3b9987b173f1c2744725967ebf98dafe2cd618a70d06",
     "beta": "2cbaf43571e24ba8644a0f973d3d48cde04464a69f840bc853e6b09d8a6bb9a396d79f163cc06e7b8caa02293fa6b2f2223a02a69fb8cbbdd0a5c0444ba1865f",
-    "proof_c": "1366f6b7dbbcc9b6ecf8f210b09ce9caa6bbf7241408652861809917b83b2c00",
-    "proof_s": "f0a2659cef1a400e215220c340ff65f2e3553a5d92baa124bf91c7b21b80e002"
+    "proof_c": "1c2fdff3c22507d20aafd3264a01f1f1",
+    "proof_s": "cec657630133aa07e323e9874c39d1f145d3a395485db5c2710138d73fd2c403"
   }
 ]

data/vectors/baby-jubjub_sha-512_tai_pedersen.json

@@ -9,12 +9,12 @@
     "h": "9934ed0d523de780958a399db20785f40b88bf02554d02d3f0cbf09d1229d8ae",
     "gamma": "6d6d84991e4270270bd3715bce82d16b4353cb4ef03399b03aec6aa35c51db95",
     "beta": "ca6f041756b6b06fe2219c3c2eee56b78518747195f220da55d1d4eb45705d36b0a46031303bb77c2592a548b228ad59a8ce935508272ad66f31ff7e3dcda63e",
-    "blinding": "75d486c29ce64486ff67d20d123d6af11c9ee548f54ed57dc6b5cb588458bf04",
-    "proof_pk_com": "5ebd05cab58921b689158c401e59d2ce8d4449d311662f962c0f673206663ea2",
-    "proof_r": "6e56ab4e041fc960bf029bdbf0f4471c9bca30b5a59c61a69acfb8ac31eaaba4",
-    "proof_ok": "607da64f244c46e95539ff9717c03511e92f8ebfae6364d9c034153098dc3a9e",
-    "proof_s": "cacf3eca4df0cb0fe3626ee733344749dabdd81bd5e196a47b593a91c5963600",
-    "proof_sb": "16e2ddc28e36651125b43ad3835d01ca78373f332fec8a7ab284c1e9d1843c03"
+    "blinding": "afdcb62781ab74b903207b5fd4f78e7e63c82a477b181caab41ac543bd696403",
+    "proof_pk_com": "de7b12c57316f297a411c6dd74fd953ef03ddf34867491b0337ce1338b3e2d22",
+    "proof_r": "73d956ff5e0df3ecc673afec3b231710c3e274161d45cdaae1eaa5797e46fc2f",
+    "proof_ok": "baa440e5f5de883c352faed0526ccd74971b13fb2e7a3375e63faa75fd00fe8a",
+    "proof_s": "0d9197254090b2b3797a4863d11af0e3458e0cdf49b27467ea0c73fd7bcc1a04",
+    "proof_sb": "a2936d094ffa7c97f92e5cb3fdb3487d74476b23442cc1b647a05a3bbfb0ec05"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_pedersen - vector-2",
@@ -26,12 +26,12 @@
     "h": "0f40dcaeeb10fd155b2f466c14834050693d57c57488f36ff62bc8f69392c706",
     "gamma": "5bd19036f58b16e0d9ff81e105ac8d4135a13ca6d5727b97361deb015ed5fca8",
     "beta": "7cfdcd003ad38820afc0b3aeb2c351204a9ffa57bb80010c38b16b20c474bc8257d769d2709909b056446873b1eb0a39535b0fbdf4197a53dce8f9befa692af1",
-    "blinding": "d3ec8950b4ff8326a32d7de0e4e79f4867f05b84ea8104a993c0cb5a913d9d02",
-    "proof_pk_com": "95be7ea0d859f8f81358afcad8dccdc1fae18a5c458be0cde5f99582f5a9b401",
-    "proof_r": "2986918df588d48c8e5f541d76fe1c4d9d34a0f27424c197f24116bd640a4b0f",
-    "proof_ok": "a25e0b618fe91fdfca9017aa562461d91459f9c9636e720fb7fa404e41bda19e",
-    "proof_s": "ffbfc71efe64ac4ea31a7f33e5077997aaeaf852a0790dbb2933fe96d5877d05",
-    "proof_sb": "633ed5f017bb4787b1406f3fb8d78e39333abab75889e2eae8b8f55003b15c00"
+    "blinding": "061c81d86d8cb2e5de6cc72ec13db164f2b1e0223dbe59e66a06d96613f45301",
+    "proof_pk_com": "b7ebbfce92807abee6940e9aaa67fe6ba95a0f06f1d3c05cbff24ebbb1e2c1a7",
+    "proof_r": "6b26786d73c214e471f3badb132f86b0db039bb00c0dff5777cd31b7dc61d4a6",
+    "proof_ok": "00749f004dc9c9d4178b6f6f9f347511d4cf646bdef5f2c0d6b86f176bf2fe09",
+    "proof_s": "6da81b1ee2513f28cd0fa61bb3ff2f201d0341350ac5eb2c71da752792fb5301",
+    "proof_sb": "24df064748f4f05f3d0be583554d88d978b1639b07a51335a8e9656c408d3300"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_pedersen - vector-3",
@@ -43,12 +43,12 @@
     "h": "9934ed0d523de780958a399db20785f40b88bf02554d02d3f0cbf09d1229d8ae",
     "gamma": "75ca617c6b6d0a29ad431da6e811f33ba5840b95418bfb4c980e97889fefd411",
     "beta": "215c240053c78553189bbb231635c5d4707168a0d13a828353bb44d67812f349a676cf0d1500e39e45a581551bb869153aa23e15387c22cd3b52b42892dbd6b9",
-    "blinding": "c6d49afd346e1c5a0a9c2e3f823b8aa5368d35bd541df59453de3a6732eb0d05",
-    "proof_pk_com": "8981402e3c28b9006d9cbe784167a2f6f6ec3b10a8d8e527fecc835de3ec8087",
-    "proof_r": "d692d5e572fb0f11097ec70bca7f4acc7426e1dd3c6c8e24f57be85b6ec97a8d",
-    "proof_ok": "95a34ea5d7e0baeb46e6924c62e84c4da3f567a7d1f92636b6149ad6d77c9da5",
-    "proof_s": "3a6aff911ddb3ed1c026f56f2e6b6abc11c27a8a2c17e07a66e0434f20f83701",
-    "proof_sb": "e84693d6dca056334fb2bda22f436eec54b758db9f60e23248d8a4002f3e6d05"
+    "blinding": "d1e9bf735029f4aca44b75852138c09a2687b89f555e1887c134b72e86aebe01",
+    "proof_pk_com": "fc4b07d576bd385d688e550a015321569d3215a5f1e91e7e18bdc392bdb6d217",
+    "proof_r": "20244731a9f5dfe1ebc8151d2fbb6e0a61bbaf592eb596f3525b481a704a0b2c",
+    "proof_ok": "5fa6d3fe3fe6f1038d775a3904fa8bb8cf8fd6cc9c80a5b9eb04cde0e8d40e08",
+    "proof_s": "aa2d45f5614c0b5be6b8fc4358d1c7f11511baa28a487148b2cdc8500a0c5702",
+    "proof_sb": "0b4b020bfdeff1a17be6fa4037d8f598dffe51b3c08ce99bfcfb8e455a6ea102"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_pedersen - vector-4",
@@ -60,12 +60,12 @@
     "h": "271e2e54eecc269f5efdaabf7e85925defe8a47f4fad1fca840088dc20b5dd96",
     "gamma": "1cf923752ca1945378888fe158ae4e867a84fae7a40afb39792b77745e4b8203",
     "beta": "47afe056ab4a0847a279f8690ffb164ee40ff29ee3e8d011db241a39b7d2c2dff4a112765d82c479b65c7afc67c0b55417d0582e6122bc69692e1f7a2f4c2d5f",
-    "blinding": "b2c2eca6744dade3da658d4ba81b369c16806793cf18a0d891a842bb3facb700",
-    "proof_pk_com": "9ac3de2981787be78be595c2b539099815d149e38e7229e576bd58d69120af17",
-    "proof_r": "c2d9258344dfa662b8bf23f86dc0d846b89636d65c5c66a425d5e382f9f9a982",
-    "proof_ok": "838498802ab15f143eec44de51a902162b89b1a723c4ca9b52884d88d17758a6",
-    "proof_s": "09ef339e49436e50c2693882ac05483ab3dcea33717ec8de9bd36fb64df52b05",
-    "proof_sb": "4be4e1432309c69ba85f0806a7c8e485c5e81dc912915a01b81d28a29db0b704"
+    "blinding": "f92876e3656d695eff77ae15126297842a8585e0be6b682b8b2e4672d2b07f05",
+    "proof_pk_com": "08464cb245255d06fd7fb898394f9ce7f5ea385f5766c87525e4eab5b3aa9d11",
+    "proof_r": "623a7f76f7a4c554bda34a8d17b3063d4c3324a6aa628722492d5b9c27799c91",
+    "proof_ok": "ebf0119b491d996aa6065fb7dec98b35500a9f41707c613b218fd85c8d359f2d",
+    "proof_s": "2d927b4bc1a87e1058a5cb2c61b5063ce2ed35e3ff8a870a2a7dab64c3a10502",
+    "proof_sb": "2f7ffba2a330bcca3a1cd7bd316f547953e55432ed606d4a1916df5c7a858801"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_pedersen - vector-5",
@@ -77,12 +77,12 @@
     "h": "6574f9a5ae548992b727b94b2c0d55065732333bdbb3cc4a1e832b0a14d554ab",
     "gamma": "a574e0585ee8bddf3af186a846954269ba3ab8bba10fda73b76e834340cfb11f",
     "beta": "29ef2add1558870a142c7af7fde01af8be1ba0add346cb1ac3b077871895f523966964a47e78c4d030928a66499f8a3170f5efd1597671eca528fd671e0148e8",
-    "blinding": "a9cf6a3c30367c6548440d095f62f6094a2a4ac0cd99ddaf321d9a1fb9c43505",
-    "proof_pk_com": "5ba0702f2754a02b79d5036d37ad8ed59d8202375cbf7a09b43a39ddc2108210",
-    "proof_r": "fcf39435b2f2139de277b2a2b96562e74cca099bc37c9ace9bcfd0f9ab535320",
-    "proof_ok": "46318428fca47f1f855e2a1d2866dda759f1bf7f07836ecd542794f0f6ac1582",
-    "proof_s": "bff012d68ddc0782fbea7b65174299691fd3de08d26f75d7e345c27a3d41cf01",
-    "proof_sb": "2486680e055d34b725c7c59ad91453eead9adedb7a8ce479a42002eb50d13b05"
+    "blinding": "6c33fc0eb95d1970c27af1daba9bd848d798899e7a350e861719d90bb9b16403",
+    "proof_pk_com": "6a43da2aa9d07aed0e4fedb0a354e0d1cb968a20d84a355bd9b9e9f45580c588",
+    "proof_r": "2e03b5d7492aa9cab0633aad992b031e0373c308f4528003313840657decd490",
+    "proof_ok": "e742c01e6ca9da1bbf69009e0a89f3a8fce8741c65a1a33c783a6a05427eb1a7",
+    "proof_s": "eb075a4920f11d78f9bf72a213fcf7906213b44ab8182b7c299b0dab1c6afa05",
+    "proof_sb": "75275210af78a9fcf086b87ba0ea55953c580f34ef90ce305667c6a357d46702"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_pedersen - vector-6",
@@ -94,12 +94,12 @@
     "h": "6574f9a5ae548992b727b94b2c0d55065732333bdbb3cc4a1e832b0a14d554ab",
     "gamma": "a574e0585ee8bddf3af186a846954269ba3ab8bba10fda73b76e834340cfb11f",
     "beta": "29ef2add1558870a142c7af7fde01af8be1ba0add346cb1ac3b077871895f523966964a47e78c4d030928a66499f8a3170f5efd1597671eca528fd671e0148e8",
-    "blinding": "19ff183955cd2eba5ea97b6d0f548a297fd92cb61f96d95d1103311b609aca02",
-    "proof_pk_com": "ffb25e7ceb49d58d95e809f144e20ba272f241b4ac932a7ab64e907e70d79715",
-    "proof_r": "d0bf52caa83f8b7f6258b9863c458f2548b6ee04aa2866c91ea2fe0ba938b2a8",
-    "proof_ok": "46318428fca47f1f855e2a1d2866dda759f1bf7f07836ecd542794f0f6ac1582",
-    "proof_s": "be4699c5e7e91d9ed6c03a8fed7a21b83321f435f46107272fa886e20fe7b202",
-    "proof_sb": "9c1bcede6668d65e5fcf9ddeb26ac06a3d5ff615bc2fa19003389803cba8d501"
+    "blinding": "592824789bb593f5781c82872e75553cf1df2b608ad0abbb77fd69ff1a921600",
+    "proof_pk_com": "f869ed9c602ca2691d0e80c91a8e905115a5560e33814260641a58b537b03625",
+    "proof_r": "ff16f7ff33e5e9a8d67b957876317bc78a46215eca9fb584112c485e3d103e07",
+    "proof_ok": "5429c23489916aa7555424c9e219cedfbcfe7c6912ac701142f4094407e0c29d",
+    "proof_s": "11ebda1217e920a1de9639d072520842df88e8de8799cd68f774aa35e82c3301",
+    "proof_sb": "6e79c21e562992475d5240beb700625b61f08ef532494f23141bb89ea285eb04"
   },
   {
     "comment": "baby-jubjub_sha-512_tai_pedersen - vector-7",
@@ -111,11 +111,11 @@
     "h": "6574f9a5ae548992b727b94b2c0d55065732333bdbb3cc4a1e832b0a14d554ab",
     "gamma": "d0aa5ca83981f5065c9c3b9987b173f1c2744725967ebf98dafe2cd618a70d06",
     "beta": "2cbaf43571e24ba8644a0f973d3d48cde04464a69f840bc853e6b09d8a6bb9a396d79f163cc06e7b8caa02293fa6b2f2223a02a69fb8cbbdd0a5c0444ba1865f",
-    "blinding": "f6233057bc6bf9ee04f62c1a0027841bd4fd4abf3c9770fe83b387aee068df03",
-    "proof_pk_com": "3a1522a20a87db09a205a00d8dbde870721b6497f5c2634c4006d528b80db422",
-    "proof_r": "353bbaa0a29cfc8bfac91128700665ce223fd7ad4f67deb8fcf344d6dad96211",
-    "proof_ok": "a58334c3dc323f52c06d1d0b10afea416ea89d97fc18397fbd5f1ba434e25896",
-    "proof_s": "bd9f2b093acdb6fdfcc42cce20193f9d761b4f6ea923384342ca9496b7616702",
-    "proof_sb": "30fdb3f7b9a34e411a4e36aa57ed2273f1669ce23c6b5e3b3956650c88b84300"
+    "blinding": "74744393506ac0de35141df1008847bc8099bcc49a9a44a48340f6fd5233fc03",
+    "proof_pk_com": "a998b19dfd1fd95563e3083dfbe5e11390627e87a620577e7c82dc7c6f3a6a81",
+    "proof_r": "5188bd0e1aa3f67ed6a1300be49c939a8ec0d8c04f62a83d4af6baeaa524e4ac",
+    "proof_ok": "0b7931c9526c609e1348a652632afe5a62dd9c2b5808685be74e245ca399808d",
+    "proof_s": "cf6c76788b4f53c8b5f9f42c80ac221d0385a9ac60e574e47f4c2f63b23c8001",
+    "proof_sb": "28a7ffb5878ebc2018434853d9e2ac788a39dd287e1d7db57ac026c6bee01c00"
   }
 ]