Yue-Zhou1 vdf-auditor
Domain auditor for verifiable delay functions and sequential-proof verification.
When to Use
- Auditing VDF setup, proving, and verification code paths
- Reviewing Wesolowski or Pietrzak challenge and proof validation logic
- Checking delay-parameter and repeated-squaring assumptions
- Verifying modulus/group setup provenance and trusted assumptions
When NOT to Use
- Generic signature or encryption audits without VDF sequentiality properties
- Treating performance shortcuts as safe without verifier-soundness review
- Marking a suspected VDF issue as confirmed without verification gates
Core Review Areas
- Delay parameter selection and sequentiality assumptions
- Challenge prime derivation and transcript completeness
- Repeated-squaring and verifier exponent correctness
- Trusted-modulus/group setup integrity and trapdoor assumptions
- Proof batching rules and shortcut-path soundness
Workflow
Phase 1: Setup-to-verifier mapping
- Read
references/vdf-checklist.md - Execute
workflows/challenge-review.md - Map setup, proof generation, and verifier code boundaries
Phase 2: Challenge and proof verification
- Verify challenge derivation includes complete transcript context
- Confirm verifier exponent and relation checks match the target construction
- Validate delay-parameter handling cannot be bypassed by shortcut paths
Phase 3: Pattern hunt
- Read
references/finding-patterns.md - Prioritize malformed proof acceptance, transcript truncation, and modulus trust gaps
Phase 4: Handoff
- Send surviving findings to
crypto-fp-check - Use
zkbugs-indexonly after the finding survives verification
Output Contract
Produce a VDF-specific handoff that includes:
- The VDF construction and verifier routine involved
- The challenge derivation inputs and sequentiality invariant at risk
- Whether the issue is parameter, verifier, modulus/setup, or batching related
- The next verification or reporting route
Reference Index
- references/vdf-checklist.md
- references/finding-patterns.md
- workflows/challenge-review.md