Yue-Zhou1
- 84 skills
- 0 followers
- 6 hours ago last updated
- ▌ Signature Scheme Auditor 2 · yue-zhou1 bundleAudit classical signature schemes — generic ECDSA across curves, Schnorr/ BIP-340, EdDSA/Ed25519, RSA-PSS and PKCS#1 v1.5 — for verification-equation correctness, malleability, canonical encoding, public-key validation, and hash/prehash semantics. Use for standalone signature library review outside Ethereum application encoding, BLS, or threshold protocols.
- ▌ Differential Test Harness Gen 2 · yue-zhou1 bundleGenerate cross-implementation differential test harnesses for cryptographic code: official test-vector and Wycheproof replay, normalization of error/result semantics, deterministic corpus capture, and evidence handoff to crypto-fp-check. User-triggered only — never auto-invoked by the audit flow.
- ▌ Commitment Scheme Auditor 2 · yue-zhou1 bundleAudit polynomial commitment schemes (KZG, FRI, IPA, Pedersen) for degree bound enforcement, evaluation proof verification, trusted setup provenance, and batch opening soundness.
- ▌ Encryption Scheme Auditor 2 · yue-zhou1 bundleAudit encryption implementations for AEAD nonce handling, decrypt oracle behavior, associated-data binding, key-derivation misuse, and decrypt-error side effects.
- ▌ Audit Common 2 · yue-zhou1 bundleProvides shared severity, testing-evidence, and finding-contract references for ZK and cryptographic audit skills. Use when classifying findings, checking whether test evidence is sufficient, or writing findings in a consistent structure.
- ▌ Mpc Auditor 2 · yue-zhou1 bundleAudit MPC implementations for garbled-circuit integrity, oblivious transfer misuse, share validation, Beaver triple authenticity, and transcript/session binding issues.
- ▌ Vdf Auditor 2 · yue-zhou1 bundleAudit VDF implementations for sequentiality assumptions, Wesolowski/Pietrzak verifier soundness, challenge derivation integrity, and modulus/group setup risks.
- ▌ Vrf Auditor 2 · yue-zhou1 bundleAudit Verifiable Random Function implementations (RFC 9381 ECVRF and RSA-FDH-VRF) for key validation, ciphersuite/suite-string domain separation, encode-to-curve and cofactor handling, proof-to-hash ordering, and uniqueness/pseudorandomness assumptions, plus application-level output grinding. Use when reviewing VRF provers, verifiers, or consumers of VRF outputs (leader election, lotteries, randomness beacons).
- ▌ Crypto Fp Check 2 · yue-zhou1 bundleVerifies suspected ZK and cryptographic findings before reporting. Use when deciding whether a suspected vulnerability is a TRUE POSITIVE or FALSE POSITIVE, assigning severity, or enforcing the Critical/High PoC gate.
- ▌ Noir Auditor 2 · yue-zhou1 bundleAudit Noir circuits for unconstrained function boundary failures, oracle validation gaps, Brillig/ACIR consistency issues, and witness-generation soundness bugs.
- ▌ Zkvm Auditor 2 · yue-zhou1 bundleAudit zkVM guest programs and proof systems for memory consistency, continuation proof soundness, precompile safety, and guest-host boundary violations across SP1, RISC Zero, and Valida.
- ▌ Fix Verification 2 · yue-zhou1 bundleUse when a supplied patch claims to fix a previously verified ZK or cryptographic finding and the remediation needs independent verification.
- ▌ Cairo Auditor 2 · yue-zhou1 bundleAudit Cairo and Starknet code for hint validation failures, felt252 overflow, builtin misuse, and Sierra-to-CASM soundness gaps. Use when reviewing Cairo contracts, prover hints, or Starknet-specific proof construction.
- ▌ Gnark Auditor 2 · yue-zhou1 bundleAudit gnark circuits and Go witness pipelines for frontend/backend mismatch, public/private witness exposure, constraint API misuse, and serialization boundary errors.
- ▌ Zkbugs Index 2 · yue-zhou1 bundleQueryable index of real-world ZKP vulnerabilities. Use when a Phase 2 audit skill identifies a suspicious pattern and needs to check whether a similar bug has been documented before — or when a confirmed finding needs to be recorded. Covers circom, noir, halo2, cairo, zkVM, and custom DSLs. Backed by upstream community corpus (zksecurity/zkbugs) and configurable organization findings repo.
- ▌ Fhe Auditor 2 · yue-zhou1 bundleAudit FHE implementations for noise-budget accounting, bootstrapping correctness, modulus-switching safety, plaintext leakage, and key-switch parameter integrity.
- ▌ Spec Delta Checker 2 · yue-zhou1 bundleCompare cryptographic code against a reference specification or paper. Use when implementation details look close to a standard but may have drifted in validation, transcript binding, parameter negotiation, or caller obligations.
- ▌ Crypto Audit Router 2 · yue-zhou1 bundleRoute a full cryptographic or ZK audit across the framework. Use when you need to decide which skill should run next, which domain auditors apply, or how to move from initial context to verified finding, report, and index flow.
- ▌ Crypto Audit Context 2 · yue-zhou1 bundleBuilds initial audit context for ZK and cryptographic code before vulnerability hunting. Use when starting a crypto audit, mapping trust boundaries, prioritizing code paths, or applying dimensional analysis to protocol values.
- ▌ Crypto Report Writer 2 · yue-zhou1 bundleWrite final audit findings for ZK and cryptographic reviews. Use when a finding has survived verification and needs to be turned into clear report prose with severity, impact, root cause, and test evidence.
- ▌ Fuzz Harness Gen 2 · yue-zhou1 bundleGenerate cargo-fuzz targets for Rust cryptographic code. User-triggered only and never auto-invoked by the audit flow. Produces crash and edge-case evidence for crypto-fp-check.
- ▌ Kani Harness Gen 2 · yue-zhou1 bundleGenerate Kani proof harnesses for Rust crypto code. User-triggered only — never auto-invoked by the audit flow. Produces formal verification evidence for crypto-fp-check.
- ▌ Lattice Auditor 2 · yue-zhou1 bundleAudit lattice-based cryptography for LWE/RLWE parameter soundness, noise sampling correctness, rejection-sampling safety, and decryption-failure assumptions.
- ▌ Pqc Kem Auditor 2 · yue-zhou1 bundleAudit standardized post-quantum KEM implementations — currently ML-KEM / FIPS 203 — for encapsulation/decapsulation conformance, implicit-rejection correctness, ciphertext and key validation, compression/rounding, and decapsulation-failure oracle resistance. Use when reviewing ML-KEM/Kyber APIs, serialization, or decapsulation paths.
- ▌ Zk Circuit Auditor 2 · yue-zhou1 bundleAudit ZK circuits, proof systems, and verifier code for soundness and transcript failures. Use when reviewing witness constraints, Fiat-Shamir flows, KZG/PCS setup assumptions, public input encoding, or recursive proof threading.
- ▌ Dkg Threshold Auditor 2 · yue-zhou1 bundleAudit DKG, threshold-signature, and FROST/MuSig-style code for rogue-key, nonce-binding, share-verification, and session-isolation failures. Use when reviewing key aggregation, VSS share checks, threshold reconstruction, or concurrent signing state.
- ▌ Dependency Auditor 2 · yue-zhou1 bundleAudit cryptographic dependency sets for vulnerable versions, security-significant feature flags, advisory coverage, transitive risk, and stale fork provenance.
- ▌ Randomness Auditor 2 · yue-zhou1 bundleAudit randomness and nonce lifecycles: CSPRNG/DRBG initialization and reseeding, entropy availability, fork/clone/snapshot duplication, deterministic nonce derivation (RFC 6979, EdDSA), and reuse across retries, crashes, persistence, and concurrent state. Use when any secret-dependent random value's generation or lifetime is in question.
- ▌ Rust Crypto Safety 2 · yue-zhou1 bundleReview Rust cryptographic code for implementation-level security bugs. Use when auditing constant-time behavior, secret zeroization, panic and overflow hazards, unsafe blocks, unchecked constructors, feature flags, or dependency hygiene in crypto crates.
- ▌ Threshold Ecdsa Auditor 2 · yue-zhou1 bundleAudit threshold ECDSA implementations (GG18, GG20, CGGMP21, Lindell-style) for Paillier modulus validity, MtA/MtAwc range-proof gaps, share-conversion soundness, resharing and concurrent-session isolation, and identifiable-abort leakage. Use when reviewing multi-party ECDSA keygen, signing, or resharing.
- ▌ Folding Scheme Auditor 2 · yue-zhou1 bundleAudit folding scheme and IVC implementations for accumulator soundness, step circuit binding, cycle-of-curves correctness, and running instance completeness. Use when reviewing Nova, HyperNova, ProtoStar, or custom folding-based proof systems in Rust.
- ▌ Side Channel Auditor 2 · yue-zhou1 bundleAudit timing, cache, memory-access, and power-analysis leakage patterns, including compiler and feature-flag regressions that break constant-time assumptions.
- ▌ Privacy Protocol Auditor 2 · yue-zhou1 bundleAudit shielded-pool and mixer protocol logic: nullifier derivation, uniqueness, and spent-set semantics; note/value commitments and ownership binding; deposit/withdraw front-running; and state-transition replay domains. Use when reviewing privacy-protocol design above the circuit and Merkle layers.
- ▌ Pqc Signature Auditor 2 · yue-zhou1 bundleAudit post-quantum signature implementations — ML-DSA (FIPS 204), SLH-DSA (FIPS 205), FN-DSA/Falcon (pending standardization), and stateful hash signatures XMSS/LMS/HSS (NIST SP 800-208) — for rejection-sampling correctness, hedged/deterministic signing modes, verification bound enforcement, and one-time-signature state management. Use when reviewing PQ signing, verification, or OTS index/state persistence.
- ▌ Onchain Verifier Auditor 2 · yue-zhou1 bundleAudit Solidity, Vyper, or Huff proof-verifier contracts for pairing precompile misuse, missing scalar-field checks on public inputs, calldata decoding errors, and verification-key provenance or upgrade risks. Use when reviewing on-chain SNARK/STARK verifier contracts or EIP-196/197/2537 precompile call sites.
- ▌ Ecc Pairing Auditor 2 · yue-zhou1 bundleAudit elliptic-curve, pairing, and BLS signature code for point-validation, subgroup, serialization, DST, and pairing-equation failures. Use when reviewing deserialization, `hash_to_curve`, aggregate verification, or batch pairing logic.
- ▌ Fiat Shamir Auditor 2 · yue-zhou1 bundleAudit Fiat-Shamir transcript implementations for completeness, domain separation, challenge derivation order, and public input binding across interactive-to-non-interactive proof transforms.
- ▌ Merkle Tree Auditor 2 · yue-zhou1 bundleAudit Merkle tree implementations for second-preimage attacks, leaf-node domain separation, sparse tree edge cases, and proof verification soundness.
- ▌ Fault Injection Auditor 2 · yue-zhou1 bundleAudit cryptographic code for active fault-injection attacks: RSA-CRT Bellcore faults, ECDSA/EdDSA differential fault analysis, verification-skip glitches, redundant-computation bypass, and verify-after-sign gaps. Use when the threat model includes an attacker who can glitch computation, distinct from passive side-channel leakage.
- ▌ Hash Function Auditor 2 · yue-zhou1 bundleAudit ZK-friendly hash functions (Poseidon, Rescue, MiMC, Pedersen) for parameter selection, sponge construction, domain separation, and algebraic attack resistance.
- ▌ Formal Verification Bridge 2 · yue-zhou1 bundleBridge validated audit findings into optional external formal-verification tooling (Ecne, Picus, Circomspect) with explicit environment checks, reproducible exports, and tool-scoped caveat capture.
- ▌ Ethereum Crypto Auditor 2 · yue-zhou1 bundleAudit Rust application code that uses Ethereum cryptography. Use when reviewing secp256k1/ECDSA usage, keccak/EIP-712 hashing, BN254/BLS12-381 precompile interaction, KZG/EIP-4844 patterns, or alloy/ethers-rs API usage.
- ▌ Fhe Auditor · yue-zhou1Audit FHE implementations for noise-budget accounting, bootstrapping correctness, modulus-switching safety, plaintext leakage, and key-switch parameter integrity.
- ▌ Mpc Auditor · yue-zhou1Audit MPC implementations for garbled-circuit integrity, oblivious transfer misuse, share validation, Beaver triple authenticity, and transcript/session binding issues.
- ▌ Vdf Auditor · yue-zhou1Audit VDF implementations for sequentiality assumptions, Wesolowski/Pietrzak verifier soundness, challenge derivation integrity, and modulus/group setup risks.
- ▌ Vrf Auditor · yue-zhou1Audit Verifiable Random Function implementations (RFC 9381 ECVRF and RSA-FDH-VRF) for key validation, ciphersuite/suite-string domain separation, encode-to-curve and cofactor handling, proof-to-hash ordering, and uniqueness/pseudorandomness assumptions, plus application-level output grinding. Use when reviewing VRF provers, verifiers, or consumers of VRF outputs (leader election, lotteries, randomness beacons).
- ▌ Audit Common · yue-zhou1Provides shared severity, testing-evidence, and finding-contract references for ZK and cryptographic audit skills. Use when classifying findings, checking whether test evidence is sufficient, or writing findings in a consistent structure.
- ▌ Noir Auditor · yue-zhou1Audit Noir circuits for unconstrained function boundary failures, oracle validation gaps, Brillig/ACIR consistency issues, and witness-generation soundness bugs.
- ▌ Zkbugs Index · yue-zhou1Queryable index of real-world ZKP vulnerabilities. Use when a Phase 2 audit skill identifies a suspicious pattern and needs to check whether a similar bug has been documented before — or when a confirmed finding needs to be recorded. Covers circom, noir, halo2, cairo, zkVM, and custom DSLs. Backed by upstream community corpus (zksecurity/zkbugs) and configurable organization findings repo.
- ▌ Zkvm Auditor · yue-zhou1Audit zkVM guest programs and proof systems for memory consistency, continuation proof soundness, precompile safety, and guest-host boundary violations across SP1, RISC Zero, and Valida.
- ▌ Cairo Auditor · yue-zhou1Audit Cairo and Starknet code for hint validation failures, felt252 overflow, builtin misuse, and Sierra-to-CASM soundness gaps. Use when reviewing Cairo contracts, prover hints, or Starknet-specific proof construction.
- ▌ Gnark Auditor · yue-zhou1Audit gnark circuits and Go witness pipelines for frontend/backend mismatch, public/private witness exposure, constraint API misuse, and serialization boundary errors.
- ▌ Crypto Fp Check · yue-zhou1Verifies suspected ZK and cryptographic findings before reporting. Use when deciding whether a suspected vulnerability is a TRUE POSITIVE or FALSE POSITIVE, assigning severity, or enforcing the Critical/High PoC gate.
- ▌ Lattice Auditor · yue-zhou1Audit lattice-based cryptography for LWE/RLWE parameter soundness, noise sampling correctness, rejection-sampling safety, and decryption-failure assumptions.
- ▌ Pqc Kem Auditor · yue-zhou1Audit standardized post-quantum KEM implementations — currently ML-KEM / FIPS 203 — for encapsulation/decapsulation conformance, implicit-rejection correctness, ciphertext and key validation, compression/rounding, and decapsulation-failure oracle resistance. Use when reviewing ML-KEM/Kyber APIs, serialization, or decapsulation paths.
- ▌ Fix Verification · yue-zhou1Use when a supplied patch claims to fix a previously verified ZK or cryptographic finding and the remediation needs independent verification.
- ▌ Fuzz Harness Gen · yue-zhou1Generate cargo-fuzz targets for Rust cryptographic code. User-triggered only and never auto-invoked by the audit flow. Produces crash and edge-case evidence for crypto-fp-check.
- ▌ Kani Harness Gen · yue-zhou1Generate Kani proof harnesses for Rust crypto code. User-triggered only — never auto-invoked by the audit flow. Produces formal verification evidence for crypto-fp-check.
- ▌ Dependency Auditor · yue-zhou1Audit cryptographic dependency sets for vulnerable versions, security-significant feature flags, advisory coverage, transitive risk, and stale fork provenance.
- ▌ Randomness Auditor · yue-zhou1Audit randomness and nonce lifecycles: CSPRNG/DRBG initialization and reseeding, entropy availability, fork/clone/snapshot duplication, deterministic nonce derivation (RFC 6979, EdDSA), and reuse across retries, crashes, persistence, and concurrent state. Use when any secret-dependent random value's generation or lifetime is in question.
- ▌ Rust Crypto Safety · yue-zhou1Review Rust cryptographic code for implementation-level security bugs. Use when auditing constant-time behavior, secret zeroization, panic and overflow hazards, unsafe blocks, unchecked constructors, feature flags, or dependency hygiene in crypto crates.
- ▌ Spec Delta Checker · yue-zhou1Compare cryptographic code against a reference specification or paper. Use when implementation details look close to a standard but may have drifted in validation, transcript binding, parameter negotiation, or caller obligations.
- ▌ Zk Circuit Auditor · yue-zhou1Audit ZK circuits, proof systems, and verifier code for soundness and transcript failures. Use when reviewing witness constraints, Fiat-Shamir flows, KZG/PCS setup assumptions, public input encoding, or recursive proof threading.
- ▌ Crypto Audit Router · yue-zhou1Route a full cryptographic or ZK audit across the framework. Use when you need to decide which skill should run next, which domain auditors apply, or how to move from initial context to verified finding, report, and index flow.
- ▌ Ecc Pairing Auditor · yue-zhou1Audit elliptic-curve, pairing, and BLS signature code for point-validation, subgroup, serialization, DST, and pairing-equation failures. Use when reviewing deserialization, `hash_to_curve`, aggregate verification, or batch pairing logic.
- ▌ Fiat Shamir Auditor · yue-zhou1Audit Fiat-Shamir transcript implementations for completeness, domain separation, challenge derivation order, and public input binding across interactive-to-non-interactive proof transforms.
- ▌ Merkle Tree Auditor · yue-zhou1Audit Merkle tree implementations for second-preimage attacks, leaf-node domain separation, sparse tree edge cases, and proof verification soundness.
- ▌ Crypto Audit Context · yue-zhou1Builds initial audit context for ZK and cryptographic code before vulnerability hunting. Use when starting a crypto audit, mapping trust boundaries, prioritizing code paths, or applying dimensional analysis to protocol values.
- ▌ Crypto Report Writer · yue-zhou1Write final audit findings for ZK and cryptographic reviews. Use when a finding has survived verification and needs to be turned into clear report prose with severity, impact, root cause, and test evidence.
- ▌ Side Channel Auditor · yue-zhou1Audit timing, cache, memory-access, and power-analysis leakage patterns, including compiler and feature-flag regressions that break constant-time assumptions.
- ▌ Dkg Threshold Auditor · yue-zhou1Audit DKG, threshold-signature, and FROST/MuSig-style code for rogue-key, nonce-binding, share-verification, and session-isolation failures. Use when reviewing key aggregation, VSS share checks, threshold reconstruction, or concurrent signing state.
- ▌ Hash Function Auditor · yue-zhou1Audit ZK-friendly hash functions (Poseidon, Rescue, MiMC, Pedersen) for parameter selection, sponge construction, domain separation, and algebraic attack resistance.
- ▌ Pqc Signature Auditor · yue-zhou1Audit post-quantum signature implementations — ML-DSA (FIPS 204), SLH-DSA (FIPS 205), FN-DSA/Falcon (pending standardization), and stateful hash signatures XMSS/LMS/HSS (NIST SP 800-208) — for rejection-sampling correctness, hedged/deterministic signing modes, verification bound enforcement, and one-time-signature state management. Use when reviewing PQ signing, verification, or OTS index/state persistence.
- ▌ Folding Scheme Auditor · yue-zhou1Audit folding scheme and IVC implementations for accumulator soundness, step circuit binding, cycle-of-curves correctness, and running instance completeness. Use when reviewing Nova, HyperNova, ProtoStar, or custom folding-based proof systems in Rust.
- ▌ Ethereum Crypto Auditor · yue-zhou1Audit Rust application code that uses Ethereum cryptography. Use when reviewing secp256k1/ECDSA usage, keccak/EIP-712 hashing, BN254/BLS12-381 precompile interaction, KZG/EIP-4844 patterns, or alloy/ethers-rs API usage.
- ▌ Fault Injection Auditor · yue-zhou1Audit cryptographic code for active fault-injection attacks: RSA-CRT Bellcore faults, ECDSA/EdDSA differential fault analysis, verification-skip glitches, redundant-computation bypass, and verify-after-sign gaps. Use when the threat model includes an attacker who can glitch computation, distinct from passive side-channel leakage.
- ▌ Threshold Ecdsa Auditor · yue-zhou1Audit threshold ECDSA implementations (GG18, GG20, CGGMP21, Lindell-style) for Paillier modulus validity, MtA/MtAwc range-proof gaps, share-conversion soundness, resharing and concurrent-session isolation, and identifiable-abort leakage. Use when reviewing multi-party ECDSA keygen, signing, or resharing.
- ▌ Onchain Verifier Auditor · yue-zhou1Audit Solidity, Vyper, or Huff proof-verifier contracts for pairing precompile misuse, missing scalar-field checks on public inputs, calldata decoding errors, and verification-key provenance or upgrade risks. Use when reviewing on-chain SNARK/STARK verifier contracts or EIP-196/197/2537 precompile call sites.
- ▌ Privacy Protocol Auditor · yue-zhou1Audit shielded-pool and mixer protocol logic: nullifier derivation, uniqueness, and spent-set semantics; note/value commitments and ownership binding; deposit/withdraw front-running; and state-transition replay domains. Use when reviewing privacy-protocol design above the circuit and Merkle layers.
- ▌ Signature Scheme Auditor · yue-zhou1Audit classical signature schemes — generic ECDSA across curves, Schnorr/ BIP-340, EdDSA/Ed25519, RSA-PSS and PKCS#1 v1.5 — for verification-equation correctness, malleability, canonical encoding, public-key validation, and hash/prehash semantics. Use for standalone signature library review outside Ethereum application encoding, BLS, or threshold protocols.
- ▌ Commitment Scheme Auditor · yue-zhou1Audit polynomial commitment schemes (KZG, FRI, IPA, Pedersen) for degree bound enforcement, evaluation proof verification, trusted setup provenance, and batch opening soundness.
- ▌ Encryption Scheme Auditor · yue-zhou1Audit encryption implementations for AEAD nonce handling, decrypt oracle behavior, associated-data binding, key-derivation misuse, and decrypt-error side effects.
- ▌ Formal Verification Bridge · yue-zhou1Bridge validated audit findings into optional external formal-verification tooling (Ecne, Picus, Circomspect) with explicit environment checks, reproducible exports, and tool-scoped caveat capture.
- ▌ Differential Test Harness Gen · yue-zhou1Generate cross-implementation differential test harnesses for cryptographic code: official test-vector and Wycheproof replay, normalization of error/result semantics, deterministic corpus capture, and evidence handoff to crypto-fp-check. User-triggered only — never auto-invoked by the audit flow.