Verify id checksum is correct

iden3 · Mar 11, 2024 · a5c5f47 · a5c5f47
1 parent 4264f58
commit a5c5f47
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 1 deletion.
diff --git a/circuits/auth/authV2.circom b/circuits/auth/authV2.circom
@@ -143,6 +143,15 @@ template checkAuthV2(IdOwnershipLevels, onChainLevels) {
 
     signal isStateGenesis <== IsEqual()([cutId, cutState]);
 
+    component genesisIdParts = SplitID();
+    genesisIdParts.id <== genesisID;
+
+    signal calculatedChecksum <== CalculateIdChecksum()(genesisIdParts.typ, genesisIdParts.genesis);
+    ForceEqualIfEnabled()(
+        enabled,
+        [genesisIdParts.checksum, calculatedChecksum]
+    );
+
     signal genesisIDHash <== Poseidon(1)([genesisID]);
 
     SMTVerifier(onChainLevels)(

diff --git a/circuits/lib/stateTransition.circom b/circuits/lib/stateTransition.circom
@@ -40,6 +40,15 @@ template StateTransition(IdOwnershipLevels) {
     // get safe one values to be used in ForceEqualIfEnabled
     signal {binary} one <== SafeOne()(userID);
 
+    component genesisIdParts = SplitID();
+    genesisIdParts.id <== userID;
+
+    signal calculatedChecksum <== CalculateIdChecksum()(genesisIdParts.typ, genesisIdParts.genesis);
+    ForceEqualIfEnabled()(
+        one,
+        [genesisIdParts.checksum, calculatedChecksum]
+    );
+
     signal cutId <== cutId()(userID);
 
     signal cutState <== cutState()(oldUserState);

diff --git a/circuits/lib/utils/idUtils.circom b/circuits/lib/utils/idUtils.circom
@@ -3,7 +3,6 @@ pragma circom 2.1.1;
 include "../../../node_modules/circomlib/circuits/bitify.circom";
 include "../../../node_modules/circomlib/circuits/poseidon.circom";
 include "../../../node_modules/circomlib/circuits/mux1.circom";
-include "./safeOne.circom";
 
 template ProfileID(){
     signal input in;