
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
@paulmillr/trusted-setups
Advanced tools
Easily access KZG (EIP-4844) / PeerDAS (EIP-7594) ETH trusted setups in JS
Easily access KZG (EIP-4844) + PeerDAS (EIP-7594) / ETH trusted setups in JS.
Exports 5 files:
small-kzg.js - 400KB KZG setupsmall-peerdas.js - ~800KB KZG+PeerDAS setupfast-kzg.js - fast ~800KB KZG setup for eth-signerfast-peerdas.js - fast 3.1MB KZG+PeerDAS setup for eth-signertrusted_setup.json, for c-kzg and othersnpm install @paulmillr/trusted-setups
The package is located in namespace for security / anti-squatting reasons.
We test against eth-signer, kzg-wasm and c-kzg. Other libraries with similar API should also work.
import { trustedSetup } from '@paulmillr/trusted-setups/small-kzg.js';
// import { trustedSetup } from '@paulmillr/trusted-setups/small-peerdas.js';
// import { trustedSetup } from '@paulmillr/trusted-setups/fast-kzg.js';
// import { trustedSetup } from '@paulmillr/trusted-setups/fast-peerdas.js';
// Typed as:
type trustedSetup = {
g1_lagrange: string[];
g2_monomial: string[];
g1_monomial: string[];
}
// eth-signer
import { KZG } from 'micro-eth-signer/kzg';
const kzg = new KZG(trustedSetup);
// kzg-wasm
const strip0x = items => items.map((i) => i.substring(2)).join('');
const g1 = strip0x(trustedSetup.g1_lagrange);
const g2 = strip0x(trustedSetup.g2_monomial);
const opts = { n1: 4096, n2: 65, g1, g2 };
const kzg = await loadKZG(opts);
// c-kzg can't receive object, requires path
const __dirname = dirname(fileURLToPath(import.meta.url));
ckzg.loadTrustedSetup(1, __dirname + '/trusted_setup.json');
trustedSetup.g1_lagrange.slice(0, 2)
// [
// '0xa0413c0dcafec6dbc9f47d66785cf1e8c981044f7d13cfe3e4fcbb71b5408dfde6312493cb3c1d30516cb3ca88c03654',
// '0x8b997fb25730d661918371bb41f2a6e899cac23f04fc5365800b75433c0a953250e15e7a98fb5ca5cc56a8cd34c20c57'
// ]
trustedSetup.g2_monomial.slice(0, 2)
// [
// '0x93e02b6052719f607dacd3a088274f65596bd0d09920b61ab5da61bbdc7f5049334cf11213945d57e5ac7d055d042b7e024aa2b2f08f0a91260805272dc51051c6e47ad4fa403b02b4510b647ae3d1770bac0326a805bbefd48056c8c121bdb8',
// '0xb5bfd7dd8cdeb128843bc287230af38926187075cbfbefa81009a2ce615ac53d2914e5870cb452d2afaaab24f3499f72185cbfee53492714734429b7b38608e23926c911cceceac9a36851477ba4c60b087041de621000edc98edada20c1def2'
// ]
npm install && npm run build will build files from trusted_setup.txt, which was copied from
c-kzg-4844.
Its checksum is d39b9f2d047cc9dca2de58f264b6a09448ccd34db967881a6713eacacf0f26b7.
MIT License
Copyright (c) 2024 Paul Miller (https://paulmillr.com)
FAQs
Easily access KZG (EIP-4844) / PeerDAS (EIP-7594) ETH trusted setups in JS
We found that @paulmillr/trusted-setups demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.