Reported

July 18, 2024

Issued

November 10, 2024

Package

paillier-zk (crates.io)

Type

Vulnerability

Categories

• crypto-failure

Keywords

#mpc #tss #zkp

References

• https://github.com/dfns/paillier-zk/pull/49

Patched

• >=0.4.0

Description

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Advisory available under CC0-1.0 license.