Reported

July 18, 2024

Issued

November 10, 2024

Package

cggmp21-keygen (crates.io)

Type

Vulnerability

Categories

• crypto-failure

Keywords

#mpc #tss #zkp

References

• https://github.com/dfns/cggmp21/pull/103

Patched

• >=0.3.0

Description

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Advisory available under CC0-1.0 license.