Skip to content
OpenAdvisories

Package · crates.io

cggmp24

2 known vulnerabilities.

2 results · Feed

  • High 8.2

    CGGMP21 presignatures can be used in the way that significantly reduces security

    CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be use…

  • Critical 9.3

    CGGMP24 is missing a check in the ZK proof used in CGGMP21

    CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which sing…