Skip to content
OpenAdvisories

Package · crates.io

dcrypt-sign

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GHSA-7j32-2mpw-c784

    Ed25519 identity public keys permit universal signature forgery

    All published versions of `dcrypt-sign` before 2.0.0 accepted the Edwards identity as an Ed25519 public key. A signature with `R = B` and `S = 1` then verified for every message because the challenge term multiplied the identity. The implementation also admit…

    dcrypt-sign crates.io