Skip to content
OpenAdvisories

Package · Go

github.com/keep-network/keep-ecdsa

1 known vulnerabilities.

1 result · Feed

  • Critical —

    Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme

    # Summary In the threshold signature scheme, participants start by dividing secrets into shares using a secret sharing scheme. The Verifiable Secret Sharing scheme generates shares from the user’s IDs but does not properly validate them. Using a malicious ID …