Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1ybTY2LTlnaDQtNGdwOM4ABBP7

cggmp21 vulnerable to ambiguous challenge derivation

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Permalink: https://github.com/advisories/GHSA-rm66-9gh4-4gp8
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybTY2LTlnaDQtNGdwOM4ABBP7
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: 8 days ago
Updated: 8 days ago

Identifiers: GHSA-rm66-9gh4-4gp8
References:

• https://github.com/dfns/cggmp21/pull/103
• https://rustsec.org/advisories/RUSTSEC-2024-0393.html
• https://github.com/advisories/GHSA-rm66-9gh4-4gp8

Repository: https://github.com/dfns/cggmp21
Blast Radius: 1.0

Affected Packages