search

LFDT-Lockness / paillier-zk

Zero-knoledge proofs of some paillier cryptosystem properties for use in CGGMP21
Apache License 2.0
0 stars 1 forks source link

Security fix #49

Closed survived closed 2 months ago

survived commented 2 months ago

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited). This PR makes challenge derivation unambiguous.

The fix was developed and reviewed privately. Fixed library version has been already released on crates.io.

survived commented 2 months ago

Github deploy workflow was canceled, as I released the new library version to crates.io manually