Closed naure closed 3 months ago
This PR fixes the following issues in KeyGen:
MAJOR - Messages for past rounds overwrite the state.
MAJOR - Schnorr proofs are not verified against the commitment.
MEDIUM - Proofs can be replayed without knowledge of exponent.
UNKNOWN - Function KeygenDecommit::verify sets the fields in a copy so it does not actually verify these fields.
KeygenDecommit::verify
INFO - Inconsistent handling of edge cases of key shares (0 vs q).
This PR fixes the following issues in KeyGen:
MAJOR - Messages for past rounds overwrite the state.
MAJOR - Schnorr proofs are not verified against the commitment.
MEDIUM - Proofs can be replayed without knowledge of exponent.
UNKNOWN - Function
KeygenDecommit::verifysets the fields in a copy so it does not actually verify these fields.INFO - Inconsistent handling of edge cases of key shares (0 vs q).