ssvlabs / ssv-dkg

GNU General Public License v3.0
13 stars 11 forks source link

Fix for 5.10 reshare denial of service via predicable instance ids #152

Closed pavelkrolevets closed 1 day ago

pavelkrolevets commented 6 days ago

Description:

A reshare message can initiate multiple DKG instances. The request IDs for those DKG instances are chosen deterministically by hashing the reshare message. Then, the DKG instances are performed by the initiator in sequence. Given that instances become stale after one minute, it is possible to evict later reshare instances from the buffer by reuse their instance ID or spamming the buffer. This will prevent the legitimate initiator from finishing.

Solution: