search

status-im / nim-blscurve

Nim implementation of BLS signature scheme (Boneh-Lynn-Shacham) over Barreto-Lynn-Scott (BLS) curve BLS12-381
Apache License 2.0
26 stars 11 forks source link

Close remaining sec issues #130

Closed mratsim closed 2 years ago

mratsim commented 2 years ago
  1. Harden against seemingly valid BLS signature. https://github.com/status-im/nimbus-eth2/issues/555 For a while the Milagro/Miracl backend accepted an infinity point as long as it has the infinity bit flag set, it didn't require the rest of the bits to be all zeros. The BLST backend wasn't affected. This was fixed in #121 (along with #64 and #74). The corresponding EF test is deserialization_fails_infinity_with_true_b_flag.json This PR merely adds https://github.com/status-im/nimbus-eth2/issues/555 as a dedicated test case