GitHub Advisoryadvisory · crates.io

GHSA-7jjx-3qw9-j6h6 cggmp21-keygen has ambiguous challenge derivation

LOW Published 2024-11-12 Modified 2024-11-12 Official page ↗
Ecosystem
crates.io
Packages
cggmp21-keygen
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
Weaknesses
CWE-327
Reviewed
2024-11-12

Affected packages

• crates.io cggmp21-keygen: < 0.3.0 → fixed in 0.3.0

Description

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References