GitHub Advisoryadvisory · crates.io

GHSA-978j-88f3-p5j3 Threshold value is ignored (all shares are n=3)

LOW Published 2022-06-17 Modified 2022-06-17 Official page ↗
Ecosystem
crates.io
Packages
shamir
Severity
Low
Reviewed
2022-06-17

Affected packages

• crates.io shamir: < 2.0.0 → fixed in 2.0.0

Description

Affected versions of this crate did not properly calculate secret shares requirements. This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit. The flaw was corrected by correctly configuring the threshold.

References