GitHub Advisoryadvisory · crates.io

GHSA-m95p-425x-x889 cggmp21 has a missing check in the ZK proof used in CGGMP21

CRITICAL Published 2025-11-25 Modified 2025-11-27 Official page ↗
Aliases
CVE-2025-66016
Ecosystem
crates.io
Packages
cggmp21, cggmp24
Severity
Critical
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-345, CWE-347
Reviewed
2025-11-25

Affected packages

• crates.io cggmp21: < 0.6.3 → fixed in 0.6.3 • crates.io cggmp24: < 0.7.0-alpha.2 → fixed in 0.7.0-alpha.2

Description

Impact cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key. Patches • `cggmp21 v0.6.3` is a patch release that contains a fix that introduces this specific missing check • However, cggmp21 recommends upgrading to `cggmp24 v0.7.0-alpha.2` which contains many other security checks as a precaution. Follow migration guideline to upgrade. Workarounds Update to `cggmp21 v0.6.3`, a minor release that contains a minimal security patch. However, for full mitigation, users will need to upgrade to `cggmp24 v0.7.0-alpha.2` as it contains many more security check implementations. Resources Read this blog post to learn more.

Related

Alias · CVE (1)

  • CVE-2025-66016 CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key… vulnerability

Weakness · CWE (2)

  • CWE-345 Insufficient Verification of Data Authenticity weakness
  • CWE-347 Improper Verification of Cryptographic Signature weakness

References