Design/Logic Flaw

2023-08-0922:15:00

PRIOn knowledge base

www.prio-n.com

crypto

wallet

vulnerability

lindell17

tss

protocol

ecdsa

private key

attack

exfiltration

signature

security

proof

assumption

handling

aborts

nvd

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt (256 in total) because of not adhering to the paper’s security proof’s assumption regarding handling aborts after a failed signature.