WS-2023-0314

tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli - The specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus N containing small...