30 matches found
quantum-zk-proof-poc
Googleの量子暗号解析のゼロ知識証明を破るPoC このリポジトリには、Trail of Bitsのブログ記事で詳述されている、Googleが楕円曲線暗号解析用の高効率量子回路を持つというゼロ知識証明を我々がどう破ったかに関するリソースが含まれています。偽造した証明、検証手順、および未パッチのzkVMシミュレータコードの脆弱性を悪用する量子回路を生成するコードが含まれています。 完全な証明バイナリはこちらにあり、Googleの証明と我々の証明を比較した結果は以下の通りです。 リソース種別| GoogleのLow-Gate| GoogleのLow-Qubit| 我々の証明...
legion
Legion ZK Auth 🛡️ 真正的零知识认证，带有硬件绑定的设备环签名 🎯 Legion 是什么？ Legion 是一个 免密码的零知识认证系统 ，可以在不暴露你是谁 的情况下证明你拥有授权。 只需使用你的 指纹 + 24 词恢复助记词 （类似 MetaMask）即可完成认证。无需用户名、无需密码、无需服务器端秘密。 主要特性 ✅ 免密码认证 ：BIP-39 恢复助记词 + 指纹（无用户名/密码） ✅ 真正的零知识 ：服务器永远不会知道你的身份（100 万用户中的 1 个） ✅ 设备匿名 ：通过环签名绑定硬件（1000 台设备中的 1 台） ✅ 无需可信设置 ：Halo2...
reverie
Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie は、Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures で概説された MPC-in-the-head NIZKPoK の 証明者と検証者の 実装です。 Reverie は、複雑な述語に対して具体的な証明者の効率性 小さな定数による線形証明時間 を提供することを目指しています。この実装は 128 ビットの 古典的な...
Toward Cryptographically Verifiable Authorization for Autonomous AI Agents: A Security Hypothesis, Preliminary Formal Model, and Proof-Of-Concept Implementation
Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight. Existing authentication and authorization mechanisms establish identity and delegate authority, but do not inherently provide cryptographic evidence that a concrete...
monerochan-stark (>=5.2.2, <=5.2.12), p3-circle (>=0.1.0, <=0.3.3-succinct) +20 more potentially affected by CVE-2026-46654 via p3-challenger (>=0.1.0, <=0.3.3-succinct)
p3-challenger CARGO version =0.1.0, =5.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.5-succinct, =0.1.0, =0.1.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.2.1 and more Source cves: CVE-2026-46654 Source advisory: OSV:GHSA-VJ64-RJF3-W3V7...
CVE-2025-14547
CVE-2025-14547 : An integer underflow in Silicon Labs’ PSA Crypto and SE Manager EC‑JPAKE APIs during ZKP parsing can trigger a hard fault, causing a temporary denial of service. Affected: Silicon Labs PSA Crypto and SE Manager EC‑JPAKE APIs. Root cause: integer underflow during ZKP parsing. Impa...
CVE-2025-14547 ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service...
PT-2026-21016
Name of the Vulnerable Software and Affected Versions Silicon Labs PSA Crypto and SE Manager versions affected versions not specified Description An integer underflow issue exists in the EC-JPAKE APIs during ZKP parsing within Silicon Labs’ PSA Crypto and SE Manager implementation. Exploitation o...
Silicon Labs Gecko SDK和Silicon Labs Simplicity SDK 安全漏洞
The Silicon Labs Gecko SDK GSDK and Silicon Labs Simplicity SDK are both open-source products from Silicon Labs. The Silicon Labs Gecko SDK is a library that combines the Silicon Labs wireless software development kit SDK with the Gecko platform into an integrated software package. The Silicon La...
LINEture: Novel Signature Cryptosystem
We propose a novel digital signature cryptosystem that exploits the concept of the brute-force problem. To ensure the security of the cryptosystem, we employed several mechanisms: sharing a common secret for factorable permutations, associating permutations with the message being signed, and...
CVE-2025-66016
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing requires 3 preprocessing rounds, identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full...
cggmp21 has a missing check in the ZK proof used in CGGMP21
Impact cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key. Patches cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check However, cggmp21 recommends upgrading to...
GHSA-M95P-425X-X889 cggmp21 has a missing check in the ZK proof used in CGGMP21
Impact cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key. Patches cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check However, cggmp21 recommends upgrading to...
CVE-2025-66016
CGGMP24 (ECDSA TSS) CVE-2025-66016 concerns a missing check in the ZK proof in CGGMP21 that could allow a single malicious signer to reconstruct the full private key. The issue is described across multiple sources: prior to version 0.6.3, the missing check enabled the attack; a patch exists in v0...
CVE-2025-66016 CGGMP24 is missing a check in the ZK proof used in CGGMP21
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing requires 3 preprocessing rounds, identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full...
cggmp21 数据伪造问题漏洞
cggmp21 is a Rust library open-sourced by Lockness. A data forgery issue vulnerability exists in versions prior to cggmp21 0.6.3, which stems from a missing check in the ZK proof that could lead to a malicious signer reconstructing the full private key...
Missing check in ZK proof in CGGMP21 Threshold Signing Protocol
Vulnerability concerns a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. Patches cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check. However, we recommend upgrading to cggmp24...
RUSTSEC-2025-0130 Missing check in ZK proof in CGGMP21 Threshold Signing Protocol
Vulnerability concerns a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. Patches cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check. However, we recommend upgrading to cggmp24...
