—

RUSTSEC-2024-0391

Ambiguous challenge derivation

Details

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/paillier-zk

Introduced in: 0.0.0-0Fixed in: 0.4.0

Upgrade paillier-zk to 0.4.0 or newer (ecosystem crates.io).

References

https://crates.io/crates/paillier-zk[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2024-0391.html[ADVISORY]
https://github.com/dfns/paillier-zk/pull/49[WEB]