—

RUSTSEC-2024-0393

Ambiguous challenge derivation

Details

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/cggmp21

Introduced in: 0.0.0-0Fixed in: 0.4.0

Upgrade cggmp21 to 0.4.0 or newer (ecosystem crates.io).

References

https://crates.io/crates/cggmp21[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2024-0393.html[ADVISORY]
https://github.com/dfns/cggmp21/pull/103[WEB]