Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HI-01 Missing Deletions Exposing Signers Unnecessarily #68

Open
xoloki opened this issue May 8, 2024 · 0 comments
Open

HI-01 Missing Deletions Exposing Signers Unnecessarily #68

xoloki opened this issue May 8, 2024 · 0 comments
Assignees
Labels

Comments

@xoloki
Copy link
Collaborator

xoloki commented May 8, 2024

The FROST protocol mandates that certain values are deleted after use to prevent replay
attacks. This includes the proof of knowledge R_i and mu_i (included in the ID class in this
implementation), the secret shares f(j) for all j, and the private and public nonces e,d,
E, D. None of the values are deleted and therefore signers are unnecessarily exposed to
protocol attacks

@xoloki xoloki added the audit label May 8, 2024
@xoloki xoloki self-assigned this May 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant