multi-party-sig-cpp icon indicating copy to clipboard operation
multi-party-sig-cpp copied to clipboard

Using the structure defined by Protocol Buffers, input checking of string fields is required in the use of the algorithm

Open joyoFeng opened this issue 1 year ago • 0 comments

The algorithmic protocol data structure of the code repository uses Protocol Buffers definition, which requires input checking for malicious inputs, such as over-long input string, due to the extensive use of string-defined fields, which may lead to risky problems such as resource overload, buffer overflow, and even system crash of the counterpart parties.

In fact, the message length can be calculated during MPC calculation (most of them are determined in advance), and different protocol implementations can be customized with corresponding input limits (From PlatON Cryptography Team).

joyoFeng avatar Apr 28 '23 09:04 joyoFeng