tss-lib icon indicating copy to clipboard operation
tss-lib copied to clipboard

(question) have you addressed the attack in TS21?

Open weijiguo opened this issue 2 years ago • 2 comments

Alpha-Rays: Key Extraction Attacks on Threshold ECDSA Implementations

IACR ePrint Archive 2021/1621

weijiguo avatar Sep 16 '22 12:09 weijiguo

It says:

The only requirement for mounting a successful attack is to use a small Paillier encryption key. 
The key size check was not specified in the protocol and therefore missing from 
most existing threshold ECDSA implementations, making them vulnerable.

Should be matter to good checks of Paillier encryption key size to close this attack vector?

yshurik avatar Sep 16 '22 14:09 yshurik

I don't get it. Are you leaving this to library users, or this check has been / will be implemented in the library?

weijiguo avatar Sep 30 '22 02:09 weijiguo