Kelvin Wong issues

Results 4 issues of


                                            Kelvin Wong

SecureNN Integration

## Overview SecureNN have integrated into Rosetta as one of secure multi-party computation protocols. We have fully implemented SecureNN (3PC mode) with all basic functionalities and other composite operations to...

Message security issue for demo

I found in the demo that messages are sent directly to the pool and then fetched. For the participating nodes in MPC protocol, their P2P messages or broadcast messages, if...

Using the structure defined by Protocol Buffers, input checking of string fields is required in the use of the algorithm

The algorithmic protocol data structure of the code repository uses Protocol Buffers definition, which requires input checking for malicious inputs, such as over-long input string, due to the extensive use...

`MpcContext` with local share public to protocol Rounds(eg. gg18 and gg20) cause security issue

We notice that gg18 and gg20 protocols, their sub-protocols refresh and sign are implemented by importing keys, then constructing `MpcContext` and providing it to multiple `Rounds` to perform cryptographic operations....