cggmp21-keygen has ambiguous challenge derivation

published 2024-07-18 2y ago modified 2025-10-28 last yr. also RUSTSEC-2024-0392

cvss: —; not scored
cisa kev: Not listed; not in CISA's catalog
epss: —; no score, EPSS covers CVEs only
public exploits: 0; none known

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Patch / fix

fixed in 1 links 1

crates.io cggmp21-keygen 0.3.0

github.com/dfns/cggmp21#103 pull request

Is GHSA-7jjx-3qw9-j6h6 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Affected packages

ecosystem	package	affected	fixed in
crates.io	cggmp21-keygen	<0.3.0 >=0.0.0-0, <0.3.0	0.3.0

Classification

Weakness

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

References

github.com /dfns/cggmp21/pull/103
web
github.com /dfns/cggmp21
package
rustsec.org /advisories/RUSTSEC-2024-0392.html
web, advisory
crates.io /crates/cggmp21-keygen
package

Sources

GitHub Advisory GHSA-7jjx-3qw9-j6h6
OSV RUSTSEC-2024-0392

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.