cggmp21 vulnerable to ambiguous challenge derivation

published 2024-07-18 2y ago modified 2025-10-28 last yr. also RUSTSEC-2024-0393

cvss: —; not scored
cisa kev: Not listed; not in CISA's catalog
epss: —; no score, EPSS covers CVEs only
public exploits: 0; none known

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Patch / fix

fixed in 1 links 1

crates.io cggmp21 0.4.0

github.com/dfns/cggmp21#103 pull request

Is GHSA-rm66-9gh4-4gp8 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Affected packages

ecosystem	package	affected	fixed in
crates.io	cggmp21	<0.4.0 >=0.0.0-0, <0.4.0	0.4.0

Classification

Weakness

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

References

github.com /dfns/cggmp21/pull/103
web
github.com /LFDT-Lockness/cggmp21
package
rustsec.org /advisories/RUSTSEC-2024-0393.html
web, advisory
crates.io /crates/cggmp21
package

Sources

GitHub Advisory GHSA-rm66-9gh4-4gp8
OSV RUSTSEC-2024-0393

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.