Skip to content

HI-01 Missing Deletions Exposing Signers Unnecessarily #68

@xoloki

Description

@xoloki

The FROST protocol mandates that certain values are deleted after use to prevent replay
attacks. This includes the proof of knowledge R_i and mu_i (included in the ID class in this
implementation), the secret shares f(j) for all j, and the private and public nonces e,d,
E, D. None of the values are deleted and therefore signers are unnecessarily exposed to
protocol attacks

Metadata

Metadata

Assignees

Type

Projects

Status

In Review

Relationships

None yet

Development

No branches or pull requests

Issue actions