Bron CGGMP21

Findings · 9

1. 1 Deserialization of Paillier elements can panic due to nil dereference Low
2. 2 Round 1 DKG commitment message does not separate Pedersen values Informational
3. 3 Deserialization failure on message receive does not include participant ID in error Low
4. 4 Joye and Paillier safe prime generation reduces entropy of resulting safe primes Informational
5. 5 Modular integer element size reports bits instead of bytes Informational
6. 6 User is not sufficiently warned about thread-safe PRNG requirements for prime generation Undetermined
7. 7 CGGMP21 signing proofs are not bound to their proof slot Informational
8. 8 Discrete logarithm with ElGamal commitment proof verification does not bind witness to commitment Undetermined
9. 9 Red Alert rounds lack round-state checks Informational

Findings extracted from the published report PDF. See the full report below for details and remediation.