Approved changes feed: RSS · Atom
cpe:2.3:a:lfdt-lockness:cggmp21:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Lfdt Lockness (9d171846-696d-59bc-8f2c-1f0aa78f5f79) |
|---|---|
| Product | Cggmp21 (1768a88f-e2ef-5a1d-bb36-dafaa75d1d22) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66017 |
vulnerable | 2026-06-08 07:39:21.125005 |
CGGMP21 presignatures can be used in the way that significantly reduces security
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be used in the way that significantly reduces security. cggmp24 version 0.7.0-alpha.2 release contains API changes that make it impossible to use presignatures in contexts in which it reduces security.
Published: 2025-11-25T19:59:07.956Z
Updated: 2025-11-25T20:48:35.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66016 |
vulnerable | 2026-06-08 07:39:21.124566 |
CGGMP24 is missing a check in the ZK proof used in CGGMP21
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. This issue has been patched in version 0.6.3, for full mitigation it is recommended to upgrade to cggmp24 version 0.7.0-alpha.2 as it contains more security checks.
Published: 2025-11-25T19:48:16.483Z
Updated: 2025-11-25T20:57:34.072Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.