Skip to content

Vulnerable key image #1

@kewde

Description

@kewde

https://github.com/estensen/lrs/blob/master/ring/ring.go#L174-L185

H_p(P) = x * blake2b(P) * G

becomes

H_p(P) = P * blake2b(P)

Which can be calculated by anyone and therefore the ring leaks who signed it.
https://kewde.github.io/urs

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions