Conversation

We found critical flaws in common TSS libraries, a cryptographic protocol for distributed key generation and signing. We’ve released ZKDocs.com to help secure the rapidly advancing field of ZKPs, TSS, and similar schemes. blog.trailofbits.com/2021/12/21/dis

zkdocs.com

Introduction

1:57 PM · Dec 21, 2021

Replying to

Todays vulnerability release helps describe threshold signature schemes (TSS) and verifiable secret sharing (VSS) for new readers. Fun fact, aside from academic pubs about them, there is virtually no guidance for implementing them securely! (Until ZKDocs).

blog.trailofbits.com

Disclosing Shamir’s Secret Sharing vulnerabilities and announcing ZKDocs

By Filipe Casal and Jim Miller Trail of Bits is publicly disclosing two bugs that affect Shamir’s Secret Sharing implementation of Binance’s threshold signature scheme library (tss-lib) and most of…

Trail of Bits

@trailofbits

Dec 22, 2021

I think just systematic manual review, plus lots of knowledge about algebra.

Georgios Konstantopoulos

@gakonst

Dec 21, 2021

Replying to

@trailofbits

This is great! Other ideas of protocols (+ attacks) that could be documented: Joint Feltman DKG, MuSig, BLS (both aggregate + threshold versions), GG20 for t-ECDSA

Replying to

and

Working on it! This is the top focus of our team going into 2022. Putting a stake in the ground with this release. 7 cryptographers and counting! Feel free to file issues for what you want to see.