MystenLabs/ed25519-unsafe-libs

MystenLabs/ed25519-unsafe-libs

GitHubGitHub
GitHubgithub.com
Releases0
Stars249
List of unsafe ed25519 signature libs
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-50237↗
5.9 MEDIUM—

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key.