newsLibTMCG - News: LibTMCG 1.3.17 released

 
 
Latest News
LibTMCG 1.3.18 released posted by stamer, Sat 01 Jun 2019 11:20:31 AM UTC
LibTMCG 1.3.17 released posted by stamer, Wed 23 Jan 2019 08:34:06 PM UTC
LibTMCG 1.3.16 released posted by stamer, Mon 03 Dec 2018 04:51:51 PM UTC
LibTMCG 1.3.15 released posted by stamer, Mon 12 Nov 2018 04:35:21 PM UTC
LibTMCG 1.3.14 released posted by stamer, Mon 10 Sep 2018 05:39:06 AM UTC

LibTMCG 1.3.17 released

Item posted by Heiko Stamer <stamer> on Wed 23 Jan 2019 08:34:06 PM UTC.

This is a maintenance release that fixes a major bug in the VSSHE module (Groth's shuffle protocol). The verification of the special component E_d with respect to membership in the underlying commitment group has been done wrongly by a fast exponentiation function with fixed bases. Hence the check of membership for this component is always bypassed and thus a malicious prover may disturb the shuffle process by supplying a bad value. However, it is extremely difficult to bypass the other checks, if E_d is tampered (e.g. set to zero). Please note that the vulnerability has only an impact on the optimized shuffle interfaces (e.g. TMCG_VerifyStackEquality_Groth) of LibTMCG. Moreover, some other minor improvements are included in this release.

 

Back to the top

Powered by Savane 3.13-4448.
Corresponding source code