bnb-chain/tss-lib

(question) have you addressed the attack in TS21?

weijiguo opened this issue · 2 comments

Alpha-Rays: Key Extraction Attacks on Threshold ECDSA Implementations

IACR ePrint Archive 2021/1621

It says:

The only requirement for mounting a successful attack is to use a small Paillier encryption key. 
The key size check was not specified in the protocol and therefore missing from 
most existing threshold ECDSA implementations, making them vulnerable.

Should be matter to good checks of Paillier encryption key size to close this attack vector?

I don't get it. Are you leaving this to library users, or this check has been / will be implemented in the library?