Description (CNA)
The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dalek-cryptography / ed25519-dalek | affected 0 before 2 |
CWE
CWE-497
References
- https://rustsec.org/advisories/RUSTSEC-2022-0093.html
- https://github.com/MystenLabs/ed25519-unsafe-libs
- https://crates.io/crates/ed25519-dalek
ADP enrichment
No English description supplied.
No references supplied.