CVE-2023-33241

Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.6 CRITICAL
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
HalbornCNA
9.6 CRITICAL
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
gg18_projectgg18
-
gg20_projectgg20
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://eprint.iacr.org/2019/114.pdf
https://eprint.iacr.org/2020/540.pdf
https://github.com/fireblocks-labs/mpc-ecdsa-attacks-23
https://github.com/fireblocks-labs/safeheron-gg20-exploit-poc
https://www.fireblocks.com/blog/gg18-and-gg20-paillier-key-vulnerability-technical-report/
https://eprint.iacr.org/2019/114.pdf
https://eprint.iacr.org/2020/540.pdf
https://github.com/fireblocks-labs/mpc-ecdsa-attacks-23
https://github.com/fireblocks-labs/safeheron-gg20-exploit-poc
https://www.fireblocks.com/blog/gg18-and-gg20-paillier-key-vulnerability-technical-report/