GHSA-h24c-6p6p-m3vx: Github.com/bnb chain/tss lib Tss-lib Leaks Secret Keys Vulnerability

CRITICAL
Share
CWE-200
Published
Advisory Summary

GHSA-h24c-6p6p-m3vx is a CRITICAL tss-lib leaks secret keys vulnerability (CWE-200: Exposure of Sensitive Information to an Unauthorized Actor) affecting Github.com/bnb chain/tss lib libraries in the Go ecosystem. The issue involves tss-lib leaks secret keys in response to incorrectly constructed paillier moduli. Remediation is available in the latest vendor maintenance releases.

GHSA-h24c-6p6p-m3vx at a Glance

CVE Identifier N/A
GHSA Identifier GHSA-h24c-6p6p-m3vx
Severity CRITICAL
CVSS v3.1 Base Score N/A
CWE Classification CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected Product Github.com/bnb chain/tss lib
Package Ecosystem Go
Published Date
Last Updated

How to Fix GHSA-h24c-6p6p-m3vx

To remediate this vulnerability, upgrade all affected Github.com/bnb chain/tss lib dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

github.com/bnb-chain/tss-lib fixed: Latest secure release 
Upgrade github.com/bnb-chain/tss-lib to Latest secure release
Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

inspect dependencies for github.com/bnb-chain/tss-lib

How to Check if You Are Affected

To determine whether your application is affected by GHSA-h24c-6p6p-m3vx, inspect your project dependencies for Github.com/bnb chain/tss lib:

inspect dependencies for github.com/bnb-chain/tss-lib

Analyze the terminal output to locate any version of Github.com/bnb chain/tss lib in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: Verify declared build manifests and deployed runtime container environments.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, where the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. In Github.com/bnb chain/tss lib, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

### Impact The specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus `N` containing small factors (less than `2^100`) they can interact with other participants in the signing protocol to steal their secret key shares in as little as sixteen signing attempts. The master key can then be reconstructed from these shares. ### Patches The implementation of GG18 in tss-lib did not prove that `N` is biprime or that it doesn't contain small factors. The fixed implementation adds the following proofs from the CGGMP21 threshold ECDSA protocol to the key generation: - Paillier-Blum Modulus (`N` is the product of two primes) - No Small Factor (both factors of `N` are greater than `2^256`) These proofs apply to both the Paillier encryption modulus `N`, and the modulus `NTilde` used in MTA proofs. To address the issue in the resharing protocol, an additional round has been added to the end so that participants can confirm that they received valid proofs. ### References - [GG18](https://eprint.iacr.org/2019/114) - [CGGMP21](https://eprint.iacr.org/2021/060)

GHSA-h24c-6p6p-m3vx Affected Github.com/bnb chain/tss lib Versions

1 component(s)
Product / Package Ecosystem Affected Versions Fixed Version
github.com/bnb-chain/tss-lib
golang/github.com/bnb-chain/tss-lib
Go
≤ 1.3.5

References

GitHub Advisory / Wiki ADVISORY
https://github.com/threshold-network/tss-lib/security/advisories/GHSA-h24c-6p6p-m3vx
Security Fix Commit FIX COMMIT
https://github.com/threshold-network/tss-lib/commit/2e712689cfbeefede15f95a0ec7112227d86f702
eprint.iacr.org/2019/114 WEB
https://eprint.iacr.org/2019/114
eprint.iacr.org/2021/060 WEB
https://eprint.iacr.org/2021/060
Github.com/bnb chain/tss lib Source Repository REPOSITORY
https://github.com/threshold-network/tss-lib

Frequently Asked Questions

What is GHSA-h24c-6p6p-m3vx?
GHSA-h24c-6p6p-m3vx is a security vulnerability in Github.com/bnb chain/tss lib involving tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli under CWE-200: Exposure of Sensitive Information to an Unauthorized Actor.
Which Github.com/bnb chain/tss lib versions are affected?
Affected versions include releases prior to current release patches across affected packages: github.com/bnb-chain/tss-lib.
What version fixes GHSA-h24c-6p6p-m3vx?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
Is github.com/bnb-chain/tss-lib affected?
Yes, github.com/bnb-chain/tss-lib is affected in releases prior to Latest secure release. Upgrade your dependency to Latest secure release or later.
What CWE is associated with GHSA-h24c-6p6p-m3vx?
GHSA-h24c-6p6p-m3vx is classified under CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.).
How can I check Go dependencies for GHSA-h24c-6p6p-m3vx?
Run the dependency tree command: 'inspect dependencies for github.com/bnb-chain/tss-lib'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-h24c-6p6p-m3vx",
  "modified" : "2023-09-01T20:51:05Z",
  "published" : "2023-09-01T20:51:05Z",
  "aliases" : [ ],
  "summary" : "tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli",
  "details" : "### Impact\n\nThe specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus `N` containing small factors (less than `2^100`) they can interact with other participants in the signing protocol to steal their secret key shares in as little as sixteen signing attempts. The master key can then be reconstructed from these shares.\n\n### Patches\n\nThe implementation of GG18 in tss-lib did not prove that `N` is biprime or that it doesn't contain small factors. The fixed implementation adds the following proofs from the CGGMP21 threshold ECDSA protocol to the key generation:\n\n- Paillier-Blum Modulus (`N` is the product of two primes)\n- No Small Factor (both factors of `N` are greater than `2^256`)\n\nThese proofs apply to both the Paillier encryption modulus `N`, and the modulus `NTilde` used in MTA proofs.\n\nTo address the issue in the resharing protocol, an additional round has been added to the end so that participants can confirm that they received valid proofs.\n\n### References\n\n- [GG18](https://eprint.iacr.org/2019/114)\n- [CGGMP21](https://eprint.iacr.org/2021/060)",
  "severity" : [ ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "Go",
      "name" : "github.com/bnb-chain/tss-lib"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "last_affected" : "1.3.5"
      } ]
    } ]
  } ],
  "references" : [ {
    "type" : "WEB",
    "url" : "https://github.com/threshold-network/tss-lib/security/advisories/GHSA-h24c-6p6p-m3vx"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/threshold-network/tss-lib/commit/2e712689cfbeefede15f95a0ec7112227d86f702"
  }, {
    "type" : "WEB",
    "url" : "https://eprint.iacr.org/2019/114"
  }, {
    "type" : "WEB",
    "url" : "https://eprint.iacr.org/2021/060"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/threshold-network/tss-lib"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-200" ],
    "severity" : "CRITICAL",
    "github_reviewed" : true,
    "github_reviewed_at" : "2023-09-01T20:51:05Z",
    "nvd_published_at" : null
  }
}