PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Friends don’t let friends reuse IVs

blog.trailofbits.com | blog | #cryptography | #iv | #trail-of-bits | #threshold-signatures | #nonce-reuse | #secure-communication
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits recounts a subtle crypto bug: parties in a threshold signature scheme never reused nonces, but identical nonce sequences across senders collided, enabling tampering and framing attacks.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Your AI agent fixed the bug, but what else did it change?
We’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents.
blog · blog.trailofbits.com
Don't let TEEs break your MPC
Combining threshold signatures with trusted execution environments (TEEs) can strengthen MPC deployments, if the TEE serves as a defense-in-depth layer rather than a substitute for a sound protocol.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · blog.trailofbits.com
1Password's AI patching benchmark is misleading
Trail of Bits says 1Password's FLAWED benchmark misstates AI patch quality, mixing wrong-fix prompts and no-test trials into a 26% clean-fix headline, and ships two agent skills for better fixes.
blog · blog.trailofbits.com
A “proof” of Fermat’s Last Theorem that fits the margin
Trail of Bits found a Lean ≤4.33.1 bug: String.Pos.Raw.extract returns a full string where its spec says empty — enough to 'prove' Fermat's Last Theorem. Not a soundness flaw; fixed in 4.34.0-rc1.
blog · blog.trailofbits.com
VMs won't contain cyber-capable agents
This technical commentary challenges prevailing assumptions about virtualization boundaries when hosting autonomous cyber AI models.
Back