Curated security research, vulnerabilities, advisories and tools for practitioners.

Don’t overextend your Oblivious Transfer

Summary

Trail of Bits found that selective abort attacks in the OT extension subprotocol can let a malicious threshold ECDSA participant recover other parties' secrets and ultimately the signing key.
Published
Collected