CVE-2025-66016
CriticalSummary
In CGGMP24 before version 0.6.3, a missing check in the ZK proof allows a single malicious signer to reconstruct the full private key. This issue is patched in 0.6.3, but full mitigation requires upgrading to 0.7.0-alpha.2.
Risk Assessment
An attacker can compromise private keys, leading to complete loss of signature integrity and data confidentiality.
Recommendation
Upgrade immediately to version 0.7.0-alpha.2 or later, which includes additional security checks.
Original NVD description (English source)
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. This issue has been patched in version 0.6.3, for full mitigation it is recommended to upgrade to cggmp24 version 0.7.0-alpha.2 as it contains more security checks.