Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
blockstreamresearch/secp256k1-zkp
master @ 95b9835
20
Fixes
0
CVEs
HIGH
Peak severity
29.4%
Coverage
Highlights
Information Disclosure: 10 prior fixes. Scrutinize any change in this area.
src/secp256k1.c: most-fixed (4 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Standard sanitization calls like memset are frequently optimized away by compilers, leaving private keys and nonces exposed in memory. Secure zeroization wrappers must be consistently utilized.
Auth Bypass: Lack of formal binding between the signer's public key and the secret nonce struct during partial signature generation allows cross-key signing attacks. Ensure state-binding checks are strictly verified during signing.
Cryptographic Issues: Accepting private keys larger than the elliptic curve order silently can lead to catastrophic cryptographic breakdown in XDH exchange protocols. Inputs must be rejected immediately on overflow.