Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
keep-starknet-strange/alexandria
main @ 6d2cfcc
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 2 prior fixes. Scrutinize any change in this area.
packages/btc/src/types.cairo: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Incomplete reconstruction of compressed public keys (specifically assuming a zero value for the affine y-coordinate) allowed ECDSA signature verification to be bypassed. Developers must ensure that compressed keys are fully and correctly expanded to their affine coordinates prior to signature recovery checks.
Auth Bypass: Incorrect little-endian decoding and missing boundary checks within the Ed25519 signature verification routine allowed invalid signatures to bypass authentication. Cryptographic decoding routines must strictly enforce coordinate boundary checks.