Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

zcashfoundation/ed25519-zebra

              main @ 3d5adb4
            

Fixes

CVEs

MEDIUM

Peak severity

33.3%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

src/signing_key.rs: most-fixed (2 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Malleability: Inconsistent verification logic between individual and batch signature processing can allow malleable signatures, potentially resulting in blockchain consensus splits. Strict validation rules (ZIP 215) must be enforced during decompression and verification.

Information Disclosure: Accidental exposure of the private key seed, prefix, or scalar 's' through automated debug logging or memory persistence after deallocation poses a significant key-compromise risk.