0
Cryptography and Security
2021-04-27 v1
Abstract
What is the funniest number in cryptography? 0. The reason is that for all x, x*0 = 0, i.e., the equation is always satisfied no matter what x is. This article discusses crypto bugs in four BLS signatures' libraries (ethereum/py ecc, supranational/blst, herumi/bls, sigp/milagro bls) that revolve around 0. Furthermore, we develop "splitting zero" attacks to show a weakness in the proof-of-possession aggregate signature scheme standardized in BLS RFC draft v4. Eth2 bug bounties program generously awarded $35,000 in total for the reported bugs.
Cite
@article{arxiv.2104.12255,
title = {0},
author = {Quan Thoi Minh Nguyen},
journal= {arXiv preprint arXiv:2104.12255},
year = {2021}
}