Cyber Risks · Trail of Bits Blog

Fredrik Dahlgren

Summary: This is a Trail of Bits blog index page listing posts by Fredrik Dahlgren and other authors, covering topics such as the cryptography behind electronic voting, a denial-of-service vulnerability in the Pedersen distributed key generation phase of threshold signature schemes based on Frost, DMZ21, GG20, and GG18, and audits of Axiom's Halo2 circuits and Ockam's protocols. The page also lists the release of Circomspect 0.8.0, a CodeQL chapter for the Testing Handbook, and a 2019 Tornado.cash zero-knowledge proof vulnerability.

What's compelling: The threshold signature disclosure describes a single malicious participant who can surreptitiously raise the threshold required to reconstruct a shared key, a failure mode that matters to anyone relying on multi-party signing.

Read the original at Trail of Bits Blog ↗