mirror/prysm-pulse
1
0
Fork 0
mirror of https://gitlab.com/pulsechaincom/prysm-pulse.git synced 2024-12-25 04:47:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Protect Against Unsafe Coefficients (#9109)

Browse Source
This commit is contained in:
Nishant Das 2021-06-28 17:53:03 +08:00 committed by GitHub
parent 442f8d1d3c
commit f75548ad1e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
shared/bls/blst/signature.go
View File

@ -204,6 +204,9 @@ func VerifyMultipleSignatures(sigs [][]byte, msgs [][32]byte, pubKeys []common.P
// Ignore error as the error will always be nil in `read` in math/rand.
randGen.Read(rbytes[:])
randLock.Unlock()
// Protect against the generator returning 0. Since the scalar value is
// derived from a big endian byte slice, we take the last byte.
rbytes[len(rbytes)-1] |= 0x01
scalar.FromBEndian(rbytes[:])
}
dummySig := new(blstSignature)