cggmp21

v0.6.3crates.io· Rust

TSS ECDSA implementation based on CGGMP21 paper

The verdict

Has 2 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the crates.io registry · derived rules, not AI

How it scores

MaintenanceAging

PopularityNiche

Security2 advisories

LicensePermissive

DepsZero deps

Maintenance

Last published 6 months ago — check before adopting.

Popularity

316 downloads / week

Security

2 known advisories (worst: high severity).

License

Apache-2.0 OR MIT

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures
GHSA-8frv-q972-9rq5 Published 2025-11-25
UNKNOWN
CGGMP21 presignatures can be used in the way that significantly reduces security
RUSTSEC-2025-0127 Published 2025-11-24

Recent releases