mirror of
https://github.com/luxfi/threshold.git
synced 2026-10-30 15:15:53 +00:00
Same saferith.Nat.Cmp limb-storage mutation defect as paillier's EncWithNonce range check. ValidateParameters is invoked concurrently across parties — CMP keygen round3 verifies the peer's Pedersen aux, and pkg/zk/prm.NewProof verifies its own aux — both racing on the same shared *saferith.Nat for s and t. Clone into per-call scratch Nats before Cmp. Per CGGMP21 round-trip race-detector findings in the 2026-05-31 audit; closes the remaining surface after paillier's clone.