Files
zeekay 54ebb24ab7 pedersen: clone before saferith.Nat.Cmp in ValidateParameters
Same saferith.Nat.Cmp limb-storage mutation defect as paillier's
EncWithNonce range check. ValidateParameters is invoked concurrently
across parties — CMP keygen round3 verifies the peer's Pedersen
aux, and pkg/zk/prm.NewProof verifies its own aux — both racing on
the same shared *saferith.Nat for s and t. Clone into per-call
scratch Nats before Cmp.

Per CGGMP21 round-trip race-detector findings in the 2026-05-31
audit; closes the remaining surface after paillier's clone.
2026-06-01 00:09:31 -07:00
..