CVE-2022-29566

Published: Apr 21, 2022Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

The Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation fails to include all of the public values from the Zero Knowledge proof statement as well as all of the public values computed in the proof, aka the Frozen Heart issue.

Affected (1)

Products: Bulletproofs Project: Bulletproofs

Bulletproofs Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bulletproofs Project Bulletproofs	All versions

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

https://blog.trailofbits.com/2022/04/13/part-1-coordinated-disclosure-of-vulnerabilities-affecting-girault-bulletproofs-and-plonk/

Source: cve@mitre.org

ExploitThird Party Advisory

https://eprint.iacr.org/2017/1066

Source: cve@mitre.org

ProductTechnical DescriptionThird Party Advisory

https://blog.trailofbits.com/2022/04/13/part-1-coordinated-disclosure-of-vulnerabilities-affecting-girault-bulletproofs-and-plonk/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://eprint.iacr.org/2017/1066

Source: af854a3a-2127-422b-91ae-364da2661108

ProductTechnical DescriptionThird Party Advisory

Timeline

No history available yet.