uc.surf Report a vulnerability

RustSeverity: LowStatus: Reported

XMSS^MT height-40 keys never report KeyExhausted after last signature

Public bug report: after signing at the last XMSS^MT height-40 index, KeyExhausted is not raised and further signing returns Ok with an invalid signature. Open issue, no maintainer reply yet.

Timeline

  1. Found
  2. Advisory published
  3. Reported via public issue
  4. Entry last updated

Machine-readable: JSON · Markdown