Vulnerability HighRUSTSEC-2025-0127 · cggmp21
RUSTSEC-2025-0127: CGGMP21 presignatures can be used in the way that significantly reduces security
Short answerA security vulnerability in the cggmp21 crate: CGGMP21 presignatures can be used in the way that significantly reduces security. GitHub rates it High. No fixed version: replace the crate or remove the affected code path.
| Crate | cggmp21 |
|---|---|
| Type | Vulnerability (crypto-failure) |
| Affected versions | Every version. |
| Fixed in | none |
| Severity | High (GitHub rating) |
| Published | 2025-11-24 |
| Last changed | 2025-11-26 |
| Also known as | CVE-2025-66017, GHSA-8frv-q972-9rq5, RUSTSEC-2025-0128 |
What to do
- Find who pulls it in:
cargo tree -i cggmp21. - Avoid the affected API, or replace the crate.
Details from the advisory
This attack is against presignatures used in very specific context:
- Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously you could generate a presignature, and then choose a HD derivation path while issuing a partial signature via
Presignature::set_derivation_path, which is malleable to attack that reduces target security level. To mitigate, this method has been removed from API. - Presignatures + "raw signing" (when signer signs a hash without knowing an original message): results into signature forgery attack \ Previously, you could use
Presignature::issue_partial_signaturewith hashed message without ever providing original mesage. In new API, this method only accepts digests for which original message has been observed.
Patches
cggmp24 v0.7.0-alpha.2 release contains API changes that make it impossible to use presignatures in contexts in which it reduces security. Follow the migration guidelines to upgrade.
Workarounds
You can continue using un-patched versions of library as long as you don't use presignatures in said scenarios where it weakens system security. To be sure, migrate to patched version that excludes presignatures from being used in such scenarios.
References
Read our blog post to learn more.
References
- Package: crates.io/crates/cggmp21
- Advisory: rustsec.org/advisories/RUSTSEC-2025-0127.html
- Web: www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Other advisories for cggmp21
Up next
Same cratecggmp21: security historyEvery advisory for this crate, and whether it is safe to use today.Read it next →Did this answer your question?