Anza BLS Signatures

Findings · 6

1. 1 Mismatched and incorrect domain separation tags Informational
2. 2 Signature verification does not prevent rogue key attacks Undetermined
3. 3 Public key construction does not reject identity point Low
4. 4 Missing length checks on input key material Medium
5. 5 Parallel aggregation turns an empty iterator into the identity point Informational
6. 6 Writing a keypair to file does not set file permissions on Windows Informational

Findings extracted from the published report PDF. See the full report below for details and remediation.