advisory-db/crates/shamir/RUSTSEC-2020-0160.md

[advisory]
id = "RUSTSEC-2020-0160"
package = "shamir"
date = "2020-01-21"
url = "https://github.com/Nebulosus/shamir/issues/3"
categories = ["crypto-failure"]
aliases = ["GHSA-978j-88f3-p5j3"]

[versions]
patched = [">= 2.0.0"]

Threshold value is ignored (all shares are n=3)

Affected versions of this crate did not properly calculate secret shares requirements.

This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit.

The flaw was corrected by correctly configuring the threshold.