GuopengLin

Reporting Multiple Vulnerabilities in MP-SPDZ Detected via Active Adversary Simulation

5

Hello, Keller. During a security review conducted through the simulation of an active adversary, I identified seven critical vulnerabilities in spdz2k-party.x (commit version a4f08e6ca9d0cfd439fbb1bd366edf91a61e9196). Given MP-SPDZ's extensive use in both...

Hi Keller, Is there a way to generate preprocessing data on demand in MP-SPDZ? I notice that the virtual machine generates preprocessing data, such as daBits, in large batches. However,...

Report security issue in the truncpr protocols

1

Hello Keller, In the paper "Efficient 3PC for Binary Circuits with Application to Maliciously-Secure DNN Inference" (Usenix Security 2023), the authors point out that the truncpr protocol proposed in several...

How to count the communication size between the parties

1

I am looking for a way to count the communication size between parties. Specifically, I need to track the amount of data exchanged, but I have not been able to...

In this PR, I fix the stack-buffer-overflow in void FerretCOT::read_pre_data128_from. Besides, I fix a memory leakage in test/bench_lpn.cpp. Related Issue #89 .

overflow handling error in sfix multiplication

3

Hi, Keller, When performing sfix multiplication with large numbers, the overflow handling is inconsistent. For two very similar inputs that should both result in an overflow, one correctly produces NaN...

Wrong Local Truncation Implementation in SecretFlow SPU

2

### Issue Type Build/Installation ### Installation Source Binary ### Secretflow Version v1.14.0b0 ### Operating System and Distribution Ubuntu 20.04 ### Python Version Python 3.10.12 ### Bazel Version _No response_ ###...

**Description** I've encountered a bug where prot.less seems to return an incorrect result when comparing two values (0.0 and 1.0) that are derived from previous secure computations. **Steps to Reproduce**...