← Sunday, September 27, 2026SecurityDeep dive
TEE rollback can make MPC signers reuse nonce shares and leak keys
A malicious host can roll back a signer’s filesystem after a pre-signature is deleted, causing nonce-share reuse and exposing a private key share. The guidance treats TEEs as defense in depth and emphasizes attestation tied to participant identities.
- What
- Threshold signature schemes let multiple parties sign together without any one party holding the key, and are increasingly run inside TEEs.
- How
- A malicious host can roll back filesystem state after a signer deletes a used pre-signature, causing nonce-share reuse that can disclose a private key share.
- Why it matters
- TEEs should be defense in depth, not a substitute for sound MPC protocols; attestation should be bound to MPC party identities.
Read on blog.trailofbits.com →
Discussion
Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.
Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.
