Dread's onion private keys compromised through a vulnerability in Gobalance

🚨 Paris has posted a signed PGP message on Pitch.

Paris says Dread’s onion service was compromised through a flaw in Gobalance, the load-balancing software used by the service.

According to the post, Gobalance incorrectly handled Tor’s 64-byte Ed25519 private keys as standard 32-byte keys. This caused part of the secret key material to be dropped during descriptor signing, allegedly making it possible to recover the onion service’s master secret key from a published descriptor.

Paris says the vulnerability had existed unnoticed for nearly four years and believes this, rather than an operational mistake, is how Dread’s onion key was exposed.

Pitch https://pitchprash4aqilfr7sbmuwve3pnkpylqwxjbj2q5o4szcfeea6d27yd[.]onion/p/4eee3609

‼️ Dread's premium onion link has also been compromised and has been going back and forth with the following page in the screenshot and the Dread landing page. No updates from HugBunter or Paris as of this post. Not a good look. 😬