6.5.6

indutny · Jul 17, 2024 · 03e06e1 · 03e06e1
1 parent 7ac5360
commit 03e06e1
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 5 deletions.
diff --git a/dist/elliptic.js b/dist/elliptic.js
@@ -2762,6 +2762,9 @@ EDDSA.prototype.sign = function sign(message, secret) {
 EDDSA.prototype.verify = function verify(message, sig, pub) {
   message = parseBytes(message);
   sig = this.makeSignature(sig);
+  if (sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()) {
+    return false;
+  }
   var key = this.keyFromPublic(pub);
   var h = this.hashInt(sig.Rencoded(), key.pubBytes(), message);
   var SG = this.g.mul(sig.S());
@@ -8853,7 +8856,7 @@ utils.encode = function encode(arr, enc) {
 },{}],35:[function(require,module,exports){
 module.exports={
   "name": "elliptic",
-  "version": "6.5.5",
+  "version": "6.5.6",
   "description": "EC cryptography",
   "main": "lib/elliptic.js",
   "files": [

diff --git a/dist/elliptic.min.js b/dist/elliptic.min.js
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "elliptic",
-  "version": "6.5.5",
+  "version": "6.5.6",
   "description": "EC cryptography",
   "main": "lib/elliptic.js",
   "files": [