elliptic

Security advisories7

• elliptic: Elliptic's verify function omits uniqueness validationfixed in 6.5.6
• elliptic: Elliptic allows BER-encoded signaturesfixed in 6.5.7
• elliptic: Elliptic Uses a Cryptographic Primitive with a Risky Implementationno fix yet
• elliptic: Elliptic's ECDSA missing check for whether leading bit of r and s is zerofixed in 6.5.7
• elliptic: Elliptic's EDDSA missing signature length checkfixed in 6.5.7
• elliptic: Valid ECDSA signatures erroneously rejected in Ellipticfixed in 6.6.0
• elliptic: Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)fixed in 6.6.1

Versions that change something