Skip to content

ed25519 v1.0.1: important security fix

Compare
Choose a tag to compare
@dchest dchest released this 10 Feb 21:15
· 58 commits to master since this release

Due to a bug in calculating carry in modulo reduction that used bit operations on integers larger than 32 bits, @stablelib/ed25519 could have created incorrect signatures.

This only affects signing, not verification.

Originally reported at dchest/tweetnacl-js#187