Secp256k1 disable malleability check when verifying

decentralized-identity · Nov 2, 2023 · f251d5d · f251d5d
1 parent aeb2597
commit f251d5d
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/packages/crypto/src/crypto-primitives/secp256k1.ts b/packages/crypto/src/crypto-primitives/secp256k1.ts
@@ -311,9 +311,12 @@ export class Secp256k1 {
     const hashFunction = this.hashAlgorithms[hash];
     const digest = hashFunction(data);
 
-    // Verify operation.
-    const isValid = secp256k1.verify(signature, digest, key);
+    // Verify operation with malleability check disabled. Guaranteed support for low-s
+    // signatures across languages is unlikely especially in the context of SSI. 
+    // Notable Cloud KMS providers do not natively support it either. 
+    // low-s signatures are a requirement for Bitcoin
+    const isValid = secp256k1.verify(signature, digest, key, { lowS: false });
 
     return isValid;
   }
-}
+}