AntelopeIO / leap

C++ implementation of the Antelope protocol
Other
116 stars 70 forks source link

Remove canonical signature check #2395

Open 0xKodzy opened 4 months ago

0xKodzy commented 4 months ago

Duplicate of https://github.com/EOSIO/eos/issues/6699

Requiring signatures to be canonical is necessary to prevent Signature Malleability attacks. However, in Antelope-based chains, this requirement serves no functional purpose since the signature does not affect the transaction hash generation. Consequently, even if an attacker alters the signature, they cannot exploit it.

The primary problem with canonical checks is that they require the signer to repeat the entire signing process until a canonical signature is found. This can be quite time-consuming for applications that need high-speed signing.