search

TBD54566975 / dwn-sdk-js

Decentralized Web Node (DWN) Reference implementation
https://identity.foundation/decentralized-web-node/spec/
Apache License 2.0
324 stars 95 forks source link

Add `lowS: false` flag to secp256k1.ts `verify` #714

Open theisens opened 3 months ago

theisens commented 3 months ago

As has been noted in the @web5/crypto package, support for low-s signatures is not guaranteed by major KMS providers. I have personally run into this issue when using Azure keys for signing. Requesting that the lowS flag be set to false by default for verification of secp256k1 signatures, as it is in @web5/crypto package.

OR13 commented 3 months ago

jfyi, if you are not sure which type of signature you are being handed, and you require lower s, you can always normalize to lower s before calling verify.