search

andelf / tronpy

TRON Python Client Library.
MIT License
204 stars 96 forks source link

`ecdsa` should not be used in production !!! #60

Closed yxy closed 1 year ago

yxy commented 2 years ago

NOTE: This library should not be used in production settings, see Security for more details.

ref: https://pypi.org/project/ecdsa/#Security

MrNaif2018 commented 1 year ago

Definitely I agree. Something like pycryptodome probably also has elliptic curve functions, this needs to be checked

MrNaif2018 commented 1 year ago

I wonder what's better: cryptography or pycryptodome? Personally I like the former more

MrNaif2018 commented 1 year ago

Actually cryptography is too complex :D https://pypi.org/project/coincurve is a good fit as it's a libsecp256k1 wrapper