search

novitski / bitcoinj

Automatically exported from code.google.com/p/bitcoinj
Apache License 2.0
0 stars 0 forks source link

Enforce that the s component of signatures is always less than half the curve order #465

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
From Sergio: For every ECDSA signature (r,s), the signature (r, -s (mod N)) is 
a valid signature of the same message. To solve:

if (s > order / 2)
  s = order - s;

Original issue reported on code.google.com by hearn@google.com on 30 Sep 2013 at 1:02

GoogleCodeExporter commented 9 years ago 
This issue was closed by revision ddf9d9f4e017.

Original comment by hearn@google.com on 23 Oct 2013 at 10:51