Addressing an issue with EcsdaSignature and ForeignCurve overriding check() to use assertAlmostReduced. This skips the option to multi-range check all the input variables, which can lead to passing assertions if a malicious prover wishes to do so.
Changes
Added a range check on inputs within the check functions of EcdsaSignature and ForeignCurve
Summary
Addressing an issue with
EcsdaSignature
andForeignCurve
overridingcheck()
to useassertAlmostReduced
. This skips the option to multi-range check all the input variables, which can lead to passing assertions if a malicious prover wishes to do so.Changes
check
functions ofEcdsaSignature
andForeignCurve