search

paragonie / phpecc

Pure PHP Elliptic Curve Cryptography Library
17 stars 3 forks source link

Signature Malleability #5

Closed paragonie-security closed 6 months ago

paragonie-security commented 6 months ago

For any given valid signature (R, S), there exists another value (R, n-S) (where n is the order of the curve) that is a valid signature.

We should mitigate this risk by design.