search

potatosalad / erlang-libdecaf

ed448goldilocks (libdecaf) NIF with timeslice reductions for Erlang and Elixir.
MIT License
29 stars 16 forks source link

Misuse of public apis can result in private key exposure #13

Closed cjimison closed 2 years ago

cjimison commented 2 years ago

MystenLabs identified erlang-libdecaf as one potentially unsafe library. Might be worth adding some docs, warning or exceptions in such a case.

https://github.com/MystenLabs/ed25519-unsafe-libs

potatosalad commented 2 years ago

@cjimison Awesome, thank you for reporting this! This will be fixed in the next release.

kchalkias commented 2 years ago

Awesome work potatosalad re resolving this + error handling + logging!