search

stellar-deprecated / stellard

INACTIVE. Server in the Stellar network. Maintains the distributed ledger. Introduces and validates transactions. This repo is not in active development, it is being replaced by stellar-core.
Other
271 stars 60 forks source link

Prevent malleable ed25519 #149

Closed graydon closed 9 years ago

graydon commented 9 years ago

This merges in the contents of PR #30 (updating libsodium, using its detached signature interface) and adds a check for canonical signatures, to avoid possible transaction/ledger malleability problems.

The libsodium update was changed to 1.0.0 since that is the newest presently-available version. I consulted with @jedisct1, and he recommended we update to it.

bjfish commented 9 years ago

@latobarita Does the Dockerfile need to be updated too? Currently, it has libsodium-0.6.0.

graydon commented 9 years ago

@bjfish Ah, nice catch, thanks! Just opened #150 to pick that up as well, integrating presently.