6.5.6

Author: indutny

dist/elliptic.js

@@ -2762,6 +2762,9 @@ EDDSA.prototype.sign = function sign(message, secret) {
 EDDSA.prototype.verify = function verify(message, sig, pub) {
   message = parseBytes(message);
   sig = this.makeSignature(sig);
+  if (sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()) {
+    return false;
+  }
   var key = this.keyFromPublic(pub);
   var h = this.hashInt(sig.Rencoded(), key.pubBytes(), message);
   var SG = this.g.mul(sig.S());
@@ -8853,7 +8856,7 @@ utils.encode = function encode(arr, enc) {
 },{}],35:[function(require,module,exports){
 module.exports={
   "name": "elliptic",
-  "version": "6.5.5",
+  "version": "6.5.6",
   "description": "EC cryptography",
   "main": "lib/elliptic.js",
   "files": [

dist/elliptic.min.js

@@ -1,6 +1,6 @@
 {
   "name": "elliptic",
-  "version": "6.5.5",
+  "version": "6.5.6",
   "description": "EC cryptography",
   "main": "lib/elliptic.js",
   "files": [