4 ms·
Oh we haven't. Looks like it's a nice library. One question: it seems that you use the message directly, instead of its hash, in ECDSA? [1]. [1] https://github
by cryptbe 12y ago
Oh we haven't. Looks like it's a nice library. One question: it seems that you use the message directly, instead of its hash, in ECDSA? [1].
[1] https://github.com/indutny/elliptic/blob/master/lib/elliptic/ec/index.js#L110 https://github.com/indutny/elliptic/blob/master/lib/elliptic...
PS: were you the guy that won the CloudFlare's HeartBleed challenge? great work :-).
- indutny 12y agoI do expect users to hash the message before passing it to ECDSA, this way you could use any hashing library with it. Though, elliptic.js does actually depends on hash.js to seed it's PRNG. Thank you!
- cryptbe 12y ago> I do expect users to hash the message before passing it to ECDSA, this way you could use any hashing library with it. Though, elliptic.js does actually depends on hash.js to seed it's PRNG. I think this isn't a good design because most people won't know that they must hash the message before passing it to the ECDSA. People will misuse it, and open themselves to attacks. What you can do instead is to pick the right hash based on the curve, like what we did in End-To-End: https://code.google.com/p/end-to-end/source/browse/javascript/crypto/e2e/ecc/ecdsa.js#43 https://code.google.com/p/end-to-end/source/browse/javascrip....