1.4.0
- Important: signatures are now
canonical: true
by default. This mirrors libsecp256k1 behavior. If you'd like old (OpenSSL) behavior, usesign
withcanonical: false
- Important:
verify()
is nowstrict: true
by default. High-s signatures are rejected, which also mirrors libsecp behavior. - Important: removed
string
(hex) return type from public methods.Uint8Array
is now always returned - Added
extraEntropy
option tosign
. It allows to specifyk'
as per RFC6979 - Added
Signature#hasHighS()
andSignature#normalizeS()
methods - Rewrite DER parsing logic
- Improve hex parsing security
assertValidity
is now done inSignature
constructor, instead of a separate method- Remove
SignResult
deprecated class that clonedSignature
Full Changelog: 1.3.4...1.4.0
Thanks to @hank121314 for contribution