Skip to content

1.4.0

Compare
Choose a tag to compare
@paulmillr paulmillr released this 04 Jan 23:20
· 350 commits to main since this release
1.4.0
5bdc2b2
  • Important: signatures are now canonical: true by default. This mirrors libsecp256k1 behavior. If you'd like old (OpenSSL) behavior, use sign with canonical: false
  • Important: verify() is now strict: true by default. High-s signatures are rejected, which also mirrors libsecp behavior.
  • Important: removed string (hex) return type from public methods. Uint8Array is now always returned
  • Added extraEntropy option to sign. It allows to specify k' as per RFC6979
  • Added Signature#hasHighS() and Signature#normalizeS() methods
  • Rewrite DER parsing logic
  • Improve hex parsing security
  • assertValidity is now done in Signature constructor, instead of a separate method
  • Remove SignResult deprecated class that cloned Signature

Full Changelog: 1.3.4...1.4.0

Thanks to @hank121314 for contribution