PC Toledo

Código: Selecionar todos

2022-06-30 11:27 UTC Viktor Szakats
  * contrib/hbcrypto/3rd/ed25519/ed25519.diff
  * contrib/hbcrypto/3rd/ed25519/ed25519.h
  * contrib/hbcrypto/3rd/ed25519/sign.c
  * contrib/hbcrypto/ed25519.c
  * contrib/hbcrypto/tests/ed25519.prg
    ! HB_ED25519_SIGN()/ed25519_sign(): fix vulnerability by deriving the
      public key from the passed secret key instead of expecting a matching
      pair by the caller. Both of these functions now ignore the passed
      public key value. HB_ED25519_SIGN() can now be called with two
      parameters:
        hb_ed25519_sign( <message>, <secret_key> ) --> <signature>
      The three-parameter calling mode is deprecated.
      Ref: https://github.com/MystenLabs/ed25519-unsafe-libs
    ! also fix the name of a local variable in HB_ED25519_GET_PUBKEY().
    ! also fix function names in comments
    ! also fix a warning in tests/ed25519.prg