—

RUSTSEC-2021-0076

libsecp256k1 allows overflowing signatures

Details

libsecp256k1 accepts signatures whose R or S parameter is larger than the secp256k1 curve order, which differs from other implementations. This could lead to invalid signatures being verified.

The error is resolved in 0.5.0 by adding a `check_overflow` flag.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/libsecp256k1

Introduced in: 0.0.0-0Fixed in: 0.5.0

Upgrade libsecp256k1 to 0.5.0 or newer (ecosystem crates.io).

References

https://crates.io/crates/libsecp256k1[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2021-0076.html[ADVISORY]
https://github.com/paritytech/libsecp256k1/pull/67[WEB]