Skip to content

3.0.1

Choose a tag to compare

View all tags
@paulmillr paulmillr released this 17 Mar 13:17
· 17 commits to main since this release
Immutable release. Only release title and notes can be modified.
3.0.1
This tag was signed with the committer’s verified signature.
paulmillr Paul Miller
GPG key ID: 697079DA6878B89B
Verified
Learn about vigilant mode.
3106033
This commit was signed with the committer’s verified signature.
paulmillr Paul Miller
GPG key ID: 697079DA6878B89B
Verified
Learn about vigilant mode.
  • Fix a low-severity issue affecting verify
    • An attacker with an access to secret key was able to produce signatures, which were valid for all messages for their secret key
    • Impact: low, primarily systems which rely on non-repudiation
    • Special thanks to folks who've reported the issue: Yituo He (a.k.a. @HaveYouTall) and @sunyxedu
  • Speed-up everything 1.5x using new modP with HAC 14.47, HAC 14.50.
    • Contributed by @georg95 in #117.
    • keygen x 10,594 ops/sec @ 94μs/op => 14,610 ops/sec @ 68μs/op
    • sign x 5,267 ops/sec @ 189μs/op => 7,225 ops/sec @ 138μs/op
    • verify x 1,203 ops/sec @ 830μs/op => 1,972 ops/sec @ 506μs/op

Full Changelog: 3.0.0...3.0.1

Contributors

HaveYouTall, sunyxedu, and georg95
Assets 3
Loading