Skip to content

Commit dc24871

Browse files
committed
chore: bump starknet-crypto to v0.6.1
The new version contains a bug fix on ECDSA signature verification. Previously, the `s` range was incorrectly enforced to be lower than EC order instead of element bound. While this did not allow invalid signatures to be used, it was theoretically possible (1 in 2^48 signatures) to have a signature that passes `verify` yet cannot be proven (due to being out of element bound).
1 parent e6171d6 commit dc24871

File tree

3 files changed

+7
-14
lines changed

3 files changed

+7
-14
lines changed

CHANGELOG.md

+2
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22

33
#### Upcoming Changes
44

5+
* chore: bump starknet-crypto to v0.6.1 [#1469](https://github.com/lambdaclass/cairo-vm/pull/1469)
6+
57
* feat: Implement the Serialize and Deserialize methods for the Program struct [#1458](https://github.com/lambdaclass/cairo-vm/pull/1458)
68

79
* feat: Use only program builtins when running cairo 1 programs [#1457](https://github.com/lambdaclass/cairo-vm/pull/1457)

Cargo.lock

+4-13
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ hex = { version = "0.4.3", default-features = false }
4949
bincode = { version = "2.0.0-rc.3", default-features = false, features = [
5050
"serde",
5151
] }
52-
starknet-crypto = { version = "0.5.0", default-features = false, features = [
52+
starknet-crypto = { version = "0.6.1", default-features = false, features = [
5353
"signature-display",
5454
"alloc",
5555
] }

0 commit comments

Comments
 (0)