Skip to content

Important security fix

Latest
Compare
Choose a tag to compare
@dchest dchest released this 10 Feb 19:49
· 15 commits to master since this release

IMPORTANT BUG FIX. Due to a bug in calculating carry in
modulo reduction that used bit operations on integers larger than
32 bits, nacl.sign or nacl.sign.detached could have created
incorrect signatures.

This only affects signing, not verification.

Thanks to @valerini on GitHub for finding and reporting the bug.