@smartledger/bsv 4.6.0 → 5.0.0

package/build/webpack.bundle.config.js

@@ -10,8 +10,9 @@ module.exports = {
     filename: 'bsv.bundle.js'
   },
   node: {
-    crypto: 'empty',
-    stream: 'empty',  
+    // crypto left to webpack's default polyfill so Shamir (secrets.js) works
+    // in the browser; bsv's own crypto stays pure-JS.
+    stream: 'empty',
     Buffer: true
   },
   mode: 'production',

package/build/webpack.config.js

@@ -10,7 +10,9 @@ module.exports = {
     filename: 'bsv.min.js'
   },
   node: {
-    crypto: 'empty',
+    // `crypto` is left to webpack's default polyfill (crypto-browserify) so
+    // secrets.js (Shamir) can obtain a CSPRNG in the browser. bsv's own crypto
+    // remains pure-JS. (Previously mocked 'empty', which broke Shamir.)
     stream: 'empty',
     Buffer: true
   },

package/build/webpack.security.config.js

@@ -10,9 +10,10 @@ module.exports = {
     libraryTarget: 'var'
   },
   node: {
+    // crypto left to webpack's default polyfill so Shamir (secrets.js) works
+    // in the browser; bsv's own crypto stays pure-JS.
     fs: 'empty',
     path: 'empty',
-    crypto: 'empty',
     stream: 'empty',
     assert: 'empty',
     http: 'empty',

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@4.2.1/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@5.0.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@4.2.1/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@4.2.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@4.2.1/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@4.2.1/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@4.2.1/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@4.2.1/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@4.2.1/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@4.2.1/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@5.0.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.0.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.0.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.0.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.0.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.0.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.0.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@5.0.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@4.2.1/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@5.0.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@4.2.1/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@4.2.1/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@4.2.1/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@4.2.1/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@4.2.1/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@4.2.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@4.2.1/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@4.2.1/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.0.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@5.0.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.0.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.0.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.0.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.0.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.0.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.0.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@4.2.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.0.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/index.js

@@ -158,7 +158,7 @@ if (typeof window === 'undefined' && typeof require === 'function') {
     // Soft-deprecated in v4.0.1: the symbol is preserved (no semver break)
     // but access surfaces a one-shot warning. Direct import remains:
     //   require('@smartledger/bsv/lib/smartutxo')
-    // The symbol will be removed in v5.0.0.
+    // The symbol will be removed in v6.0.0.
     var _SmartUTXO
     var _SmartUTXOWarned = false
     Object.defineProperty(bsv, 'SmartUTXO', {

package/lib/crypto/elliptic-fixed.js

@@ -2,73 +2,66 @@
 
 /**
  * SmartLedger Elliptic Security Wrapper
- * Patches elliptic library to prevent signature verification vulnerabilities
+ *
+ * Wraps the elliptic secp256k1 context with:
+ *  - verify: strict rejection of malformed / out-of-range (r, s) before the
+ *    underlying verify runs.
+ *  - sign: low-S canonical signatures via elliptic's own `canonical` option,
+ *    which also keeps `recoveryParam` consistent (a manual s-flip does not).
  */
 
 const { ec: EC } = require('elliptic')
 const ec = new EC('secp256k1')
 
-// Store original verify method
+// Store original methods.
 const origVerify = ec.verify.bind(ec)
+const origSign = ec.sign.bind(ec)
 
 /**
- * Hardened elliptic verify method
- * Rejects invalid signature parameters before calling original verify
+ * Hardened verify: reject malformed or out-of-range signatures up front.
+ * (elliptic already range-checks internally; this fails fast and never
+ * throws on garbage input, returning false instead.)
  */
 ec.verify = function (msg, sig, key, enc, opts) {
-  // Validate signature components exist
   if (!sig || typeof sig !== 'object') {
     return false
   }
 
-  // Check for r and s components
-  if (!sig.r || !sig.s) {
-    return false
-  }
+  const r = sig.r
+  const s = sig.s
 
-  // Convert to BN if needed for comparison
-  const r = typeof sig.r.cmp === 'function' ? sig.r : this.curve.n.red ? this.curve.n.fromRed(sig.r) : sig.r
-  const s = typeof sig.s.cmp === 'function' ? sig.s : this.curve.n.red ? this.curve.n.fromRed(sig.s) : sig.s
-
-  // Reject if r or s >= curve order n
-  if (r && r.cmp && r.cmp(this.curve.n) >= 0) {
-    return false
-  }
-  if (s && s.cmp && s.cmp(this.curve.n) >= 0) {
+  // r and s must be BN-like with a usable comparison.
+  if (!r || !s || typeof r.cmp !== 'function' || typeof s.cmp !== 'function') {
     return false
   }
 
-  // Reject zero values
-  if (r && r.isZero && r.isZero()) {
+  // Reject r or s outside [1, n-1].
+  if (r.isZero() || s.isZero()) {
     return false
   }
-  if (s && s.isZero && s.isZero()) {
+  if (r.cmp(this.curve.n) >= 0 || s.cmp(this.curve.n) >= 0) {
     return false
   }
 
-  // Call original verify with validated parameters
   return origVerify(msg, sig, key, enc, opts)
 }
 
-// Store original sign method for potential future hardening
-const origSign = ec.sign.bind(ec)
-
 /**
- * Hardened elliptic sign method
- * Ensures canonical signatures (s <= n/2)
+ * Hardened sign: always produce low-S canonical signatures.
+ *
+ * We delegate canonicalization to elliptic (`{ canonical: true }`) rather than
+ * flipping s after the fact, because elliptic also flips `recoveryParam` when
+ * it negates s. A manual flip leaves recoveryParam pointing at the wrong
+ * candidate key, silently breaking public-key recovery.
  */
 ec.sign = function (msg, key, enc, options) {
-  const signature = origSign(msg, key, enc, options)
-
-  // Canonicalize s value to lower half
-  if (signature.s && signature.s.cmp) {
-    const halfOrder = this.curve.n.shrn(1)
-    if (signature.s.cmp(halfOrder) > 0) {
-      signature.s = this.curve.n.sub(signature.s)
-    }
+  // Mirror elliptic's own argument normalization: sign(msg, key, options).
+  if (typeof enc !== 'string') {
+    options = enc
+    enc = undefined
   }
-
-  return signature
+  options = Object.assign({}, options, { canonical: true })
+  return origSign(msg, key, enc, options)
 }
 
 module.exports = ec