postchain-client 1.19.0 → 1.19.1

package/built/esm/index.js

@@ -17503,7 +17503,7 @@ var browserifyRsa = crt$2;
 var elliptic$2 = {};
 
 var name = "elliptic";
-var version = "6.5.4";
+var version = "6.6.0";
 var description = "EC cryptography";
 var main = "lib/elliptic.js";
 var files = [
@@ -17653,12 +17653,15 @@ var utils$k = {};
 	// Represent num in a w-NAF form
 	function getNAF(num, w, bits) {
 	  var naf = new Array(Math.max(num.bitLength(), bits) + 1);
-	  naf.fill(0);
+	  var i;
+	  for (i = 0; i < naf.length; i += 1) {
+	    naf[i] = 0;
+	  }
 
 	  var ws = 1 << (w + 1);
 	  var k = num.clone();
 
-	  for (var i = 0; i < naf.length; i++) {
+	  for (i = 0; i < naf.length; i++) {
 	    var z;
 	    var mod = k.andln(ws - 1);
 	    if (k.isOdd()) {
@@ -22129,8 +22132,8 @@ KeyPair$2.prototype.sign = function sign(msg, enc, options) {
   return this.ec.sign(msg, this, enc, options);
 };
 
-KeyPair$2.prototype.verify = function verify(msg, signature) {
-  return this.ec.verify(msg, signature, this);
+KeyPair$2.prototype.verify = function verify(msg, signature, options) {
+  return this.ec.verify(msg, signature, this, undefined, options);
 };
 
 KeyPair$2.prototype.inspect = function inspect() {
@@ -22176,6 +22179,10 @@ function getLength(buf, p) {
     return false;
   }
 
+  if(buf[p.place] === 0x00) {
+    return false;
+  }
+
   var val = 0;
   for (var i = 0, off = p.place; i < octetLen; i++, off++) {
     val <<= 8;
@@ -22224,6 +22231,9 @@ Signature$2.prototype._importDER = function _importDER(data, enc) {
   if (rlen === false) {
     return false;
   }
+  if ((data[p.place] & 128) !== 0) {
+    return false;
+  }
   var r = data.slice(p.place, rlen + p.place);
   p.place += rlen;
   if (data[p.place++] !== 0x02) {
@@ -22236,6 +22246,9 @@ Signature$2.prototype._importDER = function _importDER(data, enc) {
   if (data.length !== slen + p.place) {
     return false;
   }
+  if ((data[p.place] & 128) !== 0) {
+    return false;
+  }
   var s = data.slice(p.place, slen + p.place);
   if (r[0] === 0) {
     if (r[1] & 0x80) {
@@ -22388,8 +22401,27 @@ function requireEc () {
 	  }
 	};
 
-	EC.prototype._truncateToN = function _truncateToN(msg, truncOnly) {
-	  var delta = msg.byteLength() * 8 - this.n.bitLength();
+	EC.prototype._truncateToN = function _truncateToN(msg, truncOnly, bitLength) {
+	  var byteLength;
+	  if (BN.isBN(msg) || typeof msg === 'number') {
+	    msg = new BN(msg, 16);
+	    byteLength = msg.byteLength();
+	  } else if (typeof msg === 'object') {
+	    // BN assumes an array-like input and asserts length
+	    byteLength = msg.length;
+	    msg = new BN(msg, 16);
+	  } else {
+	    // BN converts the value to string
+	    var str = msg.toString();
+	    // HEX encoding
+	    byteLength = (str.length + 1) >>> 1;
+	    msg = new BN(str, 16);
+	  }
+	  // Allow overriding
+	  if (typeof bitLength !== 'number') {
+	    bitLength = byteLength * 8;
+	  }
+	  var delta = bitLength - this.n.bitLength();
 	  if (delta > 0)
 	    msg = msg.ushrn(delta);
 	  if (!truncOnly && msg.cmp(this.n) >= 0)
@@ -22407,7 +22439,7 @@ function requireEc () {
 	    options = {};
 
 	  key = this.keyFromPrivate(key, enc);
-	  msg = this._truncateToN(new BN(msg, 16));
+	  msg = this._truncateToN(msg, false, options.msgBitLength);
 
 	  // Zero-extend key to provide enough entropy
 	  var bytes = this.n.byteLength();
@@ -22463,8 +22495,11 @@ function requireEc () {
 	  }
 	};
 
-	EC.prototype.verify = function verify(msg, signature, key, enc) {
-	  msg = this._truncateToN(new BN(msg, 16));
+	EC.prototype.verify = function verify(msg, signature, key, enc, options) {
+	  if (!options)
+	    options = {};
+
+	  msg = this._truncateToN(msg, false, options.msgBitLength);
 	  key = this.keyFromPublic(key, enc);
 	  signature = new Signature(signature, 'hex');
 
@@ -22669,6 +22704,7 @@ function Signature$1(eddsa, sig) {
     sig = parseBytes$1(sig);
 
   if (Array.isArray(sig)) {
+    assert$3(sig.length === eddsa.encodingLength * 2, 'Signature has invalid size');
     sig = {
       R: sig.slice(0, eddsa.encodingLength),
       S: sig.slice(eddsa.encodingLength),
@@ -22764,6 +22800,9 @@ EDDSA.prototype.sign = function sign(message, secret) {
 EDDSA.prototype.verify = function verify(message, sig, pub) {
   message = parseBytes(message);
   sig = this.makeSignature(sig);
+  if (sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()) {
+    return false;
+  }
   var key = this.keyFromPublic(pub);
   var h = this.hashInt(sig.Rencoded(), key.pubBytes(), message);
   var SG = this.g.mul(sig.S());
@@ -29694,6 +29733,10 @@ function loadCompressedPublicKey (first, xbuf) {
   let y = x.redSqr().redIMul(x).redIAdd(ecparams.b).redSqrt();
   if ((first === 0x03) !== y.isOdd()) y = y.redNeg();
 
+  // x*x*x + b = y*y
+  const x3 = x.redSqr().redIMul(x);
+  if (!y.redSqr().redISub(x3.redIAdd(ecparams.b)).isZero()) return null
+
   return ec.keyPair({ pub: { x: x, y: y } })
 }