Commit 9a0fb52
authored
Migrate from @noble/secp256k1 to @noble/curves for enhanced security (#10)
- Dependency Migration: Replaced `@noble/secp256k1` with `@noble/curves`, enhancing security and maintainability as recommended by @paulmillr. Updated internal implementations to utilize `@noble/curves` APIs while preserving the same external API for users.
- Behavior Update: Updated the `signSchnorr` function to remove default zero-filled auxiliary randomness (`e`) initialization. It now defaults to secure random values if not explicitly provided, improving compliance with best practices.
- Documentation Update: Revised the README to:
- Reflect the migration to noble-curves.
- Document the `signSchnorr` behavior change, highlighting the deviation from `bitcoinjs/tiny-secp256k1` for auxiliary randomness and linking relevant discussions for context.
Version Bump: Incremented the version to `1.2.0` to indicate the significant internal changes while maintaining external compatibility.
Testing: All existing tests have been updated and pass successfully with the new dependency and refactored implementations.1 parent 31d275e commit 9a0fb52
4 files changed
+146
-135
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
| 12 | + | |
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
| |||
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
37 | | - | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
38 | 40 | | |
39 | 41 | | |
40 | 42 | | |
| |||
0 commit comments