[HN Gopher] We found cryptography bugs in the elliptic library u...
       ___________________________________________________________________
        
       We found cryptography bugs in the elliptic library using Wycheproof
        
       Author : crescit_eundo
       Score  : 35 points
       Date   : 2026-01-01 14:52 UTC (6 days ago)
        
 (HTM) web link (blog.trailofbits.com)
 (TXT) w3m dump (blog.trailofbits.com)
        
       | binkHN wrote:
       | FYI: two vulnerabilities in elliptic, a widely used JavaScript
       | library for elliptic curve cryptography
        
         | some_furry wrote:
         | The maintainer seems to have abandoned it:
         | https://github.com/indutny/elliptic/issues
         | 
         | I wrote a shim library and posted it on their issue tracker:
         | https://github.com/indutny/elliptic/issues/343
         | 
         | Unfortunately, adoption seems slow. I'm talking with a few
         | people about how to move the ecosystem to something more secure
         | like noble-curves, but it's tricky.
        
       ___________________________________________________________________
       (page generated 2026-01-07 23:00 UTC)