BTCPrivate
/
bitcore
mirror of https://github.com/BTCPrivate/bitcore.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
bitcore/lib
History
Ryan X. Charles 9f9e2f1d41 k should be 32 bytes, not 8 bytes 
This is a bug with security implications. It is much easier to guess the value
of k within a 64 byte range. This would lead to compromised private keys.

The cryptography interface of bitcore is extremely poor. I recommend:
* Get rid of the C++ code, since it makes everything more difficult with little benefit
* Refactor all crypto, and have easily auditable bignum, point, ecdsa, and key classes
* Then actually audit the crypto
 		2014-08-10 21:25:52 -04:00
..
browser Merge pull request #459 from ryanxcharles/feature/message-signing 2014-08-06 10:56:07 -03:00
common k should be 32 bytes, not 8 bytes 2014-08-10 21:25:52 -04:00
Address.js one test passes 2014-07-24 17:44:57 -03:00
Armory.js ran js-beautify on all bitcore source 2014-06-23 10:57:02 -07:00
AuthMessage.js fix browser tests 2014-08-04 15:52:57 -03:00
BIP39.js remove soop exports 2014-07-10 16:08:42 -03:00
BIP39WordlistEn.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
Base58.js simplify use of bignum in Base58 and Block 2014-07-10 19:16:49 -07:00
Block.js simplify use of bignum in Base58 and Block 2014-07-10 19:16:49 -07:00
Bloom.js remove soop exports 2014-07-10 16:08:42 -03:00
Connection.js fix browser tests 2014-07-24 17:44:57 -03:00
Deserialize.js ran js-beautify on all bitcore source 2014-06-23 10:57:02 -07:00
ECIES.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
Electrum.js ran js-beautify on all bitcore source 2014-06-23 10:57:02 -07:00
HierarchicalKey.js remove soop exports 2014-07-10 16:08:42 -03:00
Key.js add support for signing messages in compressed format 2014-07-25 14:07:03 -07:00
Message.js add support for signing messages in compressed format 2014-07-25 14:07:03 -07:00
NetworkMonitor.js fix merge 2014-07-24 18:02:42 -03:00
Opcode.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
PayPro.js paypro: get root cert names. 2014-07-24 23:07:52 -07:00
Peer.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
PeerManager.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
Point.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
PrivateKey.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
RpcClient.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
SIN.js formatted with js-beautify 2014-07-24 16:48:45 -03:00
SINKey.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
Script.js add is* tests for Script 2014-07-28 14:40:16 -03:00
ScriptInterpreter.js use correct constant & share between Transaction and ScriptInterpreter 2014-07-15 11:59:56 -07:00
SecureRandom.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
Transaction.js add support code for copay's new tx proposal check 2014-07-24 18:01:14 -03:00
TransactionBuilder.js Merge pull request #458 from matiu/feature/builder03 2014-07-25 16:29:53 -04:00
Wallet.js cleanup after removal of soop 2014-07-12 12:14:56 +02:00
WalletKey.js setting networks.livenet as the default for WalletKey 2014-08-05 08:10:20 -07:00
sjcl.js fix sjcl issue on npm install 2014-06-06 11:49:58 -07:00