Skip to content

Upgrade to Brine-ed25519 0.10.0 - #99

Merged
mcintyre94 merged 1 commit into
mainfrom
brine-0.10.0
Oct 28, 2026
Merged

mcintyre94 merged 1 commit into
mainfrom
brine-0.10.0

Conversation

@mcintyre94

@mcintyre94 mcintyre94 commented Oct 28, 2026 •

Copy link
Copy Markdown
Member

Add test for non-standard encodings not rejected by 0.7.0

Closes #97

Also includes the audit fix from #98 in the Lockfile, so this supersedes that if merged first

Add test for non-standard encodings not rejected by 0.7.0
@mcintyre94
mcintyre94 requested a review from joncinque October 28, 2026 09:39
// Verify the signer signed the authorization message
brine_ed25519::verify::<Sha512>(signer, signature.as_array(), &[message_bytes.as_slice()])
.map_err(|_| Error::InvalidSignature)?;
brine_ed25519::verify_with_hasher_strict::<Sha512>(

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In 0.10.0 we need to use verify_with_hasher_strict instead of verify to get these checks, API is otherwise the same

@joncinque joncinque left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great! We can start with this, and move to a relaxed version later, since SIMD-0376 will remove strict verification in the validator: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0376-verify-strict.md

@mcintyre94
mcintyre94 merged commit 3fd6f15 into main Oct 28, 2026
45 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Low-order key check bypass allows forged signatures

2 participants