diff --git a/ChangeLog.d/ecdsa-verify-fixes.txt b/ChangeLog.d/ecdsa-verify-fixes.txt new file mode 100644 index 000000000..6dbd4702e --- /dev/null +++ b/ChangeLog.d/ecdsa-verify-fixes.txt @@ -0,0 +1,5 @@ +Bugfix + * Fix ECDSA verification, where it was failing to validate the public key + for signatures where R == 1 and S == 1. This bug meant that it was + possible to verify such signatures with an invalid public key, in some + cases.