ed25519-unsafe-libs
List of unsafe ed25519 signature libs (by MystenLabs)
ed25519-dalek
Fast and efficient ed25519 signing and verification in Rust. (by dalek-cryptography)
| ed25519-unsafe-libs | ed25519-dalek | |
|---|---|---|
| 5 | 1 | |
| 212 | 658 | |
| -0.5% | 0.3% | |
| 3.8 | 4.3 | |
| 6 months ago | 8 months ago | |
| Rust | Rust | |
| MIT License | BSD 3-clause "New" or "Revised" License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ed25519-unsafe-libs
Posts with mentions or reviews of ed25519-unsafe-libs.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-07-04.
-
Is my transaction signature system secure for my blockchain? (audit)
I tried to explain to you last time you asked about "your own crypto" that the answer always will be "it's not good, don't do it". First thing that strikes me is that you take public key from the provided data, which suggests a trivial attack like in https://github.com/MystenLabs/ed25519-unsafe-libs
- Vulnerability in the elliptic curve lib used by Trezor (among others)! Has this been disclosed by Trezor team?
- List of unsafe ed25519 signature libs
-
Initial impact report about this week's EdDSA Double-PubKey Oracle attack in 40 affected crypto libs
original findings and audit report by MystenLabs' Cryptography Chief + continuously updated list of affected libs: https://github.com/MystenLabs/ed25519-unsafe-libs
-
40 unsafe ed25519 libs where private key can be leaked via signing api misuse
TL;DR A new audit report revealed that the signing api of many ed25519 libs (some of them very popular) unfortunately expects a public key as input. An attacker may extract the private key by requesting two different signatures for the same message and private key, but on purpose for a different public key. Applications should not expose this api publicly and should refactor it to protect devs against accidental api misuse. Read more: https://github.com/MystenLabs/ed25519-unsafe-libs and https://blog.safeheron.com/blog/safeheron-originals/analysis-on-ed25519-use-risks-your-wallet-private-key-can-be-stolen
ed25519-dalek
Posts with mentions or reviews of ed25519-dalek.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-05-29.
-
Looking for good (low level?) Elliptic Curve library
Much of what you'll find highly visibly will be high-level libraries, but look at their dependencies. For example, from the ed25519 library you may find ed25519-dalek, and from there you could find curve25519-dalek which deals in point encodings and that like. (I don't know these particular libraries; they might help or just serve as an example of a viable exploration path).