We found cryptography bugs in the elliptic library using Wycheproof

Summary: Trail of Bits disclosed two vulnerabilities in elliptic, a JavaScript elliptic curve cryptography library downloaded over 10 million times weekly and used by close to 3,000 projects, caused by a missing modular reduction and a missing length check. The EdDSA flaw lets attackers forge signatures for a known message and signature pair, while the ECDSA flaw rejects valid signatures when the message hash has enough leading zeros, a probability of 2^-32; the ECDSA issue remained unfixed after a 90-day disclosure window that ended in October 2024.
Why it matters: One of the two flaws is still unaddressed in a library pulled more than 10 million times a week, and forged signatures could break consensus in protocols where some participants reject the forged pairs and elliptic users accept them.

Read the original at Trail of Bits Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026