starkbank/ecdsa-dotnet

starkbank/ecdsa-dotnet

GitHubGitHub
GitHubgithub.com
starkbank.comstarkbank.com
Releases8
Frequency2 months 2 weeks
Last Release
Stars53
A lightweight and fast pure C# ECDSA library
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-43569↗
9.8 CRITICAL7.5 HIGH

The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.