Skip to content

Conversation

@alevy
Copy link
Member

@alevy alevy commented Dec 11, 2025

The ecdsa package is not for production use and pycrypto already includes the appropriate algorithms for ECDSA signatures. So just use those and get rid of the insecure dependency.

The ecdsa package is not for production use and pycrypto already
includes the appropriate algorithms for ECDSA signatures. So just use
those and get rid of the insecure dependency.
@alevy
Copy link
Member Author

alevy commented Dec 11, 2025

Tested for equivalence by signing with this branch and verifying with master as well as vice versa.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants