Comment by binkHN 3 days ago FYI: two vulnerabilities in elliptic, a widely used JavaScript library for elliptic curve cryptography 3 comments binkHN Reply some_furry 3 days ago The maintainer seems to have abandoned it: https://github.com/indutny/elliptic/issuesI wrote a shim library and posted it on their issue tracker: https://github.com/indutny/elliptic/issues/343Unfortunately, adoption seems slow. I'm talking with a few people about how to move the ecosystem to something more secure like noble-curves, but it's tricky. thephyber 3 days ago If you really feel like helping the ecosystem update, you could file issues/PRs for all of the downstream NPM modules to switch to your shim library.Remember to tell them what the problem is and how your library solves it. some_furry 3 days ago If you click "Show more" you'll see this: https://imgur.com/a/KLI8cjL
some_furry 3 days ago The maintainer seems to have abandoned it: https://github.com/indutny/elliptic/issuesI wrote a shim library and posted it on their issue tracker: https://github.com/indutny/elliptic/issues/343Unfortunately, adoption seems slow. I'm talking with a few people about how to move the ecosystem to something more secure like noble-curves, but it's tricky. thephyber 3 days ago If you really feel like helping the ecosystem update, you could file issues/PRs for all of the downstream NPM modules to switch to your shim library.Remember to tell them what the problem is and how your library solves it. some_furry 3 days ago If you click "Show more" you'll see this: https://imgur.com/a/KLI8cjL
thephyber 3 days ago If you really feel like helping the ecosystem update, you could file issues/PRs for all of the downstream NPM modules to switch to your shim library.Remember to tell them what the problem is and how your library solves it. some_furry 3 days ago If you click "Show more" you'll see this: https://imgur.com/a/KLI8cjL
The maintainer seems to have abandoned it: https://github.com/indutny/elliptic/issues
I wrote a shim library and posted it on their issue tracker: https://github.com/indutny/elliptic/issues/343
Unfortunately, adoption seems slow. I'm talking with a few people about how to move the ecosystem to something more secure like noble-curves, but it's tricky.
If you really feel like helping the ecosystem update, you could file issues/PRs for all of the downstream NPM modules to switch to your shim library.
Remember to tell them what the problem is and how your library solves it.
If you click "Show more" you'll see this: https://imgur.com/a/KLI8cjL