Trail of Bits Blog company blog

We found cryptography bugs in the elliptic library using Wycheproof

by "Markus Schiffermuller" blog.trailofbits.com published 2025-11-187 min read

Trail of Bits discovered and disclosed two vulnerabilities in the widely used elliptic JavaScript library that could allow signature forgery or prevent valid signature verification, with one vulnerability still unfixed after the 90-day disclosure window.

Points

113

HN comments

13

Submissions

1

Cited by

0 commenters

Security & PrivacyCrypto & Blockchain2026

Related posts from the same era

Claude Code is steganographically marking requests

Thereallo20262,445 points750 commentscited by 3 details

Motorola announces a partnership with GrapheneOS

Motorola News20262,358 points884 commentscited by 10 details

The newest Instagram “exploit” is the goofiest I've seen

SSid20262,210 points491 commentscited by 3 details

Everyone knows your location: tracking myself down through in-app ads

Tim Shmykov20251,957 points600 commentscited by 3 details

Axios compromised on NPM – Malicious versions drop remote access trojan

StepSecurity Blog20261,934 points807 comments details

Our investigation into the suspicious pressure on Archive.today

AdGuard DNS Blog20251,816 points443 comments details