elliptic

Releases

1. ▸▾0.4.031 Jul 2026

   SECURITY: scalarMul now uses a Montgomery ladder (one addition and one doubling per scalar bit, exchanged with a branch-free conditional swap) so the

   • SECURITY: scalarMul now uses a Montgomery ladder (one addition and one doubling per scalar bit, exchanged with a branch-free conditional swap) so the execution shape no longer depends on secret scalar bits. Dart BigInt arithmetic itself remains variable-time.
   • SECURITY: compressedHexToPublicKey computes the modular square root with Tonelli–Shanks, fixing decoding for curves with p ≡ 1 (mod 4) (secp224r1/secp224k1), and validates x < p and the recovered root.
   • Fix generatePrivateKey: remove a leftover test-only byte mutation and zero-pad the range-check reconstruction.
   • Correct documentation that incorrectly claimed constant-time operations.

   Open source →
2. ▸▾0.3.1210 Oct 2025Security

   SECURITY FIX: Add point validation to prevent invalid elliptic curve points from being used in ECDH

   • SECURITY FIX: Add point validation to prevent invalid elliptic curve points from being used in ECDH
     • PublicKey constructors now validate that points are on the curve
     • computeSecret() validates public key points before ECDH computation
     • Added ErrPointNotOnCurve exception for invalid points
     • Prevents potential security vulnerabilities from malformed or malicious public keys