Releases · paulmillr/noble-curves

What's Changed

ed25519 and ed448 verify now provide non-repudiation (Strongly Binding Signatures) when option zip215: false is used
- non-repudiation is useful for e-voting and other systems
- The Provable Security of Ed25519: Theory and Practice
- Taming the many EdDSAs and NIST presentation
Reduce common-case bundle size by 20% by using PURE annotation. It helps bundlers during tree-shaking and eliminates dead code.
- secp256k1: 75.4kb => 62.3kb
- ed25519: 67.5kb => 51.1kb
- ed448: 55.1kb => 44.0kb
- p256: 67.8kb => 59.8kb
- p384: 75.4kb => 67.4kb
- p521: 75.8kb => 67.8kb
weierstrass: sign return type was changed from SignatureType to RecoveredSignatureType
edwards: rename edwardsToMontgomery to edwardsToMontgomeryPub, add edwardsToMontgomeryPriv
bls12-381: improve friendliness to bad compilers by not using bigint literals
Improve friendliness to bad compilers by not using exponentiation operator with bigints
ed25519: fix ristrettoHash size typo in hashToCurve by @sublimator in #42
utils: harmonize with noble-hashes
utils: Fix utf8ToBytes in firefox extension context (bugzil.la/1681809)

Full Changelog: 1.0.0...1.1.0

First stable release. API should remain stable now.

ed25519, ed448: changed API

context is now an option in sign and verify
zip215 is a new verify option that allows to conform to RFC8032 when false. For true it will instead match ZIP215.
Added edwardsToMontgomery function

bls12-381: changed API

CURVE is no longer exposed, it was an internal property. Use G1.CURVE, G2.CURVE
Fields have been moved into fields: {Fp, Fp2, Fp6, Fp12, Fr} property
See README for new usage

weierstrass: improved DER decoding. Validate curve creation
Updated Wycheproof vectors to v0.9
hash-to-curve: restrict expand to xmd and xof

Full Changelog: 0.9.1...1.0.0