Repository navigation
This release focuses on security hardening, protocol correctness, and defensive validation. Upgrading is strongly recommended, especially for users of two-party ECDSA signing.
Security
- Fixed a security issue affecting two-party ECDSA signing. Users of ECDSA-2P should upgrade immediately.
- Added broad defense-in-depth across cryptographic protocols and primitives, including stricter input validation, fail-closed outputs, and multiple malformed-input and denial-of-service protections.
Highlights
- Fixed additive-share reconstruction and PVE recovery behavior.
- Expanded regression testing and updated cryptographic specifications and secure-usage guidance.
Compatibility
The project now explicitly supports only 64-bit macOS and Linux. Previous iOS, Android, and WebAssembly build paths have been removed, and builds use the project’s custom OpenSSL 3.6.4.