GHSA-6889-VF6X-F3G5 Forge: Ed25519 signature verification accepts small-order public keys

Summary ed25519.verify does not reject public keys of small order, such as the identity point. Under such a key, a signature with S = 0 and a small-order R verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3. Details...

Forge: Ed25519 signature verification accepts small-order public keys

Summary ed25519.verify does not reject public keys of small order, such as the identity point. Under such a key, a signature with S = 0 and a small-order R verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3. Details...