Merge pull request #3 from ulamlabs/fix-security-warnings

Update ecdsa to 0.13.3
ulamlabs · Apr 1, 2020 · 1b38e32 · 1b38e32
2 parents 689c1d7 + bdfdf73
commit 1b38e32
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 6 deletions.
diff --git a/aioeos/keys.py b/aioeos/keys.py
@@ -183,7 +183,7 @@ def sign(self, digest):
             ).digest()
 
             k = ecdsa.rfc6979.generate_k(
-                self._sk.curve.generator,
+                self._sk.curve.generator.order(),
                 self._sk.privkey.secret_multiplier,
                 hashlib.sha256,
                 sha_digest

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -8,7 +8,7 @@ authors = ["Maciej Janiszewski <[email protected]>"]
 python = "^3.7"
 aiohttp = "^3.3.1"
 base58 = "^1.0.3"
-ecdsa = "0.11"
+ecdsa = "0.13.3"
 
 [tool.poetry.dev-dependencies]
 flake8 = "^3.7.9"

diff --git a/requirements.txt b/requirements.txt
@@ -1,3 +1,3 @@
 aiohttp==3.3.1
 base58==1.0.3
-ecdsa==0.11
+ecdsa==0.13.3