mirror of
https://github.com/pezkuwichain/pezkuwi-apps.git
synced 2026-10-20 18:56:30 +00:00
Satoshi Qazi Muhammed
09f16d3549
recoverAddress used secp256k1/elliptic.js, which put elliptic (open advisories, no fixed version) into the shipped bundle. secp256k1Recover from @pezkuwi/util-crypto (@noble/curves, or wasm) with the 'keccak' hash type returns the same expanded key without its 0x04 prefix. The spec's signature vector had been broken by the rebrand: the signed message was rewritten from "Kusama" to "Dicle", so recovery gave another address and the test failed on the old code too (it only runs in test:all). Restored; old and new code pass it, and changing one word of the message makes it fail.