
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@jill64/ecdsa-sig-formatter
Advanced tools
Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation
Translate between JOSE and ASN.1/DER encodings for ECDSA signatures
npm install ecdsa-sig-formatter --save
var format = require('ecdsa-sig-formatter');
var derSignature = '..'; // asn.1/DER encoded ecdsa signature
var joseSignature = format.derToJose(derSignature);
.derToJose(Buffer|String signature, String alg)
-> String
Convert the ASN.1/DER encoded signature to a JOSE-style concatenated signature.
Returns a base64 url encoded String
.
String
, it should be base64 encoded.joseToDer(Buffer|String signature, String alg)
-> Buffer
Convert the JOSE-style concatenated signature to an ASN.1/DER encoded
signature. Returns a Buffer
String
, it should be base64 url encodedFork the repository. Committing directly against this repository is highly discouraged.
Make your modifications in a branch, updating and writing new unit tests
as necessary in the spec
directory.
Ensure that all tests pass with npm test
rebase
your changes against master. Do not merge.
Submit a pull request to this repository. Wait for tests to run and someone to chime in.
This repository is configured with EditorConfig and ESLint rules.
FAQs
Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation
The npm package @jill64/ecdsa-sig-formatter receives a total of 0 weekly downloads. As such, @jill64/ecdsa-sig-formatter popularity was classified as not popular.
We found that @jill64/ecdsa-sig-formatter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.