chore: bump starknet-crypto to v0.6.1

The new version contains a bug fix on ECDSA signature verification. Previously, the `s` range was incorrectly enforced to be lower than EC order instead of element bound. While this did not allow invalid signatures to be used, it was theoretically possible (1 in 2^48 signatures) to have a signature that passes `verify` yet cannot be proven (due to being out of element bound).
lambdaclass · Oct 30, 2023 · bfaa612 · bfaa612
1 parent e6171d6
commit bfaa612
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 14 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -49,7 +49,7 @@ hex = { version = "0.4.3", default-features = false }
 bincode = { version = "2.0.0-rc.3", default-features = false, features = [
     "serde",
 ] }
-starknet-crypto = { version = "0.5.0", default-features = false, features = [
+starknet-crypto = { version = "0.6.1", default-features = false, features = [
     "signature-display",
     "alloc",
 ] }