Is there code that checks that public keys and signatures are canonical?
For example, a public key with a coordinate larger than the modulus or encoded with extra leading zeros or something (acceptable to openSSL but unusual).
I have a memory of a non-canonical encodings being set as non-standard, but couldn't find the code.
[edit]
Found it, the flag SCRIPT_VERIFY_STRICTENC causes IsCanonicalPubKey to check public keys
Topic: Non-standard public keys and signatures (Read 406 times)
Jump to: