fix: generate nonce with correct curve

torusresearch · Jan 3, 2024 · 01c2324 · 01c2324
1 parent a94043e
commit 01c2324
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/src/routes/metadata.ts b/src/routes/metadata.ts
@@ -1,5 +1,4 @@
 /* eslint-disable security/detect-object-injection */
-import { generatePrivate } from "@toruslabs/eccrypto";
 import { celebrate, Joi, Segments } from "celebrate";
 import { ec as EC } from "elliptic";
 import express, { Request, Response } from "express";
@@ -432,11 +431,11 @@ router.post(
           if (nonce) {
             pubNonce = await getPubNonce(true);
           } else {
-            // create new nonce
-            nonce = generatePrivate().toString("hex");
-
             const ec = keyType === "ed25519" ? new EC("ed25519") : new EC("secp256k1");
 
+            // create new nonce
+            nonce = ec.genKeyPair().getPrivate().toString("hex", 64);
+
             const unformattedPubNonce = ec.keyFromPrivate(nonce).getPublic();
             pubNonce = {
               x: unformattedPubNonce.getX().toString("hex"),