Non-DER versions, which just fill in 64 bits in some canonical order.
Alternately: make the opaque structure a canonical order.
Non-DER versions, which just fill in 64 bits in some canonical order.
Alternately: make the opaque structure a canonical order.
Yep, looks good! Please document the serialize format (at a glance, it’s 32 byte unsigned BE r value followed by 32 byte unsigned BE s value).
I’d still like a “is_normalized” or “is_canonical” for the s-value test BTW, but I can implement my own with these.