Change Details

Now that the HD wallet is also in ecash-lib, if we can get msg signing, then CashTab could lose bitgo/utxo-lib and bitcoinjs-message as deps. This is generally good, but there's also an associated vulnerability: https://github.com/advisories/GHSA-vjh7-7g9h-fjfh We use our secp256k1, using Pieter Wuille's blessed code, which is much more rigorously vetted than bitcoinjs-message.

Now that the HD wallet is also in ecash-lib, if we can get msg signing, then CashTab could lose bitgo/utxo-lib and bitcoinjs-message as deps. We use our secp256k1, using Pieter Wuille's blessed code, which is much more rigorously vetted than bitcoinjs-message.

Now that the HD wallet is also in ecash-lib, if we can get msg signing, then CashTab could lose bitgo/utxo-lib and bitcoinjs-message as deps. This is generally good, but there's also an associated vulnerability: https://github.com/advisories/GHSA-vjh7-7g9h-fjfh We use our secp256k1, using Pieter Wuille's blessed code, which is much more rigorously vetted than bitcoinjs-message.