Post
Topic
Board Development & Technical Discussion
Re: A proposal to permemenantly fixing the malleability problem
by
uminatsu
on 13/02/2014, 07:22:49 UTC
The final signature by itself is malleable, because for every ECDSA signature (r,s), the signature (r, -s (mod N)) is also a valid signature (of the same message.)

This can be solved by requiring that "s" always be an even number. Since N is odd, only one signature is accepted as canonical.