Duniter uses a buggy version of TweetNaCl

Duniter use C binding of TweetNaCl version 20130719, this version is buggy : http://seb.dbzteam.org/blog/2014/04/28/tweetnacl_arithmetic_bug.html#fnref:1

link to https://git.duniter.org/nodes/rust/duniter-rs/issues/183

changed milestone to %1.7

added T-bug W-protocol change labels

Plan :

1. Addition of tweetnacl-js in Duniter 1.7.20 (keeping naclb) and use of tweetnacl-js for v12 blocks, automatic triggering via nonce.
2. Test of the change to V12 on the g1-test only.
3. If everything went well on the g1-test, launch the call to install the 1.7.20 on the G1 then wait for the automatic switch to V12 on the G1.
4. When the transition to V12 went well on the G1, delivery of a new Duniter release that deletes naclb and no longer checks the signatures of the v10 and v11 blocks.

mentioned in merge request !1283 (merged)

closed

closed

closed

closed

closed

made the issue visible to everyone

fixed by !1283 (merged)