Enforce 32-byte private key length (2926).

ethers-io · Apr 29, 2022 · 7b299dd · 7b299dd
1 parent 9bf17fa
commit 7b299dd
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/packages/signing-key/src.ts/index.ts b/packages/signing-key/src.ts/index.ts
@@ -2,7 +2,7 @@
 
 import { EC } from "./elliptic";
 
-import { arrayify, BytesLike, hexlify, hexZeroPad, Signature, SignatureLike, splitSignature } from "@ethersproject/bytes";
+import { arrayify, BytesLike, hexDataLength, hexlify, hexZeroPad, Signature, SignatureLike, splitSignature } from "@ethersproject/bytes";
 import { defineReadOnly } from "@ethersproject/properties";
 
 import { Logger } from "@ethersproject/logger";
@@ -33,6 +33,9 @@ export class SigningKey {
         defineReadOnly(this, "curve", "secp256k1");
 
         defineReadOnly(this, "privateKey", hexlify(privateKey));
+        if (hexDataLength(this.privateKey) !== 32) {
+            logger.throwArgumentError("invalid private key", "privateKey", "[[ REDACTED ]]");
+        }
 
         const keyPair = getCurve().keyFromPrivate(arrayify(this.privateKey));