Are the algorithms used in Ripple vulnerable to transaction malleability?
2 Answers
Ripple uses substantially the same signature scheme as Bitcoin does and the server validates signatures similarly using OpenSSL. But Ripple doesn't require you to refer to previous transactions by ID to spend from them. So you can't prevent people from spending funds or jam their transaction chains.
The Ripple server will soon enforce fully canonical signatures on transactions and validations to ensure that no such attack is possible.
-
Regarding your last paragraph "Ripple server will soon enforce fully canonical signatures on transactions and validations", is it already done?– PacerierMay 22, 2014 at 17:33
-
Ripple Labs Chief Cryptographer David Schwartz provided details on Ripple transaction malleability in an interview at Newfination.