Roman Štrobl

This issue will have to wait for the next release.

This issue will have to wait for the next release.

See how BC handles decoding of points: https://github.com/bcgit/bc-java/blob/master/core/src/main/java/org/bouncycastle/math/ec/ECCurve.java#L389 We use this BC method in method `convertBytesToPublicKey`. This is why we never had problems with sign byte in public keys.

You are right the problem is only when we use test vectors from mobile SDK, which is rare. The other question is compatibility with BC library which uses unsigned byte[]...

I suggest we look at `ECDHE_ECDSA` in RFC 4492: https://tools.ietf.org/html/rfc4492, the TLS 1.2 specification defines a similar protocol for authentication of a public key.

In particular, section 5.4 defines the data being signed by ECDSA: 

The issue will have to wait for the next release.

I opened an issue to implement shared logic for auditing: https://github.com/wultra/lime-java-core/issues/34

The issue will have to wait for the next release.

This issue has low priority because the `sqrt` method is used only in the reference implementation, which is not likely to be used for other than testing purposes.