Bump @noble/curves from 1.9.1 to 1.9.4

[dependabot]

Bumps @noble/curves from 1.9.1 to 1.9.4.

Release notes

Sourced from @​noble/curves's releases.

1.9.4

• Fix gh-201: invalid renaming of ProjConstructor
• Add more deprecations for the upcoming v2

Full Changelog: paulmillr/noble-curves@1.9.3...1.9.4

1.9.3

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

There are lots of renamings and API adjustments; but all old code would work as-is. The code would visually flagged as "deprecated" (using jsdoc flag) in typescript-supported code environments, which makes it easy to upgrade to new versions.

• Rename *privateKey to *secretKey everywhere for consistency with post-quantum and non-noble libraries
• Add keygen method to curves which creates both secret and public keys
• weierstrass: make endomorphism generic and work for all Koblitz curves
• weierstrass: add fromBytes and toBytes to Signature, deprecate fromDER, fromCompact, toDERRawBytes, toCompactRawBytes
• edwards: move edwardsToMontgomery into utils.toMontgomery
• decaf, ristretto: new interface which makes it more similar to other Points
• ed448: add ED448_TORSION_GROUP
• curve: add curve.info interface to all curves for better interop.
• curve: change public wNAF API
• modular: add sqrt9mod16
• hash-to-curve: move all hashers into _hasher props. E.g. secp256k1_hasher
• test: Add ACVP test vectors

Sensitive code changes

• wNAF: mostly renamings
• Field bound validation: for scalars (Fn) and curve fields (Fp)

Full Changelog: paulmillr/noble-curves@1.9.2...1.9.3

1.9.2

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

• edwards, weierstrass: big refactor, implement much simpler ECDSA / EdDSA API. paulmillr/noble-curves#192
  • Old code is still working until v2
  • New API is experimental until next patch release
  • toRawBytes => toBytes
  • ExtendedPoint, ProjectivePoint => Point
  • Point now has Fp and Fn static properties which are its fields
• weierstrass: add support for ECDSA with cofactor>1 curves
• weierstrass: add support for points having x:0
• bls: big refactor, improve types, add new bls.longSignatures and bls.shortSignatures APIs
  • Old code is still working until v2
  • New API is experimental until next patch release
• utils: reuse noble-hashes utils
• Use randomBytes and hmac from noble-hashes by default

Sensitive code changes

... (truncated)

Commits

• 9b007be Release 1.9.4.
• c4ef0df Fix renamed type. Add more deprecations
• 6c616ce Release 1.9.3.
• eafbcc3 Lint
• 37840e2 bls: finalize api
• 2149ef6 ristretto, decaf: move Point to namespace
• 98451a0 Deprecate shortw utils
• 1674c13 Field: add isValid to fromBytes. Edwards: add isValidSecret/publicKey, remove...
• 8aed5ff Gitignore
• 1a6af03 test: Rename "private key" => "secret key" to match post-quantum.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #427.