Shilohshio

An attacker can send an invalid point, not on the curve, as the public key and obtain the derived shared secret. This issue allows an attacker to potentially exploit the system by manipulating the public key exchange process.

The issue is related to the implementation of ECDSA in the secp256k1-js package, which lacks required `r` and `s` validation. This omission can lead to signature forgery.