support hybrid keys. see indutny/elliptic#91.

lib/bcoin/ec.js

@@ -120,6 +120,8 @@ ec.rand = function rand(min, max) {
  */
 
 ec.verify = function verify(msg, sig, key, historical, high) {
+  var hybrid, result;
+
   if (key.getPublicKey)
     key = key.getPublicKey();
 
@@ -140,28 +142,46 @@ ec.verify = function verify(msg, sig, key, historical, high) {
   if (historical)
     sig = ec.normalizeLength(sig);
 
-  try {
+  if (secp256k1) {
-    if (secp256k1) {
+    // secp256k1 fails on high s values. This is
-      // secp256k1 fails on high s values. This is
+    // bad for verifying historical data.
-      // bad for verifying historical data.
+    if (high)
-      if (high)
+      sig = ec.toLowS(sig);
-        sig = ec.toLowS(sig);
 
+    try {
       // Import from DER.
       sig = secp256k1.signatureImport(sig);
-
+      result = secp256k1.verify(msg, sig, key);
-      return secp256k1.verify(msg, sig, key);
+    } catch (e) {
+      result = false;
     }
 
-    // Make elliptic mimic secp256k1's
+    return result;
-    // failure with high S values.
-    if (!high && !ec.isLowS(sig))
-      return false;
-
-    return ec.elliptic.verify(msg, sig, key);
-  } catch (e) {
-    return false;
   }
+
+  // Make elliptic mimic secp256k1's
+  // failure with high S values.
+  if (!high && !ec.isLowS(sig))
+    return false;
+
+  // Elliptic does not support
+  // openssl's "hybrid" keys yet.
+  if (key[0] === 0x06 || key[0] === 0x07) {
+    hybrid = key[0];
+    key[0] = 0x04;
+  }
+
+  try {
+    result = ec.elliptic.verify(msg, sig, key);
+  } catch (e) {
+    result = false;
+  }
+
+  // Reset the byte if we need to.
+  if (hybrid != null)
+    key[0] = hybrid;
+
+  return result;
 };
 
 /**