[openssl-dev] Behavior of OpenSSL EC API regarding point setting

Hanno Böck hanno at hboeck.de
Fri Jan 15 15:37:28 UTC 2016


On Wed, 16 Dec 2015 16:01:02 +0000
"Salz, Rich" <rsalz at akamai.com> wrote:

> > I would recommend and find it generally a cleaner approach if the
> > curve point setting functions would reject both invalid points and
> > point coordinates larger than p.  
> 
> Certainly out-of-range.  Not sure about point invalidity.  But can
> you open one or two tickets for this?

Done now, RT tickets #4241 and #4242.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160115/bc10c803/attachment.sig>


More information about the openssl-dev mailing list