[openssl-users] EC_KEY_check_key

Thulasi Goriparthi thulasi.goriparthi at gmail.com
Fri Nov 2 07:50:22 UTC 2018


I am going through the checks done by EC_KEY_check_key method. I see
the following checks in order.

1. Is point at infinity? - reject.
2. Is point not on curve? reject.
3. Is point not in the primary subgroup? reject.
4. If priv key(scalar) available, then check if scalar * G != point.
If so, reject.

If priv key is available and we do step 4, isn't step 3 redundant? Can
we change this to something like this?

if (priv key)
    step 4
   step 3


More information about the openssl-users mailing list