1. connect2id Avatar connect2id
  2. Crypto
  3. Nimbus-JOSE-JWT
  4. Issues

Explicit check for EC public key on curve in ECDSASigner

Issue #217 resolved
Vladimir Dzhuvinov created an issue

https://research.kudelskisecurity.com/2017/04/10/how-not-to-break-your-ecdsa/

Comments (1)

  1. Vladimir Dzhuvinov reporter

    Adds EC JWK constructor checks for x and y being on crv: f3a7a80

    Note: SUN provider signer / verifier throws RuntimeException on invalid curve!

  2. Log in to comment
Assignee
–
Type
enhancement
Priority
major
Status
resolved
Component
–
Milestone
–
Votes
0
Watchers
1
Jira: the preferred issue tracker for Bitbucket. Join the team!