libff
libff copied to clipboard
Point deserialization lacks checks and sanitization
See thread here: https://github.com/scipr-lab/libff/pull/43#discussion_r462920866
TL;DR: No checks are made to verify that the recovered point lies on the curve, and nothing is done to make sure that we are manipulating elements of the safe subgroup.