libff icon indicating copy to clipboard operation
libff copied to clipboard

Point deserialization lacks checks and sanitization

Open AntoineRondelet opened this issue 4 years ago • 0 comments

See thread here: https://github.com/scipr-lab/libff/pull/43#discussion_r462920866

TL;DR: No checks are made to verify that the recovered point lies on the curve, and nothing is done to make sure that we are manipulating elements of the safe subgroup.

AntoineRondelet avatar Jul 31 '20 12:07 AntoineRondelet