gcry_mpi_ec_new() accepts an S-expression describing a curve in which the group order equals the field characteristic (n = p).
Such anomalous curves have zero bits of security — Smart's algorithm solves the discrete logarithm in O(log p).
SEC1 v2.0 3.1.1.2.1 condition S4 requires their rejection.
Description
Description
Related Objects
Related Objects
- Mentioned In
- T8223: Release Libgcrypt 1.12.3