libgcrypt: non-secure EC curves can be specified by gcry_mpi_ec_new
Open, NormalPublic

Assigned To
None
Authored By
gniibe
Tue, Aug 25, 4:00 AM

Description

gcry_mpi_ec_new() accepts an S-expression describing a curve in which the group order equals the field characteristic (n = p).
Such anomalous curves have zero bits of security — Smart's algorithm solves the discrete logarithm in O(log p).
SEC1 v2.0 3.1.1.2.1 condition S4 requires their rejection.

Related Objects

Event Timeline

gniibe triaged this task as Normal priority.Tue, Aug 25, 4:00 AM
gniibe created this task.
gniibe created this object in space S1 Public.
gniibe created this object with visibility "Public (No Login Required)".