| commit | fc6f579a9e625caa0c8b93d9716ddbc558e21a29 | [log] [tgz] |
|---|---|---|
| author | David Benjamin <davidben@google.com> | Sun May 20 14:33:49 2018 -0400 |
| committer | David Benjamin <davidben@google.com> | Wed May 23 17:32:41 2018 -0400 |
| tree | 47edcb0975f86359e47916ce1b8df269fba5ec15 | |
| parent | 55a6250f1e7336e8a7d89fb609eb23398715ff6f [diff] |
Fix explicit EC curve encoding. Per SEC 1, the curve coefficients must be padded up to size. See C.2's definition of Curve, C.1's definition of FieldElement, and 2.3.5's definition of how to encode the field elements in http://www.secg.org/sec1-v2.pdf. This comes up for P-521, where b needs a leading zero. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6314)