go/src/crypto
Andreas Auernhammer fb46b9ea20 crypto/elliptic: don't unmarshal invalid encoded points
ANSI X9.62 specifies that Unmarshal should fail if the a given coordinate is
not smaller than the prime of the elliptic curve. This change makes Unmarshal
ANSI X9.62 compliant and explicitly documents that the Marshal/Unmarshal only
supports uncompressed points.

Fixes #20482

Change-Id: I161a73da8279cae505c9ba0b3022021709fe8145
Reviewed-on: https://go-review.googlesource.com/44312
Reviewed-by: Adam Langley <agl@golang.org>
Reviewed-by: Filippo Valsorda <hi@filippo.io>
Run-TryBot: Adam Langley <agl@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
2017-10-15 02:24:19 +00:00
..
aes crypto/aes: make the GHASH part of AES-GCM faster 2017-08-18 21:40:57 +00:00
cipher crypto/cipher: panic when IV length does not equal block size in NewOFB 2017-09-06 14:53:44 +00:00
des crypto: revise wording about cryptographically broken algorithms 2017-05-04 12:31:18 +00:00
dsa all: fix article typos 2017-09-15 02:39:16 +00:00
ecdsa all: fix article typos 2017-09-15 02:39:16 +00:00
elliptic crypto/elliptic: don't unmarshal invalid encoded points 2017-10-15 02:24:19 +00:00
hmac crypto/hmac: don't test for length equality in Equal. 2016-08-17 23:23:28 +00:00
internal/cipherhw crypto/{cipher,tls,internal/cryptohw}: prioritise AES-GCM when hardware support is present. 2016-11-07 20:01:18 +00:00
md5 crypto: revise wording about cryptographically broken algorithms 2017-05-04 12:31:18 +00:00
rand crypto/rand: batch large calls to linux getrandom 2017-08-09 19:29:14 +00:00
rc4 crypto/{aes,cipher,rc4}: fix out of bounds write in stream ciphers 2017-08-09 04:17:51 +00:00
rsa crypto/rsa: fix URL for the PKCS #1 v2.2 document in pss.go 2017-08-28 05:26:59 +00:00
sha1 crypto: simplify amd64 asm for sha{1,256,512} a bit 2017-09-12 18:06:37 +00:00
sha256 crypto: simplify amd64 asm for sha{1,256,512} a bit 2017-09-12 18:06:37 +00:00
sha512 crypto: simplify amd64 asm for sha{1,256,512} a bit 2017-09-12 18:06:37 +00:00
subtle crypto/subtle: expand abbreviation to eliminate confusion 2016-06-09 15:30:48 +00:00
tls crypto/tls: replace signatureAndHash by SignatureScheme. 2017-10-13 23:25:03 +00:00
x509 crypto/x509: reformat test struct. 2017-10-13 18:29:40 +00:00
crypto.go crypto: add BLAKE2b and BLAKE2s hash constants 2017-03-01 19:26:16 +00:00
issue21104_test.go crypto/{aes,cipher,rc4}: fix out of bounds write in stream ciphers 2017-08-09 04:17:51 +00:00