6 May
2019
6 May
'19
2:57 p.m.
While reviewing FIPS requirements for public key checks in Ephemeral Diffie-Hellman key exchanges it came out that FIPS requires checks that the public key point is not the (0, 0) coordinate and nettle is not doing it (only checks that neither point is negative.
Add this check as we never want to allow this point in any case.
Simo.
--
Simo Sorce
Sr. Principal Software Engineer
Red Hat, Inc