Re[2]: Looks like ECC sign/verify has a bug.

2009-12-18 Thread Konstantin Andreev
Filed: Bug 535931 [https://bugzilla.mozilla.org/show_bug.cgi?id=535931] On Sat, 19 Dec 2009, Douglas Stebila wrote: Yes, you're correct that it should be done with respect to the size of the group order. If you file a Bugzilla report, you can add me to and I'll put together a patch if no one

Re: Looks like ECC sign/verify has a bug.

2009-12-18 Thread Douglas Stebila
Yes, you're correct that it should be done with respect to the size of the group order. If you file a Bugzilla report, you can add me to and I'll put together a patch if no one else does. Douglas On 2009-Dec-18, at 10:51 PM, Konstantin Andreev wrote: > Hello. > > I have noticed, the followin

Looks like ECC sign/verify has a bug.

2009-12-18 Thread Konstantin Andreev
Hello. I have noticed, the following method is used in the ECC sign/verify routines to derive 'e' integer from a digest: ( begin cite ) /* In the definition of EC signing, digests are truncated * to the length of n in bits. * (see SEC 1 "Elliptic Curve Digit Signature Algo