VDB
Sign up
MEDIUM6.5

GO-2021-0235

Incorrect operations on the P-224 curve in crypto/elliptic

Quick fix

GO-2021-0235 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.14.14

Details

The P224() Curve implementation can in rare circumstances generate incorrect outputs, including returning invalid points from ScalarMult.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/stdlib
Introduced in: 0Fixed in: 1.14.14
Fixgo get stdlib@v1.14.14

References