UNKNOWN Go
Incorrect calculation on P256 curves in crypto/internal/nistec
GO-2023-1621 · BIT-golang-2023-24532 · CVE-2023-24532
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve).
This does not impact usages of crypto/ecdsa or crypto/ecdh.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes