Description (CNA)
An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OCaml / mirage-crypto-ec | affected 0 before 2.2.0 |
CWE
CWE-295
References
ADP enrichment
No English description supplied.