| module: std |
| package: crypto/elliptic |
| versions: |
| - fixed: go1.14.14 |
| - fixed: go1.15.7 |
| - fixed: go1.16.0 |
| description: | |
| The P224() Curve implementation can in rare circumstances generate |
| incorrect outputs, including returning invalid points from |
| ScalarMult. |
| cves: |
| - CVE-2021-3114 |
| credit: | |
| the elliptic-curve-differential-fuzzer project running on OSS-Fuzz |
| and reported by Philippe Antoine (Catena cyber) |
| symbols: |
| - p224Contract |
| links: |
| pr: https://go.dev/cl/284779 |
| commit: https://go.googlesource.com/go/+/d95ca9138026cbe40e0857d76a81a16d03230871 |
| context: |
| - https://go.dev/issue/43786 |
| - https://groups.google.com/g/golang-announce/c/mperVMGa98w |
