From 955616d7c246012bd64e33d6515a42a341ee048f Mon Sep 17 00:00:00 2001 From: Felix Lange Date: Thu, 30 Jan 2025 14:10:36 +0100 Subject: [PATCH] crypto: add IsOnCurve check (#31100) --- crypto/crypto.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/crypto/crypto.go b/crypto/crypto.go index 79b4d653f1..269cdfd68c 100644 --- a/crypto/crypto.go +++ b/crypto/crypto.go @@ -169,6 +169,9 @@ func UnmarshalPubkey(pub []byte) (*ecdsa.PublicKey, error) { if x == nil { return nil, errInvalidPubkey } + if !S256().IsOnCurve(x, y) { + return nil, errInvalidPubkey + } return &ecdsa.PublicKey{Curve: S256(), X: x, Y: y}, nil }