From d9086a28380ab31f4767029f9b6cb6a2b0b1e4a1 Mon Sep 17 00:00:00 2001
From: David <david@taiko.xyz>
Date: Fri, 31 Jan 2025 18:00:43 +0800
Subject: [PATCH] crypto: add IsOnCurve check (#31100) (#374)

Co-authored-by: Felix Lange <fjl@twurst.com>
---
 crypto/crypto.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/crypto/crypto.go b/crypto/crypto.go
index aaa5cc43a2..f9979aa4bb 100644
--- a/crypto/crypto.go
+++ b/crypto/crypto.go
@@ -178,6 +178,9 @@ func UnmarshalPubkey(pub []byte) (*ecdsa.PublicKey, error) {
 	if x == nil {
 		return nil, errInvalidPubkey
 	}
+	if !S256().IsOnCurve(x, y) {
+		return nil, errInvalidPubkey
+	}
 	return &ecdsa.PublicKey{Curve: S256(), X: x, Y: y}, nil
 }