From 7a019bc7ecdbdfdef51094e090ce95e062da9b64 Mon Sep 17 00:00:00 2001 From: NIIBE Yutaka Date: Fri, 12 Feb 2016 13:50:02 +0900 Subject: ecc: Not validate input point for Curve25519. * cipher/ecc.c (ecc_decrypt_raw): Curve25519 is an exception. -- Signed-off-by: NIIBE Yutaka --- cipher/ecc.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/cipher/ecc.c b/cipher/ecc.c index d1fe8237..4cdbb149 100644 --- a/cipher/ecc.c +++ b/cipher/ecc.c @@ -1570,7 +1570,9 @@ ecc_decrypt_raw (gcry_sexp_t *r_plain, gcry_sexp_t s_data, gcry_sexp_t keyparms) if (DBG_CIPHER) log_printpnt ("ecc_decrypt kG", &kG, NULL); - if (!_gcry_mpi_ec_curve_point (&kG, ec)) + if (!(curvename && !strcmp (curvename, "Curve25519")) + /* For Curve25519, by its definition, validation should not be done. */ + && !_gcry_mpi_ec_curve_point (&kG, ec)) { rc = GPG_ERR_INV_DATA; goto leave; -- cgit v1.2.1