]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: check curve equation in ECDHE.
authorAdam Langley <agl@golang.org>
Mon, 28 Jul 2014 22:46:27 +0000 (15:46 -0700)
committerAdam Langley <agl@golang.org>
Mon, 28 Jul 2014 22:46:27 +0000 (15:46 -0700)
commit30fbcc7576b969994231498e88518f9c321adf8d
tree0a701f91ff2d533c65d285194dab687c65029c81
parent8332112d0a84ec70c9c82402ea796b18b83eb8f4
crypto/tls: check curve equation in ECDHE.

This change causes a TLS client and server to verify that received
elliptic curve points are on the expected curve. This isn't actually
necessary in the Go TLS stack, but Watson Ladd has convinced me that
it's worthwhile because it's pretty cheap and it removes the
possibility that some change in the future (e.g. tls-unique) will
depend on it without the author checking that precondition.

LGTM=bradfitz
R=bradfitz
CC=golang-codereviews
https://golang.org/cl/115290046
src/pkg/crypto/tls/key_agreement.go