-
Type:
Bug
-
Resolution: Fixed
-
Priority:
P3
-
Affects Version/s: None
-
Component/s: security-libs
-
None
-
b14
Per ANSI X9.62 and FIPS 186-4 the private key for EC should sit in the range [1, n-1] where "n" is the order of the generator for the curve.
In the SunEC Provider, if an ECPrivateKey is created with a value that exceeds the order of the generator then a Signature can still be performed.
In the SunEC Provider, if an ECPrivateKey is created with a value that exceeds the order of the generator then a Signature can still be performed.