Will add to the draft. Thank you Jeff!
------------------------------
From: =JeffH <jeff.hod...@kingsmountain.com>
To: IETF OAuth WG <oauth@ietf.org>
Subject: [OAUTH-WG] reference for invalid point attack [-jwt-bcp] ?
Message-ID: <0c2d1ad2-1239-26e0-87c1-9be2bd1e7...@kingsmountain.com>
Content-Type: text/plain; charset=utf-8; format=flowed
In search of CurveSwap:
Measuring elliptic curve implementations in the wild
Luke Valenta, Nick Sullivan, Antonio Sanso, Nadia Heninger
https://eprint.iacr.org/2018/298.pdf (see section 7.1)
...is perhaps a suitable reference for section 3.4 of -jwt-bcp ?
https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-01#section-3.4
HTH,
=JeffH
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth