> Our implementation of X25519 does not zero the MSB of the `u` coordinate as 
> required by RFC 7748. Currently the test 
> `jdk/sun/security/ec/xec/TestXDH.java` zeroes the bit manually while parsing 
> test vectors, which is likely why this went uncaught.

Ben Perez has updated the pull request incrementally with one additional commit 
since the last revision:

  Added bit clearing functionality to encodedPointMultiply, updated tests

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/29750/files
  - new: https://git.openjdk.org/jdk/pull/29750/files/82416735..93be10d6

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=29750&range=06
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=29750&range=05-06

  Stats: 34 lines in 4 files changed: 26 ins; 4 del; 4 mod
  Patch: https://git.openjdk.org/jdk/pull/29750.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/29750/head:pull/29750

PR: https://git.openjdk.org/jdk/pull/29750

Reply via email to