In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
Incorrect Calculation
Incorrect Calculation
3.9
-
-
3.9
-
-
-
BIT-2021-3114
-
BIT-golang-2021-3114
-
3.9
-
-
2.2
-
-