Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
indutny/elliptic
master @ 9b77436
12
Fixes
7
CVEs
CRITICAL
Peak severity
72.7%
Coverage
Highlights
Cryptographic Issues: 4 prior fixes. Scrutinize any change in this area.
lib/elliptic/ec/index.js: most-fixed (6 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Signature Malleability: Incomplete enforcement of canonical formatting, length boundaries, and leading zero constraints during DER decoding allows attackers to modify ECDSA signature formats without invalidating the mathematical signature. Developers must strictly validate DER structures using rigorous MSB, length-byte, and canonical leading-zero checks.
Cryptographic Issues: Performing scalar multiplications on unvalidated public key points allows attackers to pass invalid points on curves (twist attacks) to extract the private key during ECDH operations. All incoming public points must be verified to exist on the target curve before performing any mathematical operations.
Signature Validation Bypass: Failing to validate that a recovered point from an X coordinate yields a valid quadratic residue allows attackers to bypass cryptographic validation during public key recovery. Accurate quadratic residue checking is mandatory when reconstructing points.