[security-dev 01355]: Elliptic curve bugs?

[Tomas Gustavsson-3]

Hi,

I found this by for Elliptic curve crypto:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6738532

It's quite old and there seems to ba a quite easy resolution to the bug
(second suggested solutions).

Any plans to fix it?

Cheers,
Tomas

[Michael StJohns-2]

I submitted the fix a while ago at

https://bugs.openjdk.java.net/show_bug.cgi?id=100048

Still pending...  Mike


At 03:38 AM 11/2/2009, Tomas Gustavsson wrote:

>Hi,
>
>I found this by for Elliptic curve crypto:
>http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6738532
>
>It's quite old and there seems to ba a quite easy resolution to the bug
>(second suggested solutions).
>
>Any plans to fix it?
>
>Cheers,
>Tomas

[gnu_andrew]

2009/11/2 Michael StJohns <mstjohns@...>:

> I submitted the fix a while ago at
>
> https://bugs.openjdk.java.net/show_bug.cgi?id=100048
>
> Still pending...  Mike
>
>
> At 03:38 AM 11/2/2009, Tomas Gustavsson wrote:
>
>>Hi,
>>
>>I found this by for Elliptic curve crypto:
>>http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6738532
>>
>>It's quite old and there seems to ba a quite easy resolution to the bug
>>(second suggested solutions).
>>
>>Any plans to fix it?
>>
>>Cheers,
>>Tomas
>
>
>

This one:

http://mail.openjdk.java.net/pipermail/security-dev/2009-September/001243.html

is in the same boat.  There only seems to be Vincent working on the
ECC stuff, and I guess he hasn't got to either of them yet.
--
Andrew :-)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

Support Free Java!
Contribute to GNU Classpath and the OpenJDK
http://www.gnu.org/software/classpath
http://openjdk.java.net

PGP Key: 94EFD9D8 (http://subkeys.pgp.net)
Fingerprint: F8EF F1EA 401E 2E60 15FA  7927 142C 2591 94EF D9D8