intel/tinycrypt

ECC implementation is not compliant to FIPS 186 Appendix B

Closed this issue · 1 comments

ECC implementation is not compliant to FIPS 186. Appendix B.4 allows either generating 64 extra bits and computing c=random mod n, or choosing random bit strings len(n) until a value less than n-2 is found and used as c. This function is only compliant if it fails for a random bit string with integer value less than n-2 is passed in.

Latest commits should fix this.