JDK-8189594 : Error in optimized ECC field arithmetic
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Priority: P4
  • Status: Closed
  • Resolution: Duplicate
  • Submitted: 2017-10-17
  • Updated: 2018-05-25
  • Resolved: 2018-05-25
Related Reports
Blocks :  
JDK-7007966 - Add Brainpool ECC support (RFC 5639)
Duplicate :  
JDK-7007966 - Add Brainpool ECC support (RFC 5639)
Description
In ecl_gf_c in the ECC code, there is an error in functions ec_GFp_sub_5 and ec_GFp_sub_6. In the if (borrow) block, there should be (5,6) MP_ADD_CARRY operations for ec_GFp_sub_(5,6) (including the first MP_ADD_CARRY_ZERO). Each of these functions is missing one add/carry operation.

These functions are optimizations that are currently unused. This error will need to be fixed before these functions can be used by new curves (e.g. Brainpool).
Comments
This has been addressed in the changes for the Brainpool enhancement, i.e. JDK-7007966, and thus I am closing this one as duplicate.
25-05-2018
OpenJDK security-dev thread: http://mail.openjdk.java.net/pipermail/security-dev/2017-October/016407.html
17-10-2017