Photo by Steve Johnson on Unsplash

Ode To Java And The Point At Infinity

--

And so Java is on the naughty step again. Basically, in Java 15, 16, 17 and 18, it allowed a zero value within the r and s values of an ECDSA signature. As it did not check for a zero value, it allowed gave a validate signature identification for a zero value for r and s. Luckily, languages such as Rust, make it plain that the ECDSA method that r and s are non-zero scalar values:

--

--

Prof Bill Buchanan OBE FRSE
ASecuritySite: When Bob Met Alice

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.