3 ms·
I spot no test or comment in the code on why this assertion is important.
by MrBuddyCasino 5y ago
I spot no test or comment in the code on why this assertion is important.
- bertman 5y agoIt's literally what the whole bug is about. From OP's article: >This is why the very first check in the ECDSA verification algorithm is to ensure that r and s are both >= 1. Guess which check Java forgot?
- MrBuddyCasino 5y agoYes I just think it’s insane they fixed it without adding a test or comment.