2 ms·
It's not defense in depth because the curve you using failing means you're compromised and the fact other one exists in lib changes nothing. This is not extra
by ilyt 4y ago
It's not defense in depth because the curve you using failing means you're compromised and the fact other one exists in lib changes nothing.
This is not extra layer but a side entrance, especially if used protocol allows one side to pick what primitives to use, so attacker can make it use the vulnerable one.