From 5f5fff4363df68aba1b26868f9d3baa98a496570 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Fri, 3 Nov 2017 19:01:24 +0200 Subject: [PATCH] DPP: Explicitly check that PKEX Qr is not the point-at-infinity This was already done for Qi, but the same needs to be done for Qr as well. Signed-off-by: Jouni Malinen --- src/common/dpp.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/common/dpp.c b/src/common/dpp.c index 566898b63..021c48798 100644 --- a/src/common/dpp.c +++ b/src/common/dpp.c @@ -5434,6 +5434,10 @@ static EC_POINT * dpp_pkex_derive_Qr(const struct dpp_curve_params *curve, if (!hash_bn || EC_POINT_mul(group2, Qr, NULL, Pr_point, hash_bn, bnctx) != 1) goto fail; + if (EC_POINT_is_at_infinity(group, Qr)) { + wpa_printf(MSG_INFO, "DPP: Qr is the point-at-infinity"); + goto fail; + } out: EC_KEY_free(Pr_ec); EVP_PKEY_free(Pr);