CVE-2022-23003

When computing a shared secret or point multiplication on the NIST P-256 curve that results in an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output may cause an error when used in other operations. This may be...

CVE-2022-23003

CVE-2022-23003 involves computing a shared secret or point multiplication on the NIST P-256 curve where an X coordinate of zero yields an output not properly reduced modulo the P-256 field prime, making it invalid. The documented impact is a potential error or incorrect session-key choice in affe...