scalarmult() vulnerable to degenerate public keys

The scalarmult function included in previous versions of this crate accepted all-zero public keys, for which the resulting Diffie-Hellman shared secret will always be zero regardless of the private key used. This issue was fixed by checking for this class of keys and rejecting them if they are us...

PT-2017-10866

Name of the Vulnerable Software and Affected Versions sodiumoxide versions 0.0.13 and older Description The issue concerns the scalarmult function, which accepted all-zero public keys. This results in the Diffie-Hellman shared secret always being zero, regardless of the private key used...