bouncycastle: Invalid curve attack allowing to extract private keys

It was found that bouncycastle is vulnerable to an invalid curve attack. An attacker could extract private keys used in elliptic curve cryptography with a few thousand queries...