Re: [jose] Preventing invalid curve attacks at EC JWK construction / parse time

Nathaniel McCallum <npmccallum@redhat.com> Wed, 19 April 2017 11:57 UTC

MIME-Version: 1.0
In-Reply-To: <ad430c4f-a0f0-1d20-fafa-bdb4ca573193@connect2id.com>
References: <ad430c4f-a0f0-1d20-fafa-bdb4ca573193@connect2id.com>
From: Nathaniel McCallum <npmccallum@redhat.com>
Date: Wed, 19 Apr 2017 07:57:44 -0400
Message-ID: <CAOASepNquKnHSYQg6+twPdWdjhQ=CMom0PXYCJu41ViVGQ6Q9g@mail.gmail.com>
To: Vladimir Dzhuvinov <vladimir@connect2id.com>
Cc: "jose@ietf.org" <jose@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose/NwEosirVUk6NwQQ9tEHNHDVpGJs>
Subject: Re: [jose] Preventing invalid curve attacks at EC JWK construction / parse time
Precedence: list

http://github.com/latchset/jose does exactly this. I also recommend
other implementations do the same.

On Wed, Apr 19, 2017 at 5:43 AM, Vladimir Dzhuvinov
<vladimir@connect2id.com> wrote:
> JOSE lib maintainers could consider adding a curve check at EC JWK
> construction / parse time. This will stop an invalid curve attack early
> in its tracks, when the JWE message is being parsed, so the invalid EC
> JWK will not even reach the ECDH-ES decryption phase.
>
> This extra validation is now included in Nimbus JOSE+JWT v4.36. I
> suppose it could also prevent other issues with having invalid EC JWK
> around an app.
>
> Cheers,
>
> Vladimir
>
>
>
>
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
>

[jose] Preventing invalid curve attacks at EC JWK… Vladimir Dzhuvinov
Re: [jose] Preventing invalid curve attacks at EC… Nathaniel McCallum