CVE-2023-24532 Incorrect calculation on P256 curves in crypto/internal/nistec

2023-03-0819:40:45

github.com

cve-2023-24532

p256 curve

scalarmult

scalarbasemult

crypto/internal/nistec

incorrect result

unreduced scalars

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

42.1%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

CNA Affected

[
  {
    "vendor": "Go standard library",
    "product": "crypto/internal/nistec",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.19.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.20.0-0",
        "lessThan": "1.20.2",
        "versionType": "semver"
      }
    ],
    "packageName": "crypto/internal/nistec",
    "collectionURL": "https://pkg.go.dev",
    "defaultStatus": "unaffected",
    "programRoutines": [
      {
        "name": "P256Point.ScalarBaseMult"
      },
      {
        "name": "P256Point.ScalarMult"
      },
      {
        "name": "P256OrdInverse"
      }
    ]
  }
]