Skip to content

Twist Trap

Invalid-curve and twist attacks ยท RFC 7748

Send chosen points to an elliptic-curve key holder and observe which input checks prevent subgroup leakage.