By: Adwoa Opare-Ansah, Jaz Parmar, & Simon Truong
Aide:
Walkthrough:
Join the Conversation
Leave a comment
You must be logged in to post a comment.
Powered by UCalgary
The views, information, or opinions expressed on this site are solely those of the individual(s) involved and do not necessarily represent the position of the University of Calgary as an institution.
Website Terms & Conditions | Privacy Policy | Copyright © 2024
Discussion Questions:
1. What is an invalid curve attack, and how does it exploit weak implementations?
2. How does an invalid curve attack differ from a direct attack on the Elliptic Curve Discrete Logarithm Problem?
3. What measures can be taken to prevent invalid-curve attacks?
4. How can a strong mathematical algorithm become insecure when implemented incorrectly, and what does this teach us about the importance of secure software development?
An invalid curve attack is a cryptographic attack against poorly implemented elliptic curve cryptography. The attacker takes advantage and tricks the victim into using points that are not actually on the intended curve