{"action":"opened","issue":{"url":"https://api.github.com/repos/dis2/bls12/issues/2","repository_url":"https://api.github.com/repos/dis2/bls12","labels_url":"https://api.github.com/repos/dis2/bls12/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/dis2/bls12/issues/2/comments","events_url":"https://api.github.com/repos/dis2/bls12/issues/2/events","html_url":"https://github.com/dis2/bls12/issues/2","id":307915143,"number":2,"title":"Enforce size when unmarshalling uncompressed points","user":{"login":"ValarDragon","id":6440154,"avatar_url":"https://avatars1.githubusercontent.com/u/6440154?v=4","gravatar_id":"","url":"https://api.github.com/users/ValarDragon","html_url":"https://github.com/ValarDragon","followers_url":"https://api.github.com/users/ValarDragon/followers","following_url":"https://api.github.com/users/ValarDragon/following{/other_user}","gists_url":"https://api.github.com/users/ValarDragon/gists{/gist_id}","starred_url":"https://api.github.com/users/ValarDragon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ValarDragon/subscriptions","organizations_url":"https://api.github.com/users/ValarDragon/orgs","repos_url":"https://api.github.com/users/ValarDragon/repos","events_url":"https://api.github.com/users/ValarDragon/events{/privacy}","received_events_url":"https://api.github.com/users/ValarDragon/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-23T06:22:35Z","updated_at":"2018-03-23T06:22:35Z","closed_at":null,"author_association":"NONE","body":"Currently you can in certain scenarios unmarshal an uncompressed point of the incorrect size.\r\nOne such an example on G1 is the point which marshals to (in uncompressed form): \r\n`[15 133 139 158 48 39 204 194 85 143 234 84 72 108 17 55 40 63 225 173 59 232 133 119 242 104 119 78 193 154 199 76 209 47 128 145 34 95 166 62 1 52 93 176 49 82 172 198 11 1 91 45 211 233 89 158 15 160 59 146 255 231 183 95 222 238 59 140 51 54 4 31 113 164 45 217 126 151 112 149 141 130 230 190 165 117 138 186 110 58 55 140 228 77 232 155]`\r\n\r\nIf the first byte of that is removed, it will still unmarshal even though it is of the wrong size according to the specification for bls12-381 serialization. (https://github.com/ebfull/pairing/tree/master/src/bls12_381)\r\n\r\nCould it be checked that the size of what is being unmarshalled matches the compressed or uncompressed size exactly?"}}
{"actor":{"display_login":"ValarDragon"}}