weierstrass: prohibit messages longer than 8KB

paulmillr · Nov 22, 2024 · 867b21e · 867b21e
1 parent abd50ac
commit 867b21e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/abstract/weierstrass.ts b/src/abstract/weierstrass.ts
@@ -1010,6 +1010,8 @@ export function weierstrass(curveDef: CurveType): CurveFn {
   const bits2int =
     CURVE.bits2int ||
     function (bytes: Uint8Array): bigint {
+      // Our custom check "just in case"
+      if (bytes.length > 8192) throw new Error('input is too large');
       // For curves with nBitLength % 8 !== 0: bits2octets(bits2octets(m)) !== bits2octets(m)
       // for some cases, since bytes.length * 8 is not actual bitLength.
       const num = ut.bytesToNumberBE(bytes); // check for == u8 done here