Author

James M Snell <jsnell@cloudflare.com> 2026-03-16 20:11:43 -0700

Parents

dca4887

Tree

03d3bb4

Add EC_KEY_check_key validation on JWK private key import

The raw EC import path validated key consistency via `EC_KEY_check_key`
but the JWK import path did not. A JWK with valid public key
coordinates (x, y) but a private key component (d) that does not
correspond to the public point would be silently accepted, potentially
leading to incorrect signatures or key agreement results.

Add `EC_KEY_check_key` after setting all key components in the JWK
import path, matching the validation already present in the raw import
path.