Skip to content

Add security remark Javadoc to GroupElement etc. #86

Open
@rheitjoh

Description

@rheitjoh

(This issue has been imported from the Gitlab repository because it seems to not have been addressed yet)

Original Text (Issue 186)

Add Javadoc to GroupElement etc. It should state that

  • for op, we assume that right hand side to be in the right group, otherwise behavior is undefined (and may be a security risk)
  • document reasons why getElement(Represenatation) should be used for untrusted Representations of GroupElements, and make clear that you would never trust Group representations from an untrusted source. (Basically, tell people not to send groups alongside their elements just so everything is neatly StandaloneRepresentable).
  • Add some remarks about 3rd party serialization frameworks that use reflection magic to serialize group elements. Not a good idea. It would not be a breach of contract if each group element stored the exponents from which it was formed (i.e. you'd end up with some dlogs in your serialization). More realistically, we do have to normalize elements before sending them. getRepresentation() makes sure that it's safe to send.

Metadata

Metadata

Assignees

No one assigned

    Labels

    GitlabOld issue moved over from Gitlab repository

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions