Assessment reports Public findings

Back to Zellic site

Assessment reports>Biconomy Secp256r1>Threat Model>Verification of correctness of elliptic curve arithmetic

GeneralOverview

Findings

Informational (2)

DiscussionImpact of signature inconsistency Addition bug analysis Modular subtraction trick Documentation Possible gas savings in `_jAdd`

Threat ModelWhat are threat models?Secp256r1.sol

Threat ModelVerification of correctness of elliptic curve arithmetic

Audit ResultsSummary

Verification of correctness of elliptic curve arithmetic

We manually verified correctness of the crucial _jAdd and _modifiedJacobianDouble functions. As ground truth for addition on elliptic curves using Jacobian coordinates, we used section 2.6.2 of Washington's textbook on elliptic curves.

Zellic © 2023Back to top ↑