square / go-jose / 764

90%

master: 90%

Pull #245

travis-ci

Pad z value to proper size after P-521 scalar multiplication.

Fixes issue #228. After calling ScalarMult for P-521, the output can
sometimes be 65 bytes long instead of 66 bytes. This happens when the
first bit of the computed value is zero. Calling z.Bytes() on the big
integer will then omit the leading zero, giving us a 65-byte value.

This subsequently causes the shared secret computation to be incorrect
as the input into the KDF function should always be 66 bytes which is
the full length for a P-521 coordinate value.

16 of 16 new or added lines in 1 file covered. (100.0%)

2945 of 3264 relevant lines covered (90.23%)

1856.71 hits per line