Subject: [OAUTH-WG] reference for invalid point attack [-jwt-bcp] ?

From: =JeffH <[email-masked]>
Date: Mon, 30 Apr 2018 11:44:18 -0700

In search of CurveSwap:
Measuring elliptic curve implementations in the wild
Luke Valenta, Nick Sullivan, Antonio Sanso, Nadia Heninger
https://eprint.iacr.org/2018/298.pdf   (see section 7.1)

..is perhaps a suitable reference for section 3.4 of -jwt-bcp ?

https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-01#section-3.4

HTH,
=JeffH