CVE-2016-1000340

Name of the Vulnerable Software and Affected Versions Bouncy Castle JCE Provider versions 1.51 through 1.55

Description A carry propagation bug was introduced in the implementation of squaring for several raw math classes, which are used by custom elliptic curve implementations. This bug could have led to rare spurious calculations for elliptic curve scalar multiplications. However, such errors would have been detected with high probability by the output validation for scalar multipliers.

Recommendations For Bouncy Castle JCE Provider versions 1.51 through 1.55, update to a version that includes the fix for the carry propagation bug in the raw math classes.