◄ Wiki / Crypto
low-order-point rejection
A safety check that refuses certain malicious inputs which would weaken elliptic-curve key exchange.
In curve-based cryptography like X25519, an attacker can send specially chosen 'low-order' points that force the shared secret into a tiny, guessable set of values. Low-order-point rejection detects and discards these inputs so the key exchange stays strong. It's a standard hardening step for secure Diffie-Hellman on elliptic curves.
See also
- key materialThe actual secret bytes that make up a cryptographic key.
- key scheduleThe step-by-step process that derives the actual encryption keys used in a session from an initial shared secret.
- leaf certificateThe specific certificate that proves a single website's identity, at the bottom of a chain of trust.