tree cc46c7a5616be2b0fb8830a16d055e3547566f30
parent 604320f8a3260a9d37fd4e3635963cb5536d52bd
author David Benjamin <davidben@google.com> 1578414798 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1578416667 +0000

Clarify that we perform the point-on-curve check.

Points not on the curve are invalid inputs to EC functions, so EC
implementations should check the curve equation whenever importing
points from the caller. Sadly, a number of implementations, including
older OpenSSLs, miss this important check, so careful callers want this
clarified in the documentation.

Also update the note about OpenSSL to reflect the current behavior.

While I'm here, const-correct EC_KEY_key2buf.

Change-Id: I6fde5c823c4f3f6b141ba1566f427d96cd5881df
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/39364
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>