Java’s implementation of ECDSA signature verification didn’t check if R or S were zero, so you could produce a signature value in which they are both 0 (appropriately encoded) and Java would ...

A signature of r=0 and s=0 is always valid, no private key needed. The Java code left out the sanity-check for zeroes in the signature, so any Java program using ECDSA signatures can be defeated ...

I've got an odd issue that I was hoping the Hive Mind might shed some light on. I'm working with Morphia which is the Java MongoDB API. When peforming a query, there is a method called ...