mirror of
https://git.tartarus.org/simon/putty.git
synced 2025-07-16 10:37:38 -05:00

In the key generation step where we invert 3f in the field Z_q/<x^p-x-1>, I was carefully checking for failure, on the grounds that even a field does have _one_ non-invertible element, namely zero. But I forgot that we'd generated f in such a way that it can't possibly be zero. So that failure check is pointless. (However, I've retained it in the form of an assertion.)