elliptic curve vulnerability