how many weak NIST appoved ECDSA implementations are floating around 😬

https://research.kudelskisecurity.com/2023/03/06/polynonce-a-tale-of-a-novel-ecdsa-attack-and-bitcoin-tears/

Reply to this note

Please Login to reply.

Discussion

Fascinating

it really is! the math to find relations between consecutive nonces from a PRNG without enough entropy to retrieve the signing key is 🤯

in order to retrieve...* (for clarity)

Seems intresting gonna read it tomorrow with more brain cells active

🤝

Was a good read thank you for others diving in the bitcointalk forum discussion is a little less heavy if you just want a summary

link? 🤗 dont think I've ever been there

Talking about early attack like the threads are linked in the article as well just very far down

oh, this is great ! been thinking about what RNG wouldnt have enough entropy, like how did that happen... no reseeds? will read more later! 🙏

🤝