35 ms·
He did not (he even said they've recovered 10,000+ private keys!). If a nonce is reused across different signatures or just known because randomness is bad, one
by Moodles 5y ago
He did not (he even said they've recovered 10,000+ private keys!). If a nonce is reused across different signatures or just known because randomness is bad, one can compromise the private key used in making the signature.
- nullc 5y agoIt doesn't even have to be known completely! Almost deviation in the expected properties of the nonce severely damages security.