Suppose ECDSA is used without hashing the message, but directly using a short message (say 10-bytes long) as the value
z (using the definitions at http://en.wikipedia.org/wiki/Elliptic_Curve_DSA) because we need extremely fast signing with ECDSA in a specific embedded platform. We also pre-compute
Are there any weak
z values such that the signature can be forged ?