Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Student
Impact
~180 people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
May
11
comment Sane implementations of Bitcoin cryptography routines w.r.t. side-channel attacks
It's more meant like it's known for being an over-sized mess that people tend to include because there's no real alternative :-/
Mar
17
comment How do I unpack the x and y values from the BITSTRING in a DER ECDSA public key?
Link is broken: The PDF can be found via the Internet Archive: web.archive.org/web/20140701131201/http://www.secg.org/…
Mar
12
awarded  Student
Mar
10
comment Sane implementations of Bitcoin cryptography routines w.r.t. side-channel attacks
In Bitcoin, only the address RIPEMD(SHA256(public-key) and its Base58Check encoding are public. The public key is only revealed when a transaction is created that spends coins that were previously sent to the address. I agree with you, that ECDSA signing is the major operation to protect, but ECDSA scalar multiplication is also important as a Bitcoin wallet usually generates a new keypair for every transaction to receive the change. Regarding ECDSA side channels: a second app in background could perform a cache-based attack: eprint.iacr.org/2014/161.pdf
Mar
10
asked Sane implementations of Bitcoin cryptography routines w.r.t. side-channel attacks
Feb
1
awarded  Supporter