Michael Anders

Unregistered less info
1 reputation
bio website fh-wedel.de/~an/crypto/academic_signature_key.html
location
age
visits member for 2 years, 2 months
seen Jan 24 '12 at 20:14

Jan
24
comment Can ECDSA signatures be safely made “deterministic”?
I admit you are right ByteCoin, my suggestion wouldn't work. Thinking about it, I agree that your scheme would work. Still, it would remove one degree of freedom from the procedure and you would be using the secret key for two different purposes within the same procedure which "feels dangerous". Out of paranoia I would implement it with an independent second secret key component used for just this purpose.
Jan
24
comment Can ECDSA signatures be safely made “deterministic”?
@ByteCoin The security of your procedure depends on the onewayedness of the hash involved in deriving the k from message and secret key. If this is about overall security it seems to come down to the question whether this property of the hash is easier to defend (or prove) than the randomness of the (P)RNG.
Jan
23
answered Can ECDSA signatures be safely made “deterministic”?