network profile
| bio | website | fh-wedel.de/~an/crypto/academic_signature_key.html |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 3 months |
| seen | Jan 24 '12 at 20:14 | |
| stats | profile views | 1 |
|
Jan 24 |
comment |
Can ECDSA signatures be safely made “deterministic”? I admit you are right ByteCoin, my suggestion wouldn't work. Thinking about it, I agree that your scheme would work. Still, it would remove one degree of freedom from the procedure and you would be using the secret key for two different purposes within the same procedure which "feels dangerous". Out of paranoia I would implement it with an independent second secret key component used for just this purpose. |
|
Jan 24 |
comment |
Can ECDSA signatures be safely made “deterministic”? @ByteCoin The security of your procedure depends on the onewayedness of the hash involved in deriving the k from message and secret key. If this is about overall security it seems to come down to the question whether this property of the hash is easier to defend (or prove) than the randomness of the (P)RNG. |
|
Jan 23 |
answered | Can ECDSA signatures be safely made “deterministic”? |
