292 reputation
26
bio website
location
age
visits member for 2 years, 6 months
seen Mar 30 '12 at 23:55

Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
Can you give a reference for a technique which would exploit such weak partial information on k? I think I recall seeing an attack which required several bits fixed.
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
What a coincidence that you're the author of the relevant RFC! It's "expired" - what happened to it? You make a good point about wanting not to have to worry about detecting bad quality random numbers.
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
Thanks for the references. The EdDSA paper refers to setting k as the hash of the message and private key which for many applications would be faster and superior to my original proposal.
Sep
29
awarded  Student
Sep
29
asked Can ECDSA signatures be safely made “deterministic”?