meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 7 months |
| seen | Mar 30 '12 at 23:55 | |
| stats | profile views | 11 |
|
Oct 15 |
comment |
Does AES have any fixed-points? How could it be "made to have fewer fixed points than expected" without introducing some exploitable structure? You had an idea in mind? |
|
Sep 29 |
comment |
Can ECDSA signatures be safely made “deterministic”? Can you give a reference for a technique which would exploit such weak partial information on k? I think I recall seeing an attack which required several bits fixed. |
|
Sep 29 |
comment |
Can ECDSA signatures be safely made “deterministic”? What a coincidence that you're the author of the relevant RFC! It's "expired" - what happened to it? You make a good point about wanting not to have to worry about detecting bad quality random numbers. |
|
Sep 29 |
comment |
Can ECDSA signatures be safely made “deterministic”? Thanks for the references. The EdDSA paper refers to setting k as the hash of the message and private key which for many applications would be faster and superior to my original proposal. |
