302 reputation
26
bio website
location
age
visits member for 3 years
seen Mar 30 '12 at 23:55

Oct
15
comment Does AES have any fixed-points?
How could it be "made to have fewer fixed points than expected" without introducing some exploitable structure? You had an idea in mind?
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
Can you give a reference for a technique which would exploit such weak partial information on k? I think I recall seeing an attack which required several bits fixed.
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
What a coincidence that you're the author of the relevant RFC! It's "expired" - what happened to it? You make a good point about wanting not to have to worry about detecting bad quality random numbers.
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
Thanks for the references. The EdDSA paper refers to setting k as the hash of the message and private key which for many applications would be faster and superior to my original proposal.