Reputation
312
Top tag
Next privilege 350 Rep.
Access review queues
Badges
2 6
Impact
~10k people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Oct
15
comment Does AES have any fixed-points?
How could it be "made to have fewer fixed points than expected" without introducing some exploitable structure? You had an idea in mind?
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
Can you give a reference for a technique which would exploit such weak partial information on k? I think I recall seeing an attack which required several bits fixed.
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
What a coincidence that you're the author of the relevant RFC! It's "expired" - what happened to it? You make a good point about wanting not to have to worry about detecting bad quality random numbers.
Sep
29
comment Can ECDSA signatures be safely made “deterministic”?
Thanks for the references. The EdDSA paper refers to setting k as the hash of the message and private key which for many applications would be faster and superior to my original proposal.