Skip to main content

All Questions

Filter by
Sorted by
Tagged with
3 votes
1 answer
110 views

How would a malicious group of co-signers use a hash collision to sign an unintended message?

According to BIP340: However, a major drawback of this optimization is that finding collisions in a short hash function is easy. This complicates the implementation of secure signing protocols in ...
scottmsul's user avatar