Skip to main content
1 vote

Is it possible to break a DSA with k that increases statically?

Let's start by prettify the formula first, $$r = g^k \pmod q$$ $$s = {{h+xr}\over{k}}$$ The variables $r$ and $s$ are signature components, $x$ is private key, $h$ is message hash. Now 2 signatures: $$...
DannyNiu's user avatar
  • 9,422
1 vote

Generate ANF from SBox

Doing it via a simple and short Python snippet based on the Moebius answer. ...
Gregory Morse's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible