People who code: we want your input. Take the Survey

New answers tagged

3

For example, I could use: If the discrete log is already backdoored with the standard base point $G$, then changing the base to another point on the curve doesn't solve this issue. Let you know that $G$ is backdoored and you changed the base to $G' \neq G$. Then the entity that created the backdoor can use this to find the private keys. Let $P = [k]G'$ be a ...


1

Normally, coin tosses are random variables $r$ drawn (usually uniformly unless otherwise specified) from a finite set $R.$ In this case however $R=g^{k^{-1}}$ where $r=H’(R)$ and $H’$ is a hash function from a cyclic group of prime order into $Z_q$ and $k$ is a uniformly distributed random variable from $Z_q.$ So $R$ is a random variable which is a function ...


0

If by "I'm working in a constrained hardware environment" you mean that you are developing a hardware wallet then yes, deterministic signatures matter a lot! With non-deterministic signatures, your hardware wallet might be leaking key material. The only way for users to verify this is not happening is to try your brand wallet with deterministically ...


Top 50 recent answers are included