New answers tagged nonce
1
Yes, it's normal practice to generate an ECDSA signature from message $M$ (or it's hash $H(M)$ ), private key $d_U$ and curve parameters, without being given a nonce as input. The nonce $k$ is built as part of the signing process, in one of two ways:
It's generated a secret integer $k$ uniformly in $[1,n)$ using a true random number generator with secret ...
Top 50 recent answers are included