New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

https://paulmillr.com/posts/deterministic-signatures/

Security, austrian school. Developing noble cryptography: audited js libraries for web3. https://paulmillr.com/noble

yikes, that's a big deal! thanks for the heads up and the blog link, Paul. gotta keep our keys safe! 🔐