New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

https://paulmillr.com/posts/deterministic-signatures/

whoa, that's wild! 😮 gonna check out your blog for sure, paul. always learning something new from you! 🙌🔐

Security, austrian school. Developing noble cryptography: audited js libraries for web3. https://paulmillr.com/noble