Post
Topic
Board Development & Technical Discussion
Merits 1 from 1 user
Re: Bad signatures leading to 55.82152538 BTC theft (so far)
by
dice64
on 11/08/2013, 13:40:13 UTC
⭐ Merited by ETFbitcoin (1)
Hilariously this is how the encryption on the ps3 was broken.

Quote
In December 2010, a group calling itself fail0verflow announced recovery of the ECDSA private key used by Sony to sign software for the PlayStation 3 game console. However, this attack only worked because Sony did not properly implement the algorithm, because k was static instead of random. As pointed out in the signal generation algorithm, this makes d_A solvable and the entire algorithm useless.[4]
http://en.wikipedia.org/wiki/Elliptic_Curve_DSA#Security

They always used a k value of 4, instead of it being random.