Post
Topic
Board Armory
Re: Armory - Discussion Thread
by
Roy Badami
on 12/08/2013, 22:02:56 UTC
That's an amateurish problem that only happens with custom implementations of ECDSA.  You have to use a random number when calculating the signature, and every basic implementation of ECDSA guarantees this (at least to the extent of the randomness it can pull from your system).  The problem there was people hand-rolling their own and  not realizing that reusing "random" numbers when signing different messages with the same key reveals the private key.

What do you think of this?  Is it safe?  (Or is it too new to say?)

https://tools.ietf.org/html/rfc6979