Post
Topic
Board Development & Technical Discussion
Re: Bad signatures leading to 55.82152538 BTC theft (so far)
by
gmaxwell
on 20/08/2013, 09:37:51 UTC
By the way its not really an upper limit: n+1 is a pretty valid private key, it's just that it's equal to 1 (as n+1 mod n == 1 mod n)
If you generate that way you will end up with keys which are not equiprobable. The difference from uniform is very small, but its a certificational weakness you should avoid.