Quote from: o_e_l_e_o on Today at 10:22:45 AM

Quote from: JuleAdka on Today at 12:09:29 AM

If this key is reused, is even possible to find your private key(and this already happened in the past).

This is usually the case, for example, when considering signing transactions or signing messages and reusing the k value. In such cases of re-used and non-random k values, it is possible to derive the associated private key, as you say.

This is not the case here, however. Encrypting a message in this way only requires knowledge of the public key, not the private key. Otherwise, how would you encrypt a message to send to someone else? There is no way to derive the private key from this encryption process, even with reuse of the ephemeral key.

Yes, you are right. Sorry! Grin

Re-using ephemeral keys are a problem only wen signing, not encrypting. Maybe they take it as a good practice?