[Cryptech Tech] why not deterministic ecdsa?

Simon Josefsson simon at josefsson.org
Sun Sep 6 20:17:25 UTC 2015


I was reading https://cryptech.is/ecdsa/ that contains:

   On the one hand, every signature uses a new random number, and, since
   we think we have a pretty good TRNG, this doesn’t give an attacker
   much to work with.

Am I reading this right that your ECDSA code generated a fresh k from
your TRNG?

You want to read and consider RFC 6979.

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 472 bytes
Desc: not available
URL: <https://lists.cryptech.is/archives/tech/attachments/20150906/45a86507/attachment.sig>


More information about the Tech mailing list