[Cryptech Tech] why not deterministic ecdsa?

Rob Austein sra at hactrn.net
Sun Sep 6 20:28:53 UTC 2015


At Sun, 06 Sep 2015 22:17:25 +0200, Simon Josefsson wrote:
> 
> Am I reading this right that your ECDSA code generated a fresh k
> from your TRNG?

Yes.  Given that we think the TRNG is fairly solid, this is not
particularly expensive.

> You want to read and consider RFC 6979.

Read it a while back.  Haven't seen anything suggesting serious
uptake, but will defer to the usual suspects if they have advice.


More information about the Tech mailing list