[Cryptech Tech] why not deterministic ecdsa?
Leif Johansson
leifj at sunet.se
Sun Sep 6 20:53:00 UTC 2015
On 2015-09-06 22:28, Rob Austein wrote:
> At Sun, 06 Sep 2015 22:17:25 +0200, Simon Josefsson wrote:
>>
>> Am I reading this right that your ECDSA code generated a fresh k
>> from your TRNG?
>
> Yes. Given that we think the TRNG is fairly solid, this is not
> particularly expensive.
>
>> You want to read and consider RFC 6979.
>
> Read it a while back. Haven't seen anything suggesting serious
> uptake, but will defer to the usual suspects if they have advice.
I believe it is less critical if you trust your rng, right?
More information about the Tech
mailing list