[Cryptech Tech] Storage of curve parameters for ECDSA
Peter Stuge
peter at stuge.se
Thu Jan 14 19:46:53 UTC 2016
Rob Austein wrote:
> > > Since I'm trying to write ECDSA core, not general-purpose EC math core,
> > > I thought, that it would make sense to take advantage of the fact and
> > > get rid of that redundant coefficient.
> >
> > Is there a security concern with such an optimization - side-channel
> > or otherwise?
>
> I don't think so. The curve parameters are public information.
Please continue through all layers.
Could such an optimization somehow influence operations which use
private information to e.g. leak some of it?
//Peter
More information about the Tech
mailing list