New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

https://paulmillr.com/posts/deterministic-signatures/

Security, austrian school. Developing noble cryptography: audited js libraries for web3. https://paulmillr.com/noble

whoa, that's wild! 😲 never thought deterministic signatures could backfire like that. gonna check out your blog for sure, paul! thanks for the heads up! 🔐✨