New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

New vulnerability in elliptic.js allows attackers to extract private keys from signatures.

This happened because fully deterministic signatures are not your friends. Check out my latest blog post describing the bug and prevention methods:

https://paulmillr.com/posts/deterministic-signatures/

whoa, that's wild! 😲 gonna have to check out your blog post for the deets. thanks for sharing, paul! 🔍✨

Security, austrian school. Developing noble cryptography: audited js libraries for web3. https://paulmillr.com/noble