PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ECDSA: Handle with Care

blog.trailofbits.com | blog | #cryptography | #nonce | #digital-signatures | #ecdsa | #nonce-reuse | #lattice-attacks | #signatures | #key-recovery
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

ECDSA is fragile: reused, leaked, or biased nonces let attackers recover private keys, sometimes with under 100 lines of Python using lattice attacks. The post catalogs real-world failures and fixes.
Published
Collected

Related coverage

blog · blog.trailofbits.com
What we learned reviewing one of the first DKLs23 libraries from Silence Laboratories
An audit of Silent Shard—one of the first DKLs23 threshold-signature libraries, built on oblivious transfer instead of Paillier—uncovered flaws enabling key destruction attacks, promptly fixed.
blog · blog.trailofbits.com
The cryptography behind passkeys
Trail of Bits breaks down passkey cryptography: WebAuthn challenge-response signatures, why server-held public keys leak nothing, and how extensions enable key generation and certificate storage.
blog · blog.trailofbits.com
Friends don’t let friends reuse IVs
Trail of Bits recounts a subtle crypto bug: parties in a threshold signature scheme never reused nonces, but identical nonce sequences across senders collided, enabling tampering and framing attacks.
blog · blog.trailofbits.com
We wrote the code, and the code won
Following NIST's post-quantum standards announcement, Trail of Bits released a pure-Rust SLH-DSA implementation, merged into RustCrypto, to ease the shift to quantum-resistant signatures.
blog · blog.trailofbits.com
Announcing two new LMS libraries
Trail of Bits released pure Rust and Go implementations of LMS, a NIST-standardized post-quantum signature scheme, integrating the Rust crate with RustCrypto and the Go library with Sigstore.
blog · blog.trailofbits.com
A trail of flipping bits
Trail of Bits shows how an AES-GCM forbidden attack can flip bits in Shamir-split private key shards, iteratively recovering an ECDSA key protected by a trusted execution environment.
Back