Modern & Applied Cryptography Breakers Advanced
Recovering a DSA or ECDSA Key from a Reused Nonce
DSA and ECDSA stake everything on a secret random nonce that must never repeat. Sign two messages with the same nonce and the private key drops out with a little algebra. This guide runs the real attack against real DSA and secp256k1, the same flaw that broke the PS3 and drained Bitcoin wallets.
12 min read