A Novel Related Nonce Attack for ECDSA

ePrint Report: A Novel Related Nonce Attack for ECDSA

Marco Macchetti

We describe a new related nonce attack able to extract the
original signing key from a small collection of ECDSA signatures generated with weak PRNGs. Under suitable conditions on the modulo order
of the PRNG, we are able to attack linear, quadratic, cubic as well as
arbitrary degree recurrence relations (with unknown coefficients) with
few signatures and in negligible time. We also show that for any collection of randomly …

attack collection conditions ecdsa eprint report extract generated key marco nonce novel order prng report signatures signing under