intel / intel/cryptography-primitives
ippsGFpECSignDSA requires user-supplied nonce
Open
enhancement
help wanted
- Dominant language
- C
- Stars
- 387
- Forks
- 108
- PR merge metrics
- No merged PRs in 30d
Description
The changes to make ECDSA require the user to supply the nonce are a step backwards. Repeating nonces or even slight nonce bias are huge issues in ECDSA and can lead to quite easy private key recover. See for example the [Minerva](https://minerva.crocs.fi.muni.cz) or the [TPM-Scan](https://crocs.fi.muni.cz/_media/publications/pdf/2024-ches-tpmscan.pdf) papers.
Providing such API is dangerous. Making it so that is the only API to make ECDSA signatures is a sure recipe for disaster.
Contributor guide
Assessment
This issue has not been assessed yet.