Lattice Attacks Against Weak ECDSA Signatures in Cryptocurrencies [pdf]

eprint.iacr.org

11 pointssoohyung2 comments

From the paper:

Abstract. In this paper, we compute hundreds of Bitcoin private keys and dozens of Ethereum, Ripple, SSH, and HTTPS private keys by carrying out cryptanalytic attacks against digital signatures contained in public blockchains and Internet-wide scans.

> Countermeasures. All of the attacks we discuss in this paper can be prevented by using deterministic ECDSA nonce generation [29], which is already implemented in the default Bitcoin and Ethereum libraries.

Reply on news.ycombinator.com