Re:PuTTY vulnerability vuln-p521-bias
by rainsford on Monday April 15, 2024 @06:32PM
(#40046453)
> As you can probably see, I just love this bug class, is all.
I agree! DSA nonce issues are a great class of cryptographic bug in that they're sort of weirdly unexpected failure properties when you first hear about it.
Re:PuTTY vulnerability vuln-p521-bias
by nmadden on Tuesday April 16, 2024 @02:58AM
(#40049079)
And then you find out about special soundness and that this is not only expected behaviour, but crucial to the security definitions and you realise that signatures are absolutely cursed.
I agree! DSA nonce issues are a great class of cryptographic bug in that they're sort of weirdly unexpected failure properties when you first hear about it.