4 ms·
That point when you realise you're responsible for the data in someones presentation.
by dcousens 10y ago
That point when you realise you're responsible for the data in someones presentation.
- ryan-c 10y agoAny details you'd be willing to share?
- dcousens 10y agoThe graph displayed of ECDSA duplicate r-value exploits shows 2 prominent "columns" of addresses, the latter of which was in April/May 2014. That latter column was directly related to a commit that I made to the bitcoinjs-lib master branch (which was undergoing major refactoring at the time). The commit that fixed the issue: https://github.com/bitcoinjs/bitcoinjs-lib/commit/bc37e650148db2e5d947c84e51167cbd8f37b8a6#diff-dac4a0f35ab99ccdd0234335f29bae2bR63 https://github.com/bitcoinjs/bitcoinjs-lib/commit/bc37e65014... The issue itself was that a `Buffer` was being interpreted as `0` by crypto-js's cryptographic hash functions in our implementation of RFC6979, thus creating a case of duplicate `k` values. The second most interesting point was the majority of the funds (>20k USD) stolen from Counterparty (the only known users of our master branch at that time) was returned by a grey hat.