Worth mentioning that ECDSA suffers the same problems as classic DSA if you reuse a nonce (for different messages). This lead to the extraction of a Playstation

Worth mentioning that ECDSA suffers the same problems as classic DSA if you reuse a nonce (for different messages). This lead to the extraction of a Playstation 3 signing key. Why does DSA suck? Patents. It was designed to work around patents in the much simpler and Schnorr signature scheme (which is immune to nonce reuse due to the way message content and nonce are hashed together).